$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: f5AccOusqI+jwYrSnBZZ9mGOk2n4qmP6SKHjNNP+FUI= Subject key identifier: B3:27:0F:42:43:12:F9:39:CB:2A:C5:88:27:34:2B:10:09:93:55:2D Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 233A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 232A Signing time: Fri 04 Apr 2025 15:53:24 +0000 Manifest this update: Fri 04 Apr 2025 15:53:24 +0000 Manifest next update: Fri 11 Apr 2025 15:53:24 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: kH1iXej+8GJU/S88tCEvBXPmYxbSLdwn+7INNz04d9M=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: ZUEn5ZlRaiInxXBiSVZ7/rf4gJkd4uF1qxiteovD6sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9018 (0x233a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8 Validity Not Before: Apr 4 15:53:24 2025 GMT Not After : Apr 11 15:53:24 2025 GMT Subject: CN=67f00074-77b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:da:73:e2:f5:f6:f8:68:9c:c2:ef:1f:fc: 42:52:25:37:27:e6:4a:e4:f5:b7:68:75:88:49:ef: 19:1c:06:a7:0b:92:96:6c:82:7b:56:84:44:c7:f8: 25:48:86:ab:44:6e:70:26:32:c8:f0:d7:61:ab:72: 9d:fe:9b:4a:78:86:df:f9:e3:fd:e5:6e:43:74:f9: 80:16:70:ac:35:08:56:88:90:b2:d6:6e:0d:f0:a0: 0f:63:3d:6f:76:54:34:99:98:8b:55:27:8f:e8:f8: 2e:08:48:9c:8f:59:a1:c0:94:cf:7c:2a:98:b9:73: df:ef:c9:19:ae:51:39:c1:9a:0f:b3:65:85:f7:44: 3b:f7:65:09:64:be:f7:65:7a:a5:8c:e9:43:b1:f7: 56:86:3f:8a:84:0b:a9:39:49:bb:ba:5c:87:64:51: 0b:54:1b:4a:19:7f:86:0f:83:50:49:90:fc:ff:36: 93:be:28:a3:07:08:4c:5c:4d:5b:51:e9:88:09:79: 72:ab:57:c1:f9:12:d7:92:be:4a:16:5d:7c:81:0b: 9a:24:31:4d:22:4f:48:c6:b3:9d:27:0a:bf:7e:4f: f8:08:20:fe:06:a1:a9:c2:2e:99:10:99:58:0a:68: 4f:c6:2d:30:d9:6e:cf:77:89:73:08:b9:33:eb:ae: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:27:0F:42:43:12:F9:39:CB:2A:C5:88:27:34:2B:10:09:93:55:2D X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:bd:bb:ef:05:80:db:dd:c4:7d:61:1c:df:24:25:f1:0a:9c: e3:5d:e7:69:6d:10:a7:29:c9:c3:fe:55:40:bb:77:ab:96:13: 8e:34:89:cc:65:e4:3b:18:c3:da:ab:e5:33:56:b7:79:27:44: 10:0f:6c:d1:00:f3:17:c6:65:7a:0e:66:81:fb:67:7e:14:d6: 84:b8:3b:6f:f5:9d:b4:58:89:d4:1d:dd:bd:5a:d2:e5:29:2b: ab:f2:ab:1a:16:dc:db:0c:93:a7:d4:aa:8a:66:a7:01:b8:57: 28:bc:50:21:9c:f3:dc:79:50:28:1f:cf:86:88:b3:c1:69:b9: 0e:72:a1:96:78:1b:5f:3f:73:55:49:30:09:2f:5a:76:42:5e: 6b:3c:7a:30:6b:a7:94:6b:42:1a:e2:8c:39:70:fe:e9:49:65: 5f:75:b5:bb:70:fc:b0:89:bb:77:67:fe:65:83:6e:9b:e2:9e: 95:3d:7c:67:44:f6:86:32:0f:3b:68:76:5b:31:3b:5a:66:4e: fe:e9:25:d3:c1:33:cc:42:8e:a5:e7:7d:63:ef:2f:cd:ac:84: 98:57:49:07:eb:a9:6f:16:b4:71:ae:72:20:29:27:4e:ca:c2: ea:3f:cd:37:e2:3b:97:d9:af:23:96:e3:d9:e2:84:c0:b3:93: a1:e0:42:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUwNDA0MTU1MzI0WhcNMjUwNDExMTU1MzI0WjAYMRYwFAYD VQQDEw02N2YwMDA3NC03N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKbac+L19vhonMLvH/xCUiU3J+ZK5PW3aHWISe8ZHAanC5KWbIJ7VoREx/gl SIarRG5wJjLI8Ndhq3Kd/ptKeIbf+eP95W5DdPmAFnCsNQhWiJCy1m4N8KAPYz1v dlQ0mZiLVSeP6PguCEicj1mhwJTPfCqYuXPf78kZrlE5wZoPs2WF90Q792UJZL73 ZXqljOlDsfdWhj+KhAupOUm7ulyHZFELVBtKGX+GD4NQSZD8/zaTviijBwhMXE1b UemICXlyq1fB+RLXkr5KFl18gQuaJDFNIk9IxrOdJwq/fk/4CCD+BqGpwi6ZEJlY CmhPxi0w2W7Pd4lzCLkz666SkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMnD0JD Evk5yyrFiCc0KxAJk1UtMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4vbvvBYDb3cR9YRzfJCXxCpzjXedpbRCnKcnD/lVAu3erlhOONInM ZeQ7GMPaq+UzVrd5J0QQD2zRAPMXxmV6DmaB+2d+FNaEuDtv9Z20WInUHd29WtLl KSur8qsaFtzbDJOn1KqKZqcBuFcovFAhnPPceVAoH8+GiLPBabkOcqGWeBtfP3NV STAJL1p2Ql5rPHowa6eUa0Ia4ow5cP7pSWVfdbW7cPywibt3Z/5lg26b4p6VPXxn RPaGMg87aHZbMTtaZk7+6SXTwTPMQo6l531j7y/NrISYV0kH66lvFrRxrnIgKSdO ysLqP8034juX2a8jluPZ4oTAs5Oh4EKG -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:53 2025 by rpki-client