$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: 6gry+4uXBgsjKSFIr3GXoRsixBw3jmPQza5ABbpkOGg= Subject key identifier: 0A:CE:96:29:61:B3:20:58:EC:5E:F2:0A:6B:97:EA:A2:1A:AE:48:03 Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0D16 Signing time: Fri 04 Apr 2025 18:11:06 +0000 Manifest this update: Fri 04 Apr 2025 18:11:06 +0000 Manifest next update: Fri 11 Apr 2025 18:11:05 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: wNz1EbiFPPDHdL/4pFHrR11s3O+Asy0FXu/xa/5EFL8=) 2: 73E16BB27C4711EFACFB1228C4F9AE02.roa (hash: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1 Validity Not Before: Apr 4 18:11:06 2025 GMT Not After : Apr 11 18:11:05 2025 GMT Subject: CN=67f020ba-504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:8b:3b:f0:8b:2b:06:eb:b4:28:7c:e6:a3: 17:a3:8b:cf:29:9c:89:1c:5e:84:9a:df:55:34:d4: 9e:a0:51:e4:09:b4:03:ef:d5:5c:8d:1c:98:10:3b: 31:89:aa:ea:19:da:41:b6:31:ec:80:55:d4:6a:38: f2:9a:a4:7f:f1:13:76:1a:a2:62:8c:69:2c:bc:60: ee:63:62:12:2e:1e:90:1f:80:c1:38:88:71:e0:8b: 20:d8:1d:04:b4:0d:07:ad:c8:6a:79:df:52:4c:bd: a2:48:03:33:be:e4:28:d8:92:15:e4:bb:a8:87:60: 5d:7b:0a:39:da:9d:45:04:41:60:ec:93:25:66:46: 48:5f:23:4e:7b:14:5a:ef:c9:57:ca:81:d9:d1:c6: 34:30:ec:a6:18:5f:c0:9c:28:f2:b1:0d:b3:6d:49: 2b:86:cb:1f:81:be:b3:2b:cc:20:f5:4f:a4:d3:12: c5:ac:66:ac:46:cb:c6:45:21:43:07:7d:f3:33:3a: a6:77:b2:ea:09:1e:95:b3:2a:e6:e7:7d:f8:1b:36: a3:05:ec:bc:9f:b6:e1:5d:42:be:38:a4:fa:21:c4: 0a:38:c3:97:23:af:e9:c3:36:08:cb:fe:5e:b9:55: ef:f6:c1:9b:2a:22:d4:14:25:40:2e:d6:28:07:cc: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CE:96:29:61:B3:20:58:EC:5E:F2:0A:6B:97:EA:A2:1A:AE:48:03 X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a6:1e:f2:35:f3:a9:1a:e8:97:fd:e9:c4:0d:9a:2c:bc:5b: aa:1c:7f:f5:95:4d:fe:7e:f3:cf:71:3e:e4:67:24:aa:e1:7b: b5:fa:33:28:29:f5:b4:1e:9d:ab:ec:54:b2:56:2c:35:b8:01: 42:16:56:11:dd:53:88:ec:7b:b4:e2:7a:0c:ff:e7:12:d5:be: 51:6d:da:27:d3:04:f2:38:d1:34:8c:f1:3b:c9:87:38:04:28: 0e:35:a3:e1:b0:16:4b:66:f2:5f:4e:62:b4:ef:6c:be:5b:95: 54:47:77:39:bd:84:12:c0:4d:d3:38:4a:96:90:b6:ec:46:5e: 05:1d:17:0c:61:58:98:c9:8a:fc:0b:be:4d:b0:15:1c:c7:72: 2e:6c:13:aa:df:ec:4c:de:a6:7f:8c:fb:48:b5:26:23:21:e2: 59:8e:74:0e:d5:6b:1e:ff:9f:f7:85:12:63:6c:16:ce:02:ec: 6d:ef:4d:29:c7:16:15:b7:b7:20:85:77:aa:7e:b2:99:26:a2: 66:50:2d:fe:57:3c:0b:fc:6a:79:25:a8:7d:b7:86:be:d2:e0: 5e:14:5b:a9:b6:ee:24:7b:d3:69:6f:de:86:95:17:b5:d6:b5: c4:04:e3:49:92:eb:11:1f:47:c9:7b:6a:c3:b2:64:71:ce:e9: f2:3e:55:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjUwNDA0MTgxMTA2WhcNMjUwNDExMTgxMTA1WjAYMRYwFAYD VQQDEw02N2YwMjBiYS01MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZaLO/CLKwbrtCh85qMXo4vPKZyJHF6Emt9VNNSeoFHkCbQD79VcjRyYEDsx iarqGdpBtjHsgFXUajjymqR/8RN2GqJijGksvGDuY2ISLh6QH4DBOIhx4Isg2B0E tA0Hrchqed9STL2iSAMzvuQo2JIV5Luoh2Bdewo52p1FBEFg7JMlZkZIXyNOexRa 78lXyoHZ0cY0MOymGF/AnCjysQ2zbUkrhssfgb6zK8wg9U+k0xLFrGasRsvGRSFD B33zMzqmd7LqCR6Vsyrm5334GzajBey8n7bhXUK+OKT6IcQKOMOXI6/pwzYIy/5e uVXv9sGbKiLUFCVALtYoB8zi+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArOlilh syBY7F7yCmuX6qIarkgDMB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeph7yNfOpGuiX/enEDZosvFuqHH/1lU3+fvPPcT7kZySq4Xu1+jMo KfW0Hp2r7FSyViw1uAFCFlYR3VOI7Hu04noM/+cS1b5Rbdon0wTyONE0jPE7yYc4 BCgONaPhsBZLZvJfTmK072y+W5VUR3c5vYQSwE3TOEqWkLbsRl4FHRcMYViYyYr8 C75NsBUcx3IubBOq3+xM3qZ/jPtItSYjIeJZjnQO1Wse/5/3hRJjbBbOAuxt700p xxYVt7cghXeqfrKZJqJmUC3+VzwL/Gp5Jah9t4a+0uBeFFuptu4ke9Npb96GlRe1 1rXEBONJkusRH0fJe2rDsmRxzunyPlVn -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:05 2025 by rpki-client