$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: 9lFG7EkXhztK5H1hdPgmZzfcnzchnP8FAEz1n7thZuM= Subject key identifier: 1D:87:70:DA:30:60:40:F4:19:E2:CA:D1:03:C6:EC:17:BE:B6:55:49 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 6B Signing time: Fri 25 Apr 2025 05:58:03 +0000 Manifest this update: Fri 25 Apr 2025 05:58:02 +0000 Manifest next update: Fri 02 May 2025 05:58:02 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: Tn7QTNS57cVMnKOEib69Ne2j0Jrm4lAkL8xFwLB/B1s=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Apr 25 05:58:02 2025 GMT Not After : May 2 05:58:02 2025 GMT Subject: CN=680b246a-f46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:55:cb:be:4e:0d:94:c4:e2:9d:9c:62:62:b6: f4:f5:9d:d3:9d:2a:fc:ce:c8:ca:8b:b9:01:aa:44: 48:56:e6:2b:35:e5:b5:94:b1:ca:89:c7:e0:01:e0: 0c:fa:81:e5:e4:dd:ac:f7:db:c4:7c:b2:49:a2:69: 77:d7:c7:61:69:0a:5d:10:f6:54:24:fd:cd:a0:87: 64:39:0d:5b:c8:c6:74:32:c2:c3:ff:85:d0:18:84: 02:a8:b9:08:40:09:c4:f2:e4:11:32:13:68:01:53: 3a:2a:8a:0b:dc:23:f2:37:0a:43:cb:ff:b4:d3:72: 13:19:08:f1:c1:e9:f9:10:be:e2:06:61:bb:63:2c: 6a:13:36:c4:69:6b:56:34:5d:b0:9f:2d:1b:59:df: f5:66:50:57:54:ef:5d:1a:3e:cc:4f:2d:27:a4:48: 62:4c:67:52:f7:83:98:a4:ce:8e:bb:45:fa:01:10: 31:e1:df:02:52:af:10:7a:8c:93:e2:65:63:6a:57: ca:08:31:c0:f0:14:58:de:7c:6e:f0:88:25:89:27: 18:74:b2:83:4d:ca:a2:d9:13:05:5a:c8:6b:e0:45: 84:0e:d9:3a:69:db:3c:a7:54:eb:e7:38:1c:03:41: 06:3d:c9:a1:84:84:37:14:36:fd:25:e2:4e:9c:77: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:70:DA:30:60:40:F4:19:E2:CA:D1:03:C6:EC:17:BE:B6:55:49 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e2:76:0f:4c:7b:51:83:4d:5f:12:0f:24:5d:60:ce:51:ce: 0d:10:a8:25:95:fa:13:98:3f:ae:4f:72:51:89:c1:d6:04:74: eb:a7:bc:83:ff:9c:ff:1c:16:76:21:6d:b6:13:e3:b7:50:29: 2e:0e:d0:9f:45:5e:83:d7:2c:9e:1e:2e:6c:c9:e1:95:6a:29: ff:96:d2:a7:95:fc:1d:0f:8b:b3:fc:4e:cf:a2:33:71:dd:32: 98:74:a9:d0:85:6f:22:06:2e:b4:38:b0:31:10:02:44:18:66: 40:cc:e2:12:bf:a8:5f:c0:ba:30:71:87:57:b0:14:7d:ca:69: 39:b8:45:e5:4f:97:17:71:bd:8e:ed:62:01:c4:92:cc:4e:bb: b3:59:cf:7d:3e:95:dc:9d:9c:91:41:90:86:98:04:b2:a0:9f: b1:80:7f:3b:e6:9f:3e:62:33:f2:d2:b7:34:76:70:6c:a0:7e: 8d:1a:2a:cd:3a:01:57:8b:ae:da:b5:56:87:a5:fd:85:b8:94: a3:5d:e0:5b:76:92:6a:14:0e:41:d4:36:ba:46:31:bc:91:5d: d1:ec:3d:9b:38:38:d5:29:ec:0d:7b:2a:1f:80:3f:05:58:ac: b9:ed:0e:d7:51:6c:fc:21:02:48:79:a6:9c:10:ce:83:5f:9f: 4a:0c:31:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjNFNzExMC8GA1UEBRMoQTU5RjdFRTJGQTI3NTkzN0YzRTFDMkRCQTVCQjhGQkY2 M0QzN0MzNDAeFw0yNTA0MjUwNTU4MDJaFw0yNTA1MDIwNTU4MDJaMBgxFjAUBgNV BAMTDTY4MGIyNDZhLWY0NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkVcu+Tg2UxOKdnGJitvT1ndOdKvzOyMqLuQGqREhW5is15bWUscqJx+AB4Az6 geXk3az328R8skmiaXfXx2FpCl0Q9lQk/c2gh2Q5DVvIxnQywsP/hdAYhAKouQhA CcTy5BEyE2gBUzoqigvcI/I3CkPL/7TTchMZCPHB6fkQvuIGYbtjLGoTNsRpa1Y0 XbCfLRtZ3/VmUFdU710aPsxPLSekSGJMZ1L3g5ikzo67RfoBEDHh3wJSrxB6jJPi ZWNqV8oIMcDwFFjefG7wiCWJJxh0soNNyqLZEwVayGvgRYQO2Tpp2zynVOvnOBwD QQY9yaGEhDcUNv0l4k6cd1qzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHYdw2jBg QPQZ4srRA8bsF762VUkwHwYDVR0jBBgwFoAUpZ9+4vonWTfz4cLbpbuPv2PTfDQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2M0U3LzQxQjBDOTg2ODg3 MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZE US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFo5LTR2b25XVGZ6NGNMYnBidVB2MlBUZkRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 M0U3LzQxQjBDOTg2ODg3MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1Rm ejRjTGJwYnVQdjJQVGZEUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHidg9Me1GDTV8SDyRdYM5Rzg0QqCWV+hOYP65PclGJwdYEdOunvIP/ nP8cFnYhbbYT47dQKS4O0J9FXoPXLJ4eLmzJ4ZVqKf+W0qeV/B0Pi7P8Ts+iM3Hd Mph0qdCFbyIGLrQ4sDEQAkQYZkDM4hK/qF/AujBxh1ewFH3KaTm4ReVPlxdxvY7t YgHEksxOu7NZz30+ldydnJFBkIaYBLKgn7GAfzvmnz5iM/LStzR2cGygfo0aKs06 AVeLrtq1Voel/YW4lKNd4Ft2kmoUDkHUNrpGMbyRXdHsPZs4ONUp7A17Kh+APwVY rLntDtdRbPwhAkh5ppwQzoNfn0oMMaw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:11 2025 by rpki-client