$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft File: zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json) Hash identifier: rGf5qZKOdUaa23AJmrBDTkdHNA7yJ8vroGKWOZP5Ar4= Subject key identifier: 7E:13:E6:7D:44:CC:EB:A5:50:7A:A6:5D:F6:0F:DB:49:63:67:88:E2 Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft Manifest number: 17 Signing time: Sat 05 Apr 2025 07:15:44 +0000 Manifest this update: Sat 05 Apr 2025 07:15:43 +0000 Manifest next update: Sat 12 Apr 2025 07:15:43 +0000 Files and hashes: 1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: gG3v13kQYRENidAe733M7vkvprlMLZUrt3zN3xoQFUk=) 2: 296C92D0F5B611EFB7E6426EC4F9AE02.roa (hash: DAG2avo3wM4Iv7tiFSCw0I7iwE7NYk5jbcu93twLDNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91565C6 Validity Not Before: Apr 5 07:15:43 2025 GMT Not After : Apr 12 07:15:43 2025 GMT Subject: CN=67f0d89f-d22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:04:33:ec:e4:28:16:d8:62:18:e7:01:5a: 0d:8d:dd:cf:f4:1e:27:f4:68:68:0c:76:1e:41:bf: 67:8f:7f:33:80:52:ad:a2:6b:1d:04:69:1e:f5:bd: 4d:79:f2:33:bc:2a:ea:f2:5d:5e:ce:77:15:9d:3a: cd:18:3f:a9:ef:95:85:ba:e7:90:82:8f:5a:67:52: 19:4e:61:55:35:a6:ba:6e:6c:a6:19:5a:9e:ff:37: c3:47:74:9c:ad:ad:13:e4:30:95:7d:3e:52:c7:38: 8d:ac:87:ee:ec:51:dd:9c:6c:3a:a0:4c:3f:67:0e: 37:b7:af:dd:41:b8:22:a6:03:f0:73:7f:17:21:36: a7:4f:a7:21:14:5a:e0:da:45:cf:98:70:4a:a4:69: 63:8c:f4:03:9a:ac:ce:64:6d:87:29:95:89:70:17: c5:76:24:0f:9b:60:6f:45:9a:13:b8:60:ab:77:91: 94:de:a0:b6:a7:34:85:72:0c:6c:f8:96:94:7f:73: 20:80:47:c4:43:05:5b:25:a1:03:db:56:f2:7d:cf: 9c:1c:4f:1d:f8:83:a7:3d:8d:e1:40:0c:1d:4b:f5: 1d:a2:ab:82:98:39:da:0a:f5:65:a7:79:ce:f0:69: 01:1d:90:51:b4:95:66:7b:10:bf:9f:9e:dc:44:f4: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:13:E6:7D:44:CC:EB:A5:50:7A:A6:5D:F6:0F:DB:49:63:67:88:E2 X509v3 Authority Key Identifier: keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:a6:ce:9e:d8:98:56:d6:31:fd:30:4c:4e:39:01:d7:09:8d: 1b:b4:d8:09:19:a4:dd:f1:ef:df:08:e6:e1:a0:ee:82:db:97: 3d:35:d5:33:ed:4e:55:fe:ae:86:8c:18:5c:1e:ad:1e:9d:e2: 92:1b:09:40:f5:5b:e8:59:9a:01:ca:46:ba:96:86:dd:cb:b4: 1a:e1:b4:e4:a7:4b:ea:8f:24:5d:98:60:b6:1c:b0:36:34:2b: 93:6c:8d:7a:8f:94:8f:81:24:7b:8b:56:ad:92:e6:47:f5:f9: 0e:cf:cb:0e:c5:50:53:a5:c4:28:bf:29:ef:41:8f:de:0c:e2: 1b:76:d8:92:0b:66:13:0f:bb:53:ff:31:f3:e6:0b:6e:2a:cf: a0:6c:79:5d:2a:c1:1c:d2:57:aa:aa:eb:dc:63:4e:ae:96:94: fb:06:bc:20:5e:04:ce:57:dc:3c:45:9b:db:c3:48:31:76:77: 70:1e:34:fd:39:6a:fa:3d:97:80:2f:aa:45:e6:25:7d:27:59: d4:12:d8:fa:34:c2:25:34:63:20:ef:cf:d3:83:c0:5e:29:b5: 5c:fa:fd:c6:3b:ff:10:a1:c2:4d:de:04:80:45:49:77:11:b2: 69:7d:5b:5a:3e:ca:b7:70:8a:5f:6a:32:e8:86:86:ea:65:77: 57:03:26:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjVDNjExMC8GA1UEBRMoQ0Q1MzVDN0VCMzFBNDBBM0ZEQjhBQzRENUQ1NzdBRjlE NkM1ODg0ODAeFw0yNTA0MDUwNzE1NDNaFw0yNTA0MTIwNzE1NDNaMBgxFjAUBgNV BAMTDTY3ZjBkODlmLWQyMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNhAQz7OQoFthiGOcBWg2N3c/0Hif0aGgMdh5Bv2ePfzOAUq2iax0EaR71vU15 8jO8KuryXV7OdxWdOs0YP6nvlYW655CCj1pnUhlOYVU1prpubKYZWp7/N8NHdJyt rRPkMJV9PlLHOI2sh+7sUd2cbDqgTD9nDje3r91BuCKmA/BzfxchNqdPpyEUWuDa Rc+YcEqkaWOM9AOarM5kbYcplYlwF8V2JA+bYG9FmhO4YKt3kZTeoLanNIVyDGz4 lpR/cyCAR8RDBVsloQPbVvJ9z5wcTx34g6c9jeFADB1L9R2iq4KYOdoK9WWnec7w aQEdkFG0lWZ7EL+fntxE9OYPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfhPmfUTM 66VQeqZd9g/bSWNniOIwHwYDVR0jBBgwFoAUzVNcfrMaQKP9uKxNXVd6+dbFiEgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NUM2L0QyNjVCMEM2RjQx RjExRUY4MTcwODg2OEM0RjlBRTAyL3pWTmNmck1hUUtQOXVLeE5YVmQ2LWRiRmlF Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelZOY2ZyTWFRS1A5dUt4TlhWZDYtZGJGaUVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NUM2L0QyNjVCMEM2RjQxRjExRUY4MTcwODg2OEM0RjlBRTAyL3pWTmNmck1hUUtQ OXVLeE5YVmQ2LWRiRmlFZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALmmzp7YmFbWMf0wTE45AdcJjRu02AkZpN3x798I5uGg7oLblz011TPt TlX+roaMGFwerR6d4pIbCUD1W+hZmgHKRrqWht3LtBrhtOSnS+qPJF2YYLYcsDY0 K5NsjXqPlI+BJHuLVq2S5kf1+Q7Pyw7FUFOlxCi/Ke9Bj94M4ht22JILZhMPu1P/ MfPmC24qz6BseV0qwRzSV6qq69xjTq6WlPsGvCBeBM5X3DxFm9vDSDF2d3AeNP05 avo9l4AvqkXmJX0nWdQS2Po0wiU0YyDvz9ODwF4ptVz6/cY7/xChwk3eBIBFSXcR sml9W1o+yrdwil9qMuiGhupld1cDJiM= -----END CERTIFICATE-----Generated at Sat Apr 5 14:30:39 2025 by rpki-client