$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft File: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft (raw, json) Hash identifier: qzW8KV/nqvNySL9zdr19g/xcutJv0ZOF32fdGweLNJU= Subject key identifier: 8B:C6:CA:D7:C0:96:FE:2B:95:FB:00:53:F8:F4:1F:02:05:CA:54:EE Authority key identifier: 66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD Certificate issuer: /CN=A91FF3B6/serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Certificate serial: 05D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft Manifest number: 05CB Signing time: Thu 24 Apr 2025 22:53:00 +0000 Manifest this update: Thu 24 Apr 2025 22:53:00 +0000 Manifest next update: Thu 01 May 2025 22:53:00 +0000 Files and hashes: 1: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl (hash: j+VYEedFxEv0IfoDApFelpNKnglDWkRTDAAzzRLgGGU=) 2: 4E17ACCEF02511EE94BE6C37C4F9AE02.roa (hash: u1gaPe1rNZR7+OinWikix9cuKzKOycOECZnxKnKlico=) 3: 6D6C7AC8F02511EE80ACAA37C4F9AE02.roa (hash: 4TctzXO0btCTekhddll2PNBwAz/wBJ33Bqt1TjTpsa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF3B6, serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Validity Not Before: Apr 24 22:53:00 2025 GMT Not After : May 1 22:53:00 2025 GMT Subject: CN=680ac0cc-43ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:68:df:ff:71:3a:c0:57:1e:38:ef:40:ee: 73:20:79:d1:f2:4d:33:a3:f3:33:45:0c:f4:5a:e2: 4c:d8:67:a6:dd:20:55:e1:2d:4a:73:3e:25:f4:98: 6d:c2:e0:0e:9c:1b:5a:6a:00:6b:ff:ed:7e:88:a2: 8b:d8:65:42:04:de:a6:d0:33:71:06:46:6a:b3:5d: f7:b5:44:59:15:81:66:4c:db:72:18:62:f7:cd:b9: e6:ef:66:10:4b:8f:9f:05:3a:a9:08:51:dc:0f:f3: 52:b3:aa:f6:14:20:82:04:3c:08:6b:ac:49:9b:c0: 28:ba:a5:86:a1:41:d3:05:50:5f:0f:77:4f:07:95: 2f:dc:58:ce:a7:eb:b5:01:90:a2:72:f3:55:96:11: 6d:22:6b:e8:0d:95:52:3e:4d:cf:a8:a2:6f:54:a2: c6:2f:8b:13:95:b3:5c:95:9f:cf:5b:0b:7a:ba:b0: 00:ea:8c:50:ee:18:31:8f:04:46:72:d7:f2:a5:23: a1:ba:67:21:de:d3:14:9c:10:0c:18:3f:24:15:de: 57:94:60:ce:89:ee:6c:ce:71:be:53:5a:64:9c:1b: 07:7b:bd:9c:2c:b3:b7:ce:81:a3:c1:58:1a:1c:23: 51:6c:15:83:28:61:cd:32:37:56:0b:0e:24:d7:0a: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C6:CA:D7:C0:96:FE:2B:95:FB:00:53:F8:F4:1F:02:05:CA:54:EE X509v3 Authority Key Identifier: keyid:66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3f:0b:30:cc:54:d7:b4:0a:c5:06:8f:8e:fd:df:fe:ef:9c: a0:02:0b:ce:c3:d0:a8:e4:0d:77:86:6d:f0:06:d4:d5:50:9a: ae:e9:5f:a3:36:f6:50:01:f3:d3:34:45:d1:83:5f:4a:dc:13: 03:97:9f:35:38:4f:b1:0c:e3:5d:13:9c:4f:ef:5c:ef:50:24: 64:3d:0c:d0:b4:06:8c:3b:c0:3f:38:cc:9c:95:6f:ee:4c:95: d3:78:23:66:ab:52:aa:c4:36:1c:04:60:f6:34:64:3a:9d:38: 62:0b:ec:36:b1:7a:ac:01:d5:7e:85:5f:68:38:b1:a4:03:91: f0:53:4f:f7:7f:cd:67:c3:c6:87:05:16:7b:5b:97:df:bb:af: 37:cc:d0:a6:30:f0:28:00:05:8c:bc:58:87:6f:5d:a5:cb:3a: ca:93:45:ed:39:b9:b8:d2:d1:66:40:67:07:5f:8f:a2:5d:cd: a0:4c:92:e5:ae:f9:8a:61:50:53:7c:fc:ae:06:33:f5:db:39: bc:c8:dc:a2:70:1c:f0:cf:fc:7a:5e:7d:f0:7e:b3:36:23:93: cf:d6:94:9e:98:90:37:4f:f9:ce:86:95:e0:2f:53:ba:53:83: ae:a0:3e:4d:38:a2:3c:f5:25:fa:28:fd:d8:04:04:bc:2c:f3: 03:8d:3e:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYzQjYxMTAvBgNVBAUTKDY2MEVEREJCMzVENTM3NTZDMzA2QkQ4Q0Q5MTdEQUNG Rjc4OTZDQkQwHhcNMjUwNDI0MjI1MzAwWhcNMjUwNTAxMjI1MzAwWjAYMRYwFAYD VQQDEw02ODBhYzBjYy00M2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw39o3/9xOsBXHjjvQO5zIHnR8k0zo/MzRQz0WuJM2Gem3SBV4S1Kcz4l9Jht wuAOnBtaagBr/+1+iKKL2GVCBN6m0DNxBkZqs133tURZFYFmTNtyGGL3zbnm72YQ S4+fBTqpCFHcD/NSs6r2FCCCBDwIa6xJm8AouqWGoUHTBVBfD3dPB5Uv3FjOp+u1 AZCicvNVlhFtImvoDZVSPk3PqKJvVKLGL4sTlbNclZ/PWwt6urAA6oxQ7hgxjwRG ctfypSOhumch3tMUnBAMGD8kFd5XlGDOie5sznG+U1pknBsHe72cLLO3zoGjwVga HCNRbBWDKGHNMjdWCw4k1wquaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvGytfA lv4rlfsAU/j0HwIFylTuMB8GA1UdIwQYMBaAFGYO3bs11TdWwwa9jNkX2s/3iWy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjNCNi81MDhBQ0QyOEJD OTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4xYkRCcjJNMlJmYXpfZUpi TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnN2R1elhWTjFiREJyMk0yUmZhel9lSmJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjNCNi81MDhBQ0QyOEJDOTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4x YkRCcjJNMlJmYXpfZUpiTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIPwswzFTXtArFBo+O/d/+75ygAgvOw9Co5A13hm3wBtTVUJqu6V+j NvZQAfPTNEXRg19K3BMDl581OE+xDONdE5xP71zvUCRkPQzQtAaMO8A/OMyclW/u TJXTeCNmq1KqxDYcBGD2NGQ6nThiC+w2sXqsAdV+hV9oOLGkA5HwU0/3f81nw8aH BRZ7W5ffu683zNCmMPAoAAWMvFiHb12lyzrKk0XtObm40tFmQGcHX4+iXc2gTJLl rvmKYVBTfPyuBjP12zm8yNyicBzwz/x6Xn3wfrM2I5PP1pSemJA3T/nOhpXgL1O6 U4OuoD5NOKI89SX6KP3YBAS8LPMDjT4c -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:20 2025 by rpki-client