$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json) Hash identifier: qArGEMcESHgb5SizVhgN6kqemXdsYJqrK+aLZqBxFvE= Subject key identifier: 34:C9:10:67:7F:D4:17:D6:34:3E:31:B5:DF:1A:AE:DF:86:D7:6C:9D Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft Manifest number: 47 Signing time: Fri 25 Apr 2025 06:23:41 +0000 Manifest this update: Fri 25 Apr 2025 06:23:40 +0000 Manifest next update: Fri 02 May 2025 06:23:40 +0000 Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: vKOMb1JLuoW8DDZZ/Xc3S1FORGkSf+XPcOPczuN2wZ8=) 2: 9C532970B72311EFBA17AB72C4F9AE02.roa (hash: V8Oi/Zt9u9c7P3V5ZEct3r3+92oknInn9a1C4JSyxzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Apr 25 06:23:40 2025 GMT Not After : May 2 06:23:40 2025 GMT Subject: CN=680b2a6c-7bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:36:2d:e7:40:12:2b:f7:c2:db:2a:ef:fb: b3:92:7a:39:25:e3:ba:88:e3:3c:cc:ad:d8:fc:e1: 8b:cf:af:e2:25:0c:5a:6b:e4:a5:08:50:b1:b0:de: 38:6f:0f:a8:8f:e9:d8:9d:17:9f:fd:74:bf:48:aa: 4e:ae:60:2c:5d:82:86:fe:df:93:dc:c0:9a:9d:ef: e6:8a:11:f8:86:3d:9b:a1:22:86:e3:57:2b:9d:05: b0:f8:bb:81:3c:36:43:ad:c0:0b:a8:89:f0:df:b0: 12:8c:7a:0b:07:08:9c:f6:39:84:c4:5e:39:7b:de: 84:79:52:d8:66:4c:bc:35:ef:0a:f8:73:62:b3:a7: 3a:8f:df:49:c0:94:ce:61:71:2b:6d:61:bf:a6:74: f3:56:01:42:5e:b0:e0:f8:28:1e:7d:cb:d1:36:1e: df:ab:dc:75:e2:c1:d2:3a:4e:dd:42:94:24:7f:c2: cf:87:98:f2:91:55:fb:68:07:12:a3:36:47:c1:d0: cd:30:88:e2:60:e2:e8:b3:64:f5:07:7e:c4:3c:e9: 4b:f9:53:30:0a:58:b2:f0:d7:e6:3f:4e:d2:0a:5f: 8d:2c:ac:23:f7:ec:96:ac:63:3b:1f:e4:94:8f:0a: 1a:ab:11:37:a9:1c:32:ea:e9:e5:8d:0f:f4:91:44: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:10:67:7F:D4:17:D6:34:3E:31:B5:DF:1A:AE:DF:86:D7:6C:9D X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:59:7c:92:18:b5:66:04:37:97:8c:61:48:9f:83:ca:3a:b4: c5:d6:d8:91:d8:ad:ab:43:3a:5b:49:88:2c:de:71:a3:6e:1e: 44:48:68:d3:b3:7c:cd:ee:05:31:c3:37:1b:b7:c0:78:53:ec: d5:1d:63:94:97:43:38:b3:cb:11:0e:bb:93:3d:da:80:37:1f: 3e:fe:4b:bd:fc:48:de:a7:1e:50:8a:5b:03:55:86:89:4b:ef: a3:c7:50:f2:9c:86:00:71:d3:63:fe:52:51:ec:be:16:9a:b4: 29:4e:96:5d:cc:b3:25:ef:64:41:a7:60:26:fb:1c:9b:3b:ca: 14:2d:ff:08:c5:3a:f3:e8:2d:6e:fb:a7:b9:5d:9a:5a:29:1d: f4:ba:e2:50:77:c4:c7:0a:79:63:41:04:78:4a:c2:9c:89:18: a2:3a:4a:0d:8c:c4:2b:c8:4e:2e:23:06:9d:90:12:17:8d:68: cd:10:de:55:ef:b7:8b:05:5c:f9:2d:6e:32:ce:c2:22:57:55: 7c:e7:0e:6b:69:52:b3:c8:55:29:6c:e9:7f:4a:80:44:04:90: 13:b9:53:02:a4:b2:cf:1d:bb:9b:11:76:eb:e0:ee:25:12:e5: ac:ae:58:53:f0:37:ef:52:44:5b:58:e6:e7:7d:1a:21:ec:a4: 8f:8f:1c:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoNjcwRTNBMDY3MjE2ODRBQjQ3M0JCQkU1Q0MyMkNGMDVE MDI0QkY2RDAeFw0yNTA0MjUwNjIzNDBaFw0yNTA1MDIwNjIzNDBaMBgxFjAUBgNV BAMTDTY4MGIyYTZjLTdiZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC18jYt50ASK/fC2yrv+7OSejkl47qI4zzMrdj84YvPr+IlDFpr5KUIULGw3jhv D6iP6didF5/9dL9Iqk6uYCxdgob+35PcwJqd7+aKEfiGPZuhIobjVyudBbD4u4E8 NkOtwAuoifDfsBKMegsHCJz2OYTEXjl73oR5UthmTLw17wr4c2KzpzqP30nAlM5h cSttYb+mdPNWAUJesOD4KB59y9E2Ht+r3HXiwdI6Tt1ClCR/ws+HmPKRVftoBxKj NkfB0M0wiOJg4uizZPUHfsQ86Uv5UzAKWLLw1+Y/TtIKX40srCP37JasYzsf5JSP ChqrETepHDLq6eWND/SRRGlbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNMkQZ3/U F9Y0PjG13xqu34bXbJ0wHwYDVR0jBBgwFoAUZw46BnIWhKtHO7vlzCLPBdAkv20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0RBRjZENzM2Qjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3Yy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnc0NkJuSVdoS3RITzd2bHpDTFBCZEFrdjIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0RBRjZENzM2QjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0 SE83dmx6Q0xQQmRBa3YyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1ZfJIYtWYEN5eMYUifg8o6tMXW2JHYratDOltJiCzecaNuHkRIaNOz fM3uBTHDNxu3wHhT7NUdY5SXQzizyxEOu5M92oA3Hz7+S738SN6nHlCKWwNVholL 76PHUPKchgBx02P+UlHsvhaatClOll3MsyXvZEGnYCb7HJs7yhQt/wjFOvPoLW77 p7ldmlopHfS64lB3xMcKeWNBBHhKwpyJGKI6Sg2MxCvITi4jBp2QEheNaM0Q3lXv t4sFXPktbjLOwiJXVXznDmtpUrPIVSls6X9KgEQEkBO5UwKkss8du5sRduvg7iUS 5ayuWFPwN+9SRFtY5ud9GiHspI+PHKc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:23 2025 by rpki-client