$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: sB/BrmhvDEJacNq2ljsIICilPSIrptUl3rhkdR8yWmw= Subject key identifier: BF:C7:38:B3:AF:15:7C:76:39:B8:22:EC:5B:D1:E9:11:8F:0E:56:CD Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1ABD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1A90 Signing time: Tue 08 Apr 2025 16:20:45 +0000 Manifest this update: Tue 08 Apr 2025 16:20:43 +0000 Manifest next update: Tue 15 Apr 2025 16:20:43 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: Y5fzcndJAQSoIajZy3y3+bALi1eRspvzhBshoEbWZG8=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: A6xdM14VrnCdwg0TqU0I0zzOpRFsFmCK+agsWkSMQCA=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: vrRUnpBdqM34i5a9Uoksk8sscXoYe/cPgohb+RiQ9YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6845 (0x1abd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048 Validity Not Before: Apr 8 16:20:43 2025 GMT Not After : Apr 15 16:20:43 2025 GMT Subject: CN=67f54cdc-1019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:01:26:47:d1:63:f6:a6:1d:d0:38:62:67: d2:97:b9:65:25:66:2f:2f:3e:e5:90:90:61:10:93: e4:35:6c:90:4e:bb:47:df:bb:2a:f6:28:02:90:6b: 6c:7b:33:85:f2:21:c9:16:01:fb:b5:16:12:4f:1e: 98:3d:6b:9d:9d:2d:35:6d:8a:63:ab:22:83:93:fb: 79:ab:6f:42:d6:5f:91:52:34:1b:05:76:ca:be:fc: 3d:bc:a3:26:e2:37:a3:53:d9:38:48:bc:85:61:c8: a8:fb:b6:9e:32:9e:70:b2:2b:f0:86:23:5f:ba:d6: 08:5e:c7:f8:6b:31:8e:33:39:92:88:cd:cb:04:05: 7b:e2:df:f6:d5:2e:70:4b:e0:82:6e:6d:56:c6:54: 01:67:e5:3d:d3:f4:d6:02:4d:5f:a0:8b:fe:46:d2: 18:ae:5b:57:1e:8a:77:ca:2f:38:3f:fd:16:2e:cf: bd:69:8b:7d:63:f4:99:9d:ee:03:41:de:d6:ef:29: 1a:76:05:a5:52:7a:be:9e:1b:b5:1d:34:c4:09:34: b1:d7:f3:fd:20:06:6f:f5:e2:83:2c:45:22:49:36: 9c:bb:f5:3d:2d:9c:a2:ea:2f:f4:e2:ec:5a:27:bf: 51:b7:7a:38:41:8a:ee:c2:e1:de:e4:17:b4:2a:2f: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C7:38:B3:AF:15:7C:76:39:B8:22:EC:5B:D1:E9:11:8F:0E:56:CD X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:45:0b:c8:9e:8a:a2:59:6a:24:68:5a:3d:ec:75:d0:fd:60: a8:9e:28:30:41:34:ba:4c:1a:b6:b2:19:3d:b8:65:74:7c:bd: 76:03:64:79:95:3c:84:f7:a0:e5:a7:41:f4:86:ce:73:e7:e9: d3:47:05:d5:af:22:86:b4:ba:a3:bd:96:8c:60:4f:23:e4:06: 29:3b:dc:94:63:54:c3:27:fc:d8:58:12:ac:52:1b:4f:fe:49: ba:1f:ca:6b:58:9a:0d:41:fc:35:3a:8b:16:56:34:b0:ff:fd: d1:56:f2:8e:33:b5:4d:cc:41:cb:7f:8f:92:6e:a9:be:67:d6: 24:18:64:a6:4c:84:af:21:83:2d:1a:db:2d:f5:1d:00:05:43: 7a:07:af:d7:89:34:f6:da:61:7d:21:56:a2:77:d6:4b:0b:8f: b5:c0:77:f4:83:ff:76:2d:b3:28:38:0a:c4:a9:18:2b:7e:68: 0b:f0:19:49:34:28:2f:d3:f6:1e:c5:0e:9b:43:3f:aa:33:c8: 17:54:1f:8c:49:4f:38:b3:97:de:07:85:a2:27:54:37:26:a2: 62:1c:dc:09:76:c9:a4:13:46:20:bd:e9:5f:cb:79:a3:75:02: 91:51:90:f2:19:19:9f:57:e9:17:5f:6a:70:2e:cc:5e:6c:35: 81:8d:5a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUwNDA4MTYyMDQzWhcNMjUwNDE1MTYyMDQzWjAYMRYwFAYD VQQDEw02N2Y1NGNkYy0xMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2sBJkfRY/amHdA4YmfSl7llJWYvLz7lkJBhEJPkNWyQTrtH37sq9igCkGts ezOF8iHJFgH7tRYSTx6YPWudnS01bYpjqyKDk/t5q29C1l+RUjQbBXbKvvw9vKMm 4jejU9k4SLyFYcio+7aeMp5wsivwhiNfutYIXsf4azGOMzmSiM3LBAV74t/21S5w S+CCbm1WxlQBZ+U90/TWAk1foIv+RtIYrltXHop3yi84P/0WLs+9aYt9Y/SZne4D Qd7W7ykadgWlUnq+nhu1HTTECTSx1/P9IAZv9eKDLEUiSTacu/U9LZyi6i/04uxa J79Rt3o4QYruwuHe5Be0Ki+NiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/HOLOv FXx2Obgi7FvR6RGPDlbNMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmRQvInoqiWWokaFo97HXQ/WConigwQTS6TBq2shk9uGV0fL12A2R5 lTyE96Dlp0H0hs5z5+nTRwXVryKGtLqjvZaMYE8j5AYpO9yUY1TDJ/zYWBKsUhtP /km6H8prWJoNQfw1OosWVjSw//3RVvKOM7VNzEHLf4+Sbqm+Z9YkGGSmTISvIYMt Gtst9R0ABUN6B6/XiTT22mF9IVaid9ZLC4+1wHf0g/92LbMoOArEqRgrfmgL8BlJ NCgv0/YexQ6bQz+qM8gXVB+MSU84s5feB4WiJ1Q3JqJiHNwJdsmkE0Ygvelfy3mj dQKRUZDyGRmfV+kXX2pwLsxebDWBjVrM -----END CERTIFICATE-----Generated at Thu Apr 10 20:33:22 2025 by rpki-client