$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: sgASnwQ/7WpstAywBBi6ZuZZDvpj/xa/i1Lbl4Slhzc= Subject key identifier: 29:F0:7B:6E:00:F1:3C:0C:61:A6:81:08:6F:D1:1E:FC:C4:5D:45:03 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 0533 Signing time: Fri 28 Mar 2025 23:44:43 +0000 Manifest this update: Fri 28 Mar 2025 23:44:43 +0000 Manifest next update: Fri 04 Apr 2025 23:44:43 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: 3S6r9e+am9DRlxN2Xh5WGF1xzm3hWFR/BvmKo1jihg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C Validity Not Before: Mar 28 23:44:43 2025 GMT Not After : Apr 4 23:44:43 2025 GMT Subject: CN=67e7346b-e6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:97:3a:64:2b:37:f2:62:78:09:fa:c0:51:5c: 77:61:31:ad:07:db:97:1f:90:8f:55:4d:c9:be:9c: 43:f7:6c:e8:75:97:82:79:42:0f:a1:f5:c7:98:0d: ec:3e:38:4a:93:7d:47:00:51:b3:63:7b:36:24:14: 49:f7:24:fb:f4:3f:6e:ef:5a:0d:e2:6b:4b:71:f8: cb:c5:c2:40:03:8b:3a:0e:8a:ff:e0:28:da:b4:44: 66:c6:74:a9:04:a6:a6:4e:14:5d:4b:84:12:ca:d0: 60:08:65:da:f4:3d:c4:5f:ae:be:34:62:a7:dd:c2: f7:bb:c8:8c:cf:2d:67:9f:df:14:65:1b:42:86:d7: 19:2e:f4:6b:dc:95:17:7f:bb:79:02:73:dd:d1:6f: e8:8c:4c:1a:97:55:0e:22:e4:b1:ee:f8:21:9b:1e: 31:6e:1b:33:e5:3a:5f:db:2a:c5:e2:81:ae:af:24: 89:0c:bd:5d:00:dd:31:b3:6d:6f:04:27:8e:b4:9b: 3e:32:f7:46:00:42:29:a5:1d:0e:00:da:83:57:2b: 92:0d:36:50:d8:5f:fa:a2:b1:5b:cd:96:1e:1b:3e: 0f:7f:77:b9:59:db:69:9f:d5:d7:24:60:8c:ac:5f: 74:e6:be:a5:8b:67:ae:db:ec:27:2d:63:82:bb:40: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F0:7B:6E:00:F1:3C:0C:61:A6:81:08:6F:D1:1E:FC:C4:5D:45:03 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c9:8d:cb:d2:e5:76:7a:c2:f6:79:c5:37:f1:44:bf:5d:e9: b2:ce:f1:ca:21:e2:89:6b:99:26:69:48:aa:55:84:22:6d:90: 35:12:c4:c5:36:67:38:c6:69:fd:ec:aa:ff:38:24:d1:dd:8e: ff:a3:ed:f6:5f:05:c2:1f:dd:7c:74:19:2f:0f:14:81:73:d5: ea:f5:ec:db:f3:45:09:fe:f0:2f:ee:1a:a5:55:ae:26:b2:23: 10:a3:15:5b:fd:c0:7e:bd:65:7a:73:90:0b:6c:65:88:5f:8b: 10:b3:71:a7:8e:a6:c5:1e:31:c6:c2:33:1a:12:49:06:2d:56: 1f:23:07:ce:b2:65:07:ea:33:96:74:d6:f6:8d:9c:b7:33:0a: ce:cc:0e:a8:47:9e:a0:ac:04:35:59:d8:82:66:59:b0:93:ad: 70:a0:9b:28:95:6c:01:84:b3:59:d9:e7:2e:38:21:2a:84:d9: f8:1c:92:77:0a:5b:e6:70:bd:2a:a6:02:59:17:e5:4f:90:0f: ff:8e:16:78:9e:a4:74:18:86:08:7e:f1:99:68:d6:a0:87:63: fa:62:6d:bb:71:45:a4:7b:5c:8c:d8:7c:88:f2:d6:09:d1:84: 5e:55:77:be:a7:e8:ba:77:20:6d:20:9c:2b:36:c6:b9:9f:6c: 72:24:9a:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUwMzI4MjM0NDQzWhcNMjUwNDA0MjM0NDQzWjAYMRYwFAYD VQQDEw02N2U3MzQ2Yi1lNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85c6ZCs38mJ4CfrAUVx3YTGtB9uXH5CPVU3JvpxD92zodZeCeUIPofXHmA3s PjhKk31HAFGzY3s2JBRJ9yT79D9u71oN4mtLcfjLxcJAA4s6Dor/4CjatERmxnSp BKamThRdS4QSytBgCGXa9D3EX66+NGKn3cL3u8iMzy1nn98UZRtChtcZLvRr3JUX f7t5AnPd0W/ojEwal1UOIuSx7vghmx4xbhsz5Tpf2yrF4oGurySJDL1dAN0xs21v BCeOtJs+MvdGAEIppR0OANqDVyuSDTZQ2F/6orFbzZYeGz4Pf3e5Wdtpn9XXJGCM rF905r6li2eu2+wnLWOCu0DNKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnwe24A 8TwMYaaBCG/RHvzEXUUDMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEyY3L0uV2esL2ecU38US/XemyzvHKIeKJa5kmaUiqVYQibZA1EsTF Nmc4xmn97Kr/OCTR3Y7/o+32XwXCH918dBkvDxSBc9Xq9ezb80UJ/vAv7hqlVa4m siMQoxVb/cB+vWV6c5ALbGWIX4sQs3GnjqbFHjHGwjMaEkkGLVYfIwfOsmUH6jOW dNb2jZy3MwrOzA6oR56grAQ1WdiCZlmwk61woJsolWwBhLNZ2ecuOCEqhNn4HJJ3 ClvmcL0qpgJZF+VPkA//jhZ4nqR0GIYIfvGZaNagh2P6Ym27cUWke1yM2HyI8tYJ 0YReVXe+p+i6dyBtIJwrNsa5n2xyJJp6 -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:45 2025 by rpki-client