$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: 2OR5UcABK29p4BX67CXk+nSI/S+Wg0BmhG+UZUwlQTY= Subject key identifier: D6:6E:A9:3D:0C:E0:7E:FF:A7:0D:15:CA:A3:2F:D6:A0:E7:1F:08:FE Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 34BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 349D Signing time: Thu 24 Apr 2025 14:44:22 +0000 Manifest this update: Thu 24 Apr 2025 14:44:21 +0000 Manifest next update: Thu 01 May 2025 14:44:21 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: ixCwKyH384bD0QZEW6mGX7d6cXZOC6J9KJG30haemm8=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13501 (0x34bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Apr 24 14:44:21 2025 GMT Not After : May 1 14:44:21 2025 GMT Subject: CN=680a4e46-1f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:3c:1e:08:9c:95:67:aa:88:cf:cb:e3:57: c0:5a:98:74:31:0f:f9:ee:a2:c4:8d:48:6d:f7:a4: 32:5a:82:31:89:9b:40:f3:11:c4:be:5c:70:4d:50: c2:5b:3b:52:f2:c5:36:45:b8:b5:39:7f:63:2d:85: 6e:81:b5:36:93:a5:80:ab:92:4a:b0:2e:1c:2f:71: a9:64:77:96:94:f1:de:62:ef:9e:f9:1f:41:39:9c: 4c:d3:bd:ac:39:e8:cf:31:b9:fc:d1:51:04:4d:ca: c3:35:af:9e:e8:06:fa:ae:50:eb:0e:40:b6:40:6c: dc:ec:9e:aa:c5:d8:bf:11:1c:07:6d:2c:99:0b:5b: 1c:bd:a0:3f:a4:2f:13:70:f7:54:d9:b5:65:ed:63: 20:c6:5f:65:ca:ba:93:9a:88:b9:ac:51:ea:eb:e7: 92:82:05:69:d3:37:28:ed:02:aa:9d:b9:a1:15:71: 69:d3:a9:1c:45:19:88:14:d3:b5:ba:9a:5c:32:a1: 71:b1:89:77:df:5c:10:bf:c2:34:ab:16:cd:cd:0c: 59:6e:97:5a:a4:0a:cc:b5:62:36:d5:9d:54:ec:1b: c0:23:c8:2f:a9:1c:c6:30:6e:d2:8a:00:f8:7e:67: 93:bd:26:8b:c0:b7:17:9c:18:3b:2d:c7:14:27:41: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6E:A9:3D:0C:E0:7E:FF:A7:0D:15:CA:A3:2F:D6:A0:E7:1F:08:FE X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:4b:dd:b5:c4:2b:21:8c:f4:ac:f9:1d:31:d8:af:62:77:54: 77:45:9b:26:c9:92:da:e8:61:1c:fa:ef:ff:4c:7e:91:87:02: b0:32:bc:de:77:b3:bf:d0:c7:e9:86:c3:57:cf:d0:b3:39:46: 60:c8:f8:ea:a8:18:a1:17:6e:e7:25:78:24:44:d4:3f:ad:24: 48:f7:ca:78:a0:13:36:91:65:7d:5d:e0:c7:17:29:95:36:be: 5c:75:66:46:39:00:d8:22:34:c1:23:35:52:7a:18:0f:95:18: b7:07:f7:c5:7f:01:88:ae:14:69:dd:87:78:28:42:4f:7e:ee: 26:e5:30:a3:41:03:44:fb:b9:8b:0a:be:27:e5:f4:99:e2:2d: 44:98:21:75:50:c8:f0:e2:db:a1:51:7b:41:6b:cb:cd:9b:9d: 78:d0:c8:bf:7d:c6:2f:49:2a:c4:c3:c1:a8:e9:75:38:6d:23: a6:c5:d9:96:7f:db:7d:b6:c2:aa:b5:c0:72:28:4f:0f:8a:ba: 39:4c:dd:44:bb:5b:0d:4a:55:8c:ba:73:a1:15:27:1e:ac:c3: 97:b4:4d:10:63:77:93:cb:54:ad:a5:54:f6:43:cd:eb:94:09: 7d:fc:b7:a1:c1:01:9c:35:5c:8b:5b:94:6d:36:cb:eb:92:23: 77:ab:80:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUwNDI0MTQ0NDIxWhcNMjUwNTAxMTQ0NDIxWjAYMRYwFAYD VQQDEw02ODBhNGU0Ni0xZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBM8HgiclWeqiM/L41fAWph0MQ/57qLEjUht96QyWoIxiZtA8xHEvlxwTVDC WztS8sU2Rbi1OX9jLYVugbU2k6WAq5JKsC4cL3GpZHeWlPHeYu+e+R9BOZxM072s OejPMbn80VEETcrDNa+e6Ab6rlDrDkC2QGzc7J6qxdi/ERwHbSyZC1scvaA/pC8T cPdU2bVl7WMgxl9lyrqTmoi5rFHq6+eSggVp0zco7QKqnbmhFXFp06kcRRmIFNO1 uppcMqFxsYl331wQv8I0qxbNzQxZbpdapArMtWI21Z1U7BvAI8gvqRzGMG7SigD4 fmeTvSaLwLcXnBg7LccUJ0GeywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZuqT0M 4H7/pw0VyqMv1qDnHwj+MB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWS921xCshjPSs+R0x2K9id1R3RZsmyZLa6GEc+u//TH6RhwKwMrze d7O/0MfphsNXz9CzOUZgyPjqqBihF27nJXgkRNQ/rSRI98p4oBM2kWV9XeDHFymV Nr5cdWZGOQDYIjTBIzVSehgPlRi3B/fFfwGIrhRp3Yd4KEJPfu4m5TCjQQNE+7mL Cr4n5fSZ4i1EmCF1UMjw4tuhUXtBa8vNm5140Mi/fcYvSSrEw8Go6XU4bSOmxdmW f9t9tsKqtcByKE8Piro5TN1Eu1sNSlWMunOhFScerMOXtE0QY3eTy1StpVT2Q83r lAl9/LehwQGcNVyLW5RtNsvrkiN3q4Cr -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:19 2025 by rpki-client