$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: lLIN/vcKWPJmnQ5Zb4esql6ugV6lvttETYPEaQJA9qQ= Subject key identifier: DA:47:3F:BF:5D:E5:6E:C6:C5:5D:59:F1:6F:0C:B6:9A:C2:97:0E:12 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 4A Signing time: Fri 25 Apr 2025 06:21:07 +0000 Manifest this update: Fri 25 Apr 2025 06:21:07 +0000 Manifest next update: Fri 02 May 2025 06:21:07 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: fDL6yiljrbMIxjCCaUvcv7dKTV5rIcMATuXuMHIjPMA=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Apr 25 06:21:07 2025 GMT Not After : May 2 06:21:07 2025 GMT Subject: CN=680b29d3-37b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:b7:b1:ef:64:e6:2e:b8:cb:aa:24:33:83: 19:6a:0a:0c:8c:a1:32:6a:f9:a8:02:e1:f4:9f:74: d7:39:30:35:f4:57:9c:25:50:19:ed:49:3a:55:c0: f9:39:16:ea:e4:13:53:1c:2e:ed:35:49:8e:e6:f9: c4:25:88:82:4c:5e:e0:8d:3d:97:1d:1a:50:7d:33: 85:f3:12:64:04:46:32:eb:14:7b:45:16:cf:23:ca: e1:ba:e6:a6:c5:53:bf:4e:7b:b7:a8:24:91:bb:de: be:63:1c:18:10:d0:08:10:28:b0:6b:16:6a:16:a6: 46:d1:dc:00:e5:37:76:f1:a8:96:e1:ea:ab:3c:14: a8:88:8b:75:28:c5:ad:5b:11:11:79:42:e5:b8:31: 4c:39:90:9c:be:4d:65:bd:a5:74:52:38:8c:ed:f1: 2c:00:7b:ee:c5:b0:1f:58:80:3f:6f:2e:8e:3a:f3: 40:bc:11:9d:5a:3f:77:ec:7b:00:b8:63:83:bd:59: 53:49:a2:62:ba:95:e6:89:56:1d:9e:20:2d:05:57: 24:52:70:b2:12:6b:6e:df:18:bf:d0:4d:19:4e:77: b7:a5:00:5f:63:34:3b:04:ce:84:72:b1:0e:2a:6a: f2:a6:73:9d:55:53:7a:df:a0:1a:4f:7a:b1:78:27: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:47:3F:BF:5D:E5:6E:C6:C5:5D:59:F1:6F:0C:B6:9A:C2:97:0E:12 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c9:31:18:30:92:90:c6:24:57:18:77:89:74:25:2d:24:8c: 3a:48:8e:68:4b:5d:94:25:57:42:ac:7d:c4:9e:14:d6:a5:52: 7e:94:98:53:f9:e0:78:09:16:6d:65:86:83:b8:77:8e:81:e3: 2f:f6:f5:f5:d4:3e:c4:7c:05:9a:c0:b3:82:ab:c3:91:7d:90: 86:ec:f6:17:60:1f:c1:f9:f0:27:fe:37:29:5a:f0:06:41:15: 74:15:00:7b:bc:f7:5e:73:c3:72:3c:be:95:a4:bd:19:f2:23: c6:ce:e2:47:7e:ed:23:a9:24:15:44:b0:82:db:15:80:0e:38: 77:01:5e:e8:d3:0c:14:c3:4f:73:87:6c:84:6f:64:17:15:67: e6:f6:c9:02:34:1d:33:83:a0:7c:df:f9:84:49:94:d3:0c:f1: 10:e2:8b:65:d0:90:9f:b8:89:75:30:f9:b2:0f:ff:5f:4b:d8: 37:da:35:10:f8:6f:31:bd:97:d6:af:0b:ff:53:bd:a3:21:5d: b8:30:8e:f7:0c:e6:fd:39:5c:0b:c1:9d:6f:86:22:2d:9e:43: 85:97:d1:3a:8a:6d:22:bb:97:8a:3e:81:7d:a8:f1:34:69:ad: 86:a6:94:16:15:b3:2e:03:fb:77:51:c7:2f:39:59:be:99:ce: 61:ea:1d:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNTA0MjUwNjIxMDdaFw0yNTA1MDIwNjIxMDdaMBgxFjAUBgNV BAMTDTY4MGIyOWQzLTM3YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq6Lex72TmLrjLqiQzgxlqCgyMoTJq+agC4fSfdNc5MDX0V5wlUBntSTpVwPk5 FurkE1McLu01SY7m+cQliIJMXuCNPZcdGlB9M4XzEmQERjLrFHtFFs8jyuG65qbF U79Oe7eoJJG73r5jHBgQ0AgQKLBrFmoWpkbR3ADlN3bxqJbh6qs8FKiIi3Uoxa1b ERF5QuW4MUw5kJy+TWW9pXRSOIzt8SwAe+7FsB9YgD9vLo4680C8EZ1aP3fsewC4 Y4O9WVNJomK6leaJVh2eIC0FVyRScLISa27fGL/QTRlOd7elAF9jNDsEzoRysQ4q avKmc51VU3rfoBpPerF4J1FXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2kc/v13l bsbFXVnxbwy2msKXDhIwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfJMRgwkpDGJFcYd4l0JS0kjDpIjmhLXZQlV0KsfcSeFNalUn6UmFP5 4HgJFm1lhoO4d46B4y/29fXUPsR8BZrAs4Krw5F9kIbs9hdgH8H58Cf+Nyla8AZB FXQVAHu8915zw3I8vpWkvRnyI8bO4kd+7SOpJBVEsILbFYAOOHcBXujTDBTDT3OH bIRvZBcVZ+b2yQI0HTODoHzf+YRJlNMM8RDii2XQkJ+4iXUw+bIP/19L2DfaNRD4 bzG9l9avC/9TvaMhXbgwjvcM5v05XAvBnW+GIi2eQ4WX0TqKbSK7l4o+gX2o8TRp rYamlBYVsy4D+3dRxy85Wb6ZzmHqHSE= -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:59 2025 by rpki-client