$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: tnJGyelCWA5mfp8VwGeIAbd5F00PnEJ3KuzmJLOj6L0= Subject key identifier: 49:9E:E3:6A:DA:A1:13:8E:5B:06:68:06:F2:8F:4C:2B:8A:B4:85:89 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 170E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 1704 Signing time: Fri 02 May 2025 16:47:54 +0000 Manifest this update: Fri 02 May 2025 16:47:53 +0000 Manifest next update: Fri 09 May 2025 16:47:53 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: ltZCUIkTK4SCLWJ0Ii58WWtNqZjNpzVKbPAySXVJ5n4=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5902 (0x170e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: May 2 16:47:53 2025 GMT Not After : May 9 16:47:53 2025 GMT Subject: CN=6814f73a-8590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:27:f0:97:07:2e:0b:84:8e:92:94:97:b6: 0f:d8:37:cc:17:7f:c7:c5:8f:bc:40:6d:49:1d:bb: 84:bc:40:7e:0e:0e:7d:2d:58:54:d8:11:29:18:83: 20:cc:db:ea:81:31:06:35:5b:d3:7e:1d:99:a3:68: 78:3e:0e:84:16:c7:82:12:04:bd:55:4c:6d:dd:7a: f9:93:34:81:24:5b:75:ed:0a:0d:68:ce:40:2d:64: 00:65:7b:a9:b2:e2:34:bc:03:56:cc:ac:81:43:57: c3:f8:b0:a6:46:ec:08:92:d6:52:6b:36:90:65:04: 3b:bb:56:46:0d:d7:a2:09:33:ce:8a:e0:5d:12:b3: 0a:be:84:5f:9a:5a:25:85:81:11:9e:70:a4:97:2a: 6f:7b:90:01:47:6f:ea:c4:28:49:84:82:da:fb:d4: 11:b6:92:93:01:3e:a4:a1:a7:f1:cb:7c:79:68:4f: cf:90:54:e3:3f:12:28:03:0b:ec:25:b5:89:51:49: 68:06:d8:b6:9e:7b:a2:db:3f:1f:f3:75:0f:6a:39: 32:a7:3c:1a:16:48:53:11:9d:c6:05:ef:39:52:28: 29:35:41:ec:e2:38:b9:6d:e7:04:fd:18:84:6b:59: bb:47:d0:15:16:cd:3f:0f:ca:68:ae:c5:95:f0:96: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9E:E3:6A:DA:A1:13:8E:5B:06:68:06:F2:8F:4C:2B:8A:B4:85:89 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:04:da:19:49:6e:e1:59:2b:b7:de:d5:83:93:8f:e1:fd:a0: 8e:15:fd:49:4e:66:02:fa:3f:04:31:cc:74:34:b0:d9:9b:93: 42:26:7a:83:63:7a:f7:e4:be:ee:a4:04:9f:ff:94:14:dc:e2: cf:6f:09:a0:11:17:b5:e5:5a:d4:cd:80:73:bf:dc:44:e4:8e: f6:f1:e4:11:ec:f6:3a:69:f4:28:d8:4a:8d:23:0c:c5:8f:86: fa:1b:f5:ff:4c:68:ba:db:03:98:f0:a1:c6:3a:af:23:07:cb: 06:fc:fd:cc:c8:ee:8a:ee:0e:c7:63:c3:85:d1:87:0e:3f:06: 5a:73:f7:41:ae:61:5b:9a:77:af:c4:a5:a0:98:29:4c:09:eb: 77:ac:15:f2:68:e7:81:cc:d4:ee:fb:d5:52:dc:45:47:2a:f1: cd:89:8a:1b:83:91:74:17:5c:26:d0:61:65:88:57:e8:50:ff: d4:5d:b9:1e:40:f1:47:31:63:93:71:0b:f0:ec:23:a4:26:cc: a2:e6:5d:8d:14:1b:bf:f2:a1:f0:fe:09:c9:fb:23:12:6b:89: 54:90:69:3b:0e:db:db:57:52:f1:5f:28:cb:32:4e:d0:9f:f3: e3:30:9a:a1:26:7c:34:d7:ef:38:17:81:d8:fb:53:98:9d:aa: 26:6e:1e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjUwNTAyMTY0NzUzWhcNMjUwNTA5MTY0NzUzWjAYMRYwFAYD VQQDEw02ODE0ZjczYS04NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohAn8JcHLguEjpKUl7YP2DfMF3/HxY+8QG1JHbuEvEB+Dg59LVhU2BEpGIMg zNvqgTEGNVvTfh2Zo2h4Pg6EFseCEgS9VUxt3Xr5kzSBJFt17QoNaM5ALWQAZXup suI0vANWzKyBQ1fD+LCmRuwIktZSazaQZQQ7u1ZGDdeiCTPOiuBdErMKvoRfmlol hYERnnCklypve5ABR2/qxChJhILa+9QRtpKTAT6koafxy3x5aE/PkFTjPxIoAwvs JbWJUUloBti2nnui2z8f83UPajkypzwaFkhTEZ3GBe85UigpNUHs4ji5becE/RiE a1m7R9AVFs0/D8porsWV8JYIvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEme42ra oROOWwZoBvKPTCuKtIWJMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeBNoZSW7hWSu33tWDk4/h/aCOFf1JTmYC+j8EMcx0NLDZm5NCJnqD Y3r35L7upASf/5QU3OLPbwmgERe15VrUzYBzv9xE5I728eQR7PY6afQo2EqNIwzF j4b6G/X/TGi62wOY8KHGOq8jB8sG/P3MyO6K7g7HY8OF0YcOPwZac/dBrmFbmnev xKWgmClMCet3rBXyaOeBzNTu+9VS3EVHKvHNiYobg5F0F1wm0GFliFfoUP/UXbke QPFHMWOTcQvw7COkJsyi5l2NFBu/8qHw/gnJ+yMSa4lUkGk7DtvbV1LxXyjLMk7Q n/PjMJqhJnw01+84F4HY+1OYnaombh5S -----END CERTIFICATE-----Generated at Sun May 4 05:21:24 2025 by rpki-client