$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: W4OLgWieD8CKx03AuqGdikfNLd128yD0V7UCOrWIqII= Subject key identifier: 91:24:4C:E3:01:31:77:3E:A3:8E:48:FB:C0:E1:6F:EB:0B:2A:34:3D Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 4D Signing time: Mon 07 Apr 2025 06:10:10 +0000 Manifest this update: Mon 07 Apr 2025 06:10:09 +0000 Manifest next update: Mon 14 Apr 2025 06:10:09 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: kXFPa+pOpPHl+LS5v3ZW5QWecXdMdPJ4b53bx3xHPrk=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5 Validity Not Before: Apr 7 06:10:09 2025 GMT Not After : Apr 14 06:10:09 2025 GMT Subject: CN=67f36c41-c731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:a6:88:21:73:78:f1:e4:d2:69:94:b5:34: 5c:17:1c:75:38:49:d6:2c:6c:02:8e:57:e2:56:d1: 6e:e5:f1:fa:e4:b5:44:12:e9:b9:e8:13:0c:e5:37: 33:0d:d4:7b:ca:25:30:b9:f1:5c:ac:1b:cc:3c:4b: bd:91:00:18:05:e8:d4:1b:47:63:ee:e5:20:b2:f7: 8b:b0:8f:10:7d:71:82:f8:4d:14:e5:15:4b:bd:d5: 11:e1:34:16:ee:e3:5c:8a:9b:f3:d1:a0:80:76:26: 3b:0e:b1:8d:64:47:7b:22:9f:a2:5d:a6:8a:96:cf: 71:1c:e7:74:b8:2e:f7:8c:ce:18:3d:20:ea:0c:2c: f2:05:5b:3c:7c:46:42:ac:5c:d2:8c:c4:eb:bf:ef: 53:67:e4:94:12:0a:67:16:12:49:de:de:34:c0:22: ef:12:50:39:a0:ab:c9:90:3c:70:1e:5e:44:ac:bb: ea:45:fc:d8:9f:7f:60:83:9a:77:9a:ba:77:e6:7f: 74:36:b9:b5:76:35:84:d5:25:84:7a:be:b1:29:a1: 9a:06:69:2a:a4:cc:62:2d:24:00:60:c2:68:2e:92: 68:fb:5d:84:7c:56:ae:0d:82:76:a8:d9:e8:df:e0: a2:18:cd:cf:4c:45:9f:78:70:c3:62:33:53:55:4d: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:24:4C:E3:01:31:77:3E:A3:8E:48:FB:C0:E1:6F:EB:0B:2A:34:3D X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ea:44:76:10:76:54:62:74:b4:c1:d9:ca:65:86:73:f6:5e: 9f:2a:25:9c:9c:c5:ed:d6:ba:5c:7f:2d:dc:d7:d3:3e:fd:53: 0a:12:a4:3b:50:77:80:b3:6e:c0:19:79:86:69:76:05:d8:44: 10:00:20:b7:37:0d:dc:44:fc:72:e1:c5:ea:ec:20:c1:1e:a4: 53:d3:16:6f:ca:24:63:75:f8:31:43:4a:60:64:e5:fc:49:da: 72:f1:78:2b:23:34:58:17:bc:3c:b7:8c:39:e2:e1:2d:28:48: 2e:f3:ad:5a:b6:5b:58:9f:d5:9f:47:f0:e3:44:d6:4b:99:de: b2:b5:37:39:2d:06:5e:2e:ad:49:72:98:be:2f:99:83:56:75: 78:c2:5e:f2:4c:bd:6d:56:a4:3b:92:10:ce:9a:de:5b:e0:5c: 1d:6f:48:6e:e3:fb:ca:b7:a8:7c:b1:b2:65:38:86:98:4f:c8: 0e:61:43:b8:2d:71:0f:a3:6c:e0:62:21:20:cd:7b:29:5a:7e: de:6a:b3:40:fc:fe:51:de:2b:c3:8b:3b:2f:2a:63:d5:cc:07: 7b:be:dd:44:af:05:be:bd:22:a7:9a:c0:3b:8a:bc:bd:09:da: b5:55:a9:1f:c8:b8:ea:43:22:be:98:4a:9b:60:c7:4c:be:cc: 6b:de:90:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoQ0ZFMDcxQTk3MkZENzhBNjdGNkQzRUQ1NkE2MTg0MzQw QUIzRTNBNjAeFw0yNTA0MDcwNjEwMDlaFw0yNTA0MTQwNjEwMDlaMBgxFjAUBgNV BAMTDTY3ZjM2YzQxLWM3MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3KaIIXN48eTSaZS1NFwXHHU4SdYsbAKOV+JW0W7l8frktUQS6bnoEwzlNzMN 1HvKJTC58VysG8w8S72RABgF6NQbR2Pu5SCy94uwjxB9cYL4TRTlFUu91RHhNBbu 41yKm/PRoIB2JjsOsY1kR3sin6JdpoqWz3Ec53S4LveMzhg9IOoMLPIFWzx8RkKs XNKMxOu/71Nn5JQSCmcWEkne3jTAIu8SUDmgq8mQPHAeXkSsu+pF/Niff2CDmnea unfmf3Q2ubV2NYTVJYR6vrEpoZoGaSqkzGItJABgwmgukmj7XYR8Vq4Ngnao2ejf 4KIYzc9MRZ94cMNiM1NVTS2pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkSRM4wEx dz6jjkj7wOFv6wsqND0wHwYDVR0jBBgwFoAUz+BxqXL9eKZ/bT7VamGENAqz46Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0JGNTBFODYyQTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvei1CeHFYTDllS1pfYlQ3VmFtR0VOQXF6NDZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0JGNTBFODYyQTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUta X2JUN1ZhbUdFTkFxejQ2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvqRHYQdlRidLTB2cplhnP2Xp8qJZycxe3Wulx/LdzX0z79UwoSpDtQ d4CzbsAZeYZpdgXYRBAAILc3DdxE/HLhxersIMEepFPTFm/KJGN1+DFDSmBk5fxJ 2nLxeCsjNFgXvDy3jDni4S0oSC7zrVq2W1if1Z9H8ONE1kuZ3rK1NzktBl4urUly mL4vmYNWdXjCXvJMvW1WpDuSEM6a3lvgXB1vSG7j+8q3qHyxsmU4hphPyA5hQ7gt cQ+jbOBiISDNeylaft5qs0D8/lHeK8OLOy8qY9XMB3u+3USvBb69IqeawDuKvL0J 2rVVqR/IuOpDIr6YSptgx0y+zGvekOk= -----END CERTIFICATE-----Generated at Tue Apr 8 18:08:02 2025 by rpki-client