$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: g12S3e6HG5a6wFuQ/M34FYViAE83sk2pyhk6P1gRhFE= Subject key identifier: 67:FD:EB:15:24:AF:4B:A9:13:30:2D:31:75:F9:6F:79:17:3A:23:F8 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2478 Signing time: Thu 24 Apr 2025 15:48:22 +0000 Manifest this update: Thu 24 Apr 2025 15:48:21 +0000 Manifest next update: Thu 01 May 2025 15:48:21 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: aoROMg6rrdRIV193vBMbNmlHBpydvqeq6sUnOtjGBiE=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9362 (0x2492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Apr 24 15:48:21 2025 GMT Not After : May 1 15:48:21 2025 GMT Subject: CN=680a5d45-549c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:e3:41:f8:f2:c7:3d:ad:ad:4c:f8:47:10: 1b:bb:d2:2d:cc:cb:08:27:8f:cf:bc:73:e5:16:ad: f7:44:0c:30:56:65:e2:dc:9a:3d:d9:fc:41:50:0f: 48:79:2b:a7:c4:a3:2a:b2:76:99:ce:c7:92:7e:65: 3d:e4:ef:d2:b4:ac:f0:ee:74:9f:d8:83:cd:1e:47: 6d:89:23:fd:82:60:4e:72:8b:aa:1e:81:5e:8c:54: a2:17:01:05:a4:fa:43:bd:57:6d:b6:2d:79:f7:ba: 47:dd:f7:53:07:76:77:4e:cb:e1:41:e7:06:ca:77: 49:dc:30:ec:93:40:ab:73:32:49:5b:a9:87:53:f9: 6f:05:9c:56:ef:e4:db:f9:6c:fe:82:b9:9c:e1:db: 56:90:7f:ee:e0:d8:69:52:d9:8c:a4:cc:25:d6:4e: df:55:21:14:99:41:fd:09:81:c5:60:a7:69:46:db: a8:2e:d7:7e:28:8f:c1:0c:69:31:36:1a:b1:69:73: 81:64:03:72:3e:03:b9:f5:b9:dc:82:14:e7:56:b2: a5:c7:01:d7:fb:95:34:21:f0:f4:6e:a9:07:f1:86: 18:e6:09:6d:46:81:ff:ec:4e:c6:d7:a9:5e:eb:86: 4e:ea:76:b1:62:c3:ac:ec:46:95:2c:fd:01:4e:61: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:EB:15:24:AF:4B:A9:13:30:2D:31:75:F9:6F:79:17:3A:23:F8 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:bd:e3:ea:17:cf:1f:61:fa:16:a4:fe:18:74:f4:7b:7c:d1: ec:0c:4c:46:0e:b8:2d:3d:e3:29:2e:e3:96:ae:99:2b:7f:ed: 93:ab:4b:d2:90:fc:62:d8:c3:07:9c:e1:98:a1:98:e8:4f:58: a5:c6:d8:40:a6:28:13:60:f0:50:fd:1b:c2:3e:f6:70:29:39: a1:02:f5:62:0f:f2:98:22:8f:ad:bd:1d:d7:2e:dc:22:e8:82: 1a:a4:a7:9b:6b:e9:48:73:09:77:c7:3b:6d:76:9a:54:1f:02: c9:4d:9f:bc:28:dc:4e:3b:a3:30:7c:42:6a:60:86:09:a1:17: 7a:14:0e:b1:00:d3:f5:75:89:a7:07:56:29:18:f9:22:a9:a8: 49:3b:84:f8:7e:a3:3f:3b:22:db:c3:e0:6c:8f:f1:87:11:86: 30:51:9e:e8:5f:67:ed:dc:57:24:80:6a:b4:e5:80:92:10:cc: ad:2d:61:f2:e5:aa:1d:20:7b:13:dd:ff:96:c0:2d:03:ad:42: aa:c4:36:fd:81:32:33:d9:76:3d:63:d0:bc:e4:ac:63:4e:34: 95:0f:bd:5e:27:bb:68:0c:69:41:df:ac:61:a6:49:bc:c9:d9: 6c:ba:1c:99:09:9b:42:b3:ec:b1:24:b7:a5:eb:0d:f8:12:0d: 13:a5:80:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjUwNDI0MTU0ODIxWhcNMjUwNTAxMTU0ODIxWjAYMRYwFAYD VQQDEw02ODBhNWQ0NS01NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpPjQfjyxz2trUz4RxAbu9ItzMsIJ4/PvHPlFq33RAwwVmXi3Jo92fxBUA9I eSunxKMqsnaZzseSfmU95O/StKzw7nSf2IPNHkdtiSP9gmBOcouqHoFejFSiFwEF pPpDvVdtti1597pH3fdTB3Z3TsvhQecGyndJ3DDsk0CrczJJW6mHU/lvBZxW7+Tb +Wz+grmc4dtWkH/u4NhpUtmMpMwl1k7fVSEUmUH9CYHFYKdpRtuoLtd+KI/BDGkx NhqxaXOBZANyPgO59bncghTnVrKlxwHX+5U0IfD0bqkH8YYY5gltRoH/7E7G16le 64ZO6naxYsOs7EaVLP0BTmHqOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf96xUk r0upEzAtMXX5b3kXOiP4MB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4vePqF88fYfoWpP4YdPR7fNHsDExGDrgtPeMpLuOWrpkrf+2Tq0vS kPxi2MMHnOGYoZjoT1ilxthApigTYPBQ/RvCPvZwKTmhAvViD/KYIo+tvR3XLtwi 6IIapKeba+lIcwl3xzttdppUHwLJTZ+8KNxOO6MwfEJqYIYJoRd6FA6xANP1dYmn B1YpGPkiqahJO4T4fqM/OyLbw+Bsj/GHEYYwUZ7oX2ft3FckgGq05YCSEMytLWHy 5aodIHsT3f+WwC0DrUKqxDb9gTIz2XY9Y9C85KxjTjSVD71eJ7toDGlB36xhpkm8 ydlsuhyZCZtCs+yxJLel6w34Eg0TpYBR -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:06 2025 by rpki-client