$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: 7Urupe/qQrUnwUXta3aTd+nBpN0wy+6/z4uwGEZBrMQ= Subject key identifier: 2B:DD:33:A1:55:49:49:34:B3:3F:4C:9A:9A:EF:49:7F:AA:77:CC:26 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 48 Signing time: Fri 25 Apr 2025 06:23:18 +0000 Manifest this update: Fri 25 Apr 2025 06:23:17 +0000 Manifest next update: Fri 02 May 2025 06:23:17 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: dAtQPcsE1TiWcA8ByRExBoaIjaIULjbnNO4i2hGdNbw=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: BCZ1HJoEZyrIFeiF3ZHLW8BBZXBaO4KH4xqAbBol+hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Apr 25 06:23:17 2025 GMT Not After : May 2 06:23:17 2025 GMT Subject: CN=680b2a55-e6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:c2:8a:e0:9c:73:fe:10:01:b6:b0:88:22: 37:20:c2:ab:df:44:82:2a:70:05:3a:aa:13:6a:83: 81:27:e7:f0:fb:4d:c0:7d:86:6b:e7:53:ae:71:4a: 36:d7:d3:ad:dc:d2:62:66:5f:29:bf:ee:3b:04:8b: 23:29:09:dc:15:09:a4:60:29:c3:cd:6d:8d:dc:b7: 5c:3e:05:b8:0e:a7:62:32:0f:fd:7c:7e:97:06:03: ff:9e:91:cd:95:a6:ac:88:c6:ce:6e:c7:0b:66:42: 6e:15:90:03:87:2c:cd:cf:a6:b0:5d:1e:17:12:9c: c6:d2:52:09:36:8e:4f:52:ac:d3:4e:06:af:3b:cb: 77:c5:67:71:ff:a7:af:58:51:ab:17:56:2f:46:9c: 29:b8:52:c7:d3:1c:56:ba:db:d1:67:82:4e:51:32: 1a:2f:3a:c7:57:d2:25:ab:c5:c5:0a:43:d0:d9:78: 77:2a:8a:7c:c7:2f:a9:f1:a0:8b:eb:f3:f1:f7:e5: 6c:37:26:13:56:03:2e:51:34:86:9d:51:6d:47:f0: 11:3e:94:55:4b:bd:9c:89:64:b2:8d:56:bd:81:1d: bb:d2:39:cc:1e:d0:14:cd:c4:f0:08:fb:11:d2:f0: 01:55:23:b6:f6:75:e4:e3:68:de:36:4a:a4:1e:f3: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:33:A1:55:49:49:34:B3:3F:4C:9A:9A:EF:49:7F:AA:77:CC:26 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:90:d5:d9:d4:2b:a1:0e:0c:ea:3e:71:6c:35:9c:f0:29:46: 52:b9:15:41:19:41:9d:a2:69:6b:e6:1b:87:99:93:f7:09:9c: 5b:38:3c:66:fa:9f:2a:fd:fa:4c:3f:9d:25:7d:ab:69:15:ad: 4e:84:e5:8e:34:17:11:e6:3e:8c:27:f4:c9:64:8a:47:30:ff: 43:67:42:65:b6:55:c6:69:32:81:04:45:79:a1:99:a5:ac:bf: b5:02:3a:ef:45:7c:c2:82:65:48:b2:52:25:29:71:97:e3:4b: 53:a5:97:bf:41:69:1e:1e:86:86:0a:8e:eb:87:74:41:df:a3: df:a2:03:d8:f9:ef:ce:b0:8d:8d:a9:25:55:97:4b:33:3c:5e: aa:68:35:a0:c8:77:c9:76:a2:91:10:52:55:99:b9:69:e1:01: c8:94:c9:bb:54:ab:73:3d:54:f9:85:ba:90:18:87:ca:ef:bb: 25:c5:08:95:f0:d9:65:3b:ec:8b:01:a6:66:37:44:ef:61:c4: 00:5a:13:7e:32:cd:c7:3b:04:96:01:f0:2a:b5:d7:f6:e9:3e: 45:c1:81:43:e8:90:b8:48:96:bf:0c:f0:3c:8a:a9:0d:c1:5a: 54:2c:a2:72:4b:4b:a0:ad:b7:04:0d:c5:95:b3:59:b7:7c:1f: 9e:5c:3a:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoNjREMkIzRDY1QTVDNkNDRTREMDhENzhGRkVEQjI4NTZC NjQxRDZBMzAeFw0yNTA0MjUwNjIzMTdaFw0yNTA1MDIwNjIzMTdaMBgxFjAUBgNV BAMTDTY4MGIyYTU1LWU2YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwRcKK4Jxz/hABtrCIIjcgwqvfRIIqcAU6qhNqg4En5/D7TcB9hmvnU65xSjbX 063c0mJmXym/7jsEiyMpCdwVCaRgKcPNbY3ct1w+BbgOp2IyD/18fpcGA/+ekc2V pqyIxs5uxwtmQm4VkAOHLM3PprBdHhcSnMbSUgk2jk9SrNNOBq87y3fFZ3H/p69Y UasXVi9GnCm4UsfTHFa629Fngk5RMhovOsdX0iWrxcUKQ9DZeHcqinzHL6nxoIvr 8/H35Ww3JhNWAy5RNIadUW1H8BE+lFVLvZyJZLKNVr2BHbvSOcwe0BTNxPAI+xHS 8AFVI7b2deTjaN42SqQe812bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK90zoVVJ STSzP0yamu9Jf6p3zCYwHwYDVR0jBBgwFoAUZNKz1lpcbM5NCNeP/tsoVrZB1qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzQ0NkJEN0EyQjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWk5LejFscGNiTTVOQ05lUF90c29WclpCMXFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzQ0NkJEN0EyQjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01 TkNOZVBfdHNvVnJaQjFxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMuQ1dnUK6EODOo+cWw1nPApRlK5FUEZQZ2iaWvmG4eZk/cJnFs4PGb6 nyr9+kw/nSV9q2kVrU6E5Y40FxHmPown9Mlkikcw/0NnQmW2VcZpMoEERXmhmaWs v7UCOu9FfMKCZUiyUiUpcZfjS1Oll79BaR4ehoYKjuuHdEHfo9+iA9j5786wjY2p JVWXSzM8XqpoNaDId8l2opEQUlWZuWnhAciUybtUq3M9VPmFupAYh8rvuyXFCJXw 2WU77IsBpmY3RO9hxABaE34yzcc7BJYB8Cq11/bpPkXBgUPokLhIlr8M8DyKqQ3B WlQsonJLS6CttwQNxZWzWbd8H55cOg0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:00 2025 by rpki-client