$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: Iao5Ytzt1pwgQIPWQlrJBJjKZU3dObVKiiyBCtrYit8= Subject key identifier: 1E:98:27:AC:CB:57:AE:15:7B:E3:4E:49:86:B1:58:94:44:33:34:66 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 0167 Signing time: Fri 25 Apr 2025 03:04:37 +0000 Manifest this update: Fri 25 Apr 2025 03:04:36 +0000 Manifest next update: Fri 02 May 2025 03:04:36 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: 8raI+23Cv9DGf42VSPw7G1pKvFxfKb9bvJxaDf7eIGg=) 2: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: F77Ohmhr+pSmcNMBmLDootHjfm49x1IrVzvlaFQhQZo=) 3: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: T4SsvxhOJ8NmSlYF5F0QyIn0S5EcCqMNYfFfIGZadlw=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: 3jNUoCccmrM56z8z19CQSeUZl708g7HitdvgnX+ByM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Apr 25 03:04:36 2025 GMT Not After : May 2 03:04:36 2025 GMT Subject: CN=680afbc5-ad6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:5c:80:e0:bb:1c:e8:3b:b3:e0:4b:8f:b9: 4f:78:f8:b5:91:84:ee:4d:a2:97:9e:3c:8a:b1:10: f0:28:e4:c9:a6:41:06:61:69:48:67:bb:a2:4d:c5: 43:a3:d3:1d:2c:54:cd:94:5b:48:4f:7f:f0:ee:dd: 9b:22:82:76:1d:96:24:f8:73:69:65:34:66:18:73: ea:b2:78:48:79:58:44:6d:43:c6:92:a7:29:78:df: 61:d0:de:30:82:c1:ca:6d:f9:b2:44:8f:35:d8:9d: e2:26:c0:30:cd:ed:da:3f:b6:d6:98:6e:8e:c2:44: 78:cc:86:97:b4:b6:65:48:1e:91:f9:17:01:5d:26: e4:1a:08:31:d2:2a:b2:33:84:7d:8c:eb:88:ec:ea: 0f:c5:b9:6d:9b:54:b5:c3:4b:ff:ca:59:9b:be:ea: 6d:13:35:a2:53:e6:68:ff:02:55:4c:bb:58:38:82: 10:64:41:06:83:5a:c4:56:3e:b3:d4:e8:32:87:a7: a8:d9:ca:6e:32:a6:90:2c:d7:d7:af:c7:72:9d:af: 92:30:35:fc:91:38:8c:24:ce:40:2e:46:a5:73:fc: 1a:40:62:a8:31:3a:4f:d8:48:cf:78:3d:b2:54:f3: ab:10:bd:45:01:f0:aa:26:ed:e2:50:c4:68:13:69: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:98:27:AC:CB:57:AE:15:7B:E3:4E:49:86:B1:58:94:44:33:34:66 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:d2:3e:95:58:f6:be:8b:2e:af:c6:6f:a3:1b:f2:82:31: 22:24:96:c7:1c:31:0b:a8:23:86:71:10:23:74:b1:da:00:68: b9:8b:56:d2:20:00:53:a2:c5:8b:05:ed:2e:cc:7b:aa:6e:f9: 47:5c:79:3b:35:70:5a:17:66:a2:5d:91:05:87:ba:b9:4d:96: 3e:af:f3:e9:26:6b:61:ce:e5:40:2a:79:ec:21:22:10:c7:a9: 01:55:6c:ba:33:48:35:f3:be:cf:bb:21:30:6a:1a:5c:60:3e: 9e:7c:4d:bc:d4:f4:6c:72:c6:f3:7e:15:88:33:d5:d5:3c:50: 18:70:87:1d:13:2d:07:b0:8f:8d:1c:c7:fb:e6:06:ec:24:bd: 4c:eb:9e:7d:84:6d:9d:b3:79:ee:f5:6d:7e:b5:b4:a6:e4:ba: cb:70:d1:21:74:e7:49:62:f3:96:62:81:30:2d:7f:6d:8c:ff: 39:4d:d8:c6:90:db:f2:20:3c:62:02:8f:e5:14:55:c9:2f:64: 46:ac:c0:e2:18:a6:e5:e0:1b:f9:3b:9b:6e:56:ae:b9:a9:d1: 2c:96:69:32:ac:8c:cd:dc:9e:2c:0b:4c:a0:4e:05:50:8a:66: 56:08:1a:e2:f3:11:00:5b:bf:1f:a5:00:8b:74:85:fb:f0:ee: ea:0a:4d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjUwNDI1MDMwNDM2WhcNMjUwNTAyMDMwNDM2WjAYMRYwFAYD VQQDEw02ODBhZmJjNS1hZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I9cgOC7HOg7s+BLj7lPePi1kYTuTaKXnjyKsRDwKOTJpkEGYWlIZ7uiTcVD o9MdLFTNlFtIT3/w7t2bIoJ2HZYk+HNpZTRmGHPqsnhIeVhEbUPGkqcpeN9h0N4w gsHKbfmyRI812J3iJsAwze3aP7bWmG6OwkR4zIaXtLZlSB6R+RcBXSbkGggx0iqy M4R9jOuI7OoPxbltm1S1w0v/ylmbvuptEzWiU+Zo/wJVTLtYOIIQZEEGg1rEVj6z 1Ogyh6eo2cpuMqaQLNfXr8dyna+SMDX8kTiMJM5ALkalc/waQGKoMTpP2EjPeD2y VPOrEL1FAfCqJu3iUMRoE2kqGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6YJ6zL V64Ve+NOSYaxWJREMzRmMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB83dI+lVj2vosur8ZvoxvygjEiJJbHHDELqCOGcRAjdLHaAGi5i1bS IABTosWLBe0uzHuqbvlHXHk7NXBaF2aiXZEFh7q5TZY+r/PpJmthzuVAKnnsISIQ x6kBVWy6M0g1877PuyEwahpcYD6efE281PRscsbzfhWIM9XVPFAYcIcdEy0HsI+N HMf75gbsJL1M6559hG2ds3nu9W1+tbSm5LrLcNEhdOdJYvOWYoEwLX9tjP85TdjG kNvyIDxiAo/lFFXJL2RGrMDiGKbl4Bv5O5tuVq65qdEslmkyrIzN3J4sC0ygTgVQ imZWCBri8xEAW78fpQCLdIX78O7qCk0H -----END CERTIFICATE-----Generated at Sat Apr 26 13:47:06 2025 by rpki-client