$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: YFnDXaFCSBSDq3R38cwiaYnL/hjg3CZ8FHtWXm9dlC8= Subject key identifier: 33:D1:A9:F7:ED:D0:5E:4B:B7:A4:21:1D:F5:5C:51:88:82:8F:1F:73 Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 067B Signing time: Fri 28 Mar 2025 22:34:36 +0000 Manifest this update: Fri 28 Mar 2025 22:34:35 +0000 Manifest next update: Fri 04 Apr 2025 22:34:35 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: 5yzhNhNAMc4LokMGXySFgwNTm0KbNgF/JtIXwV/Hzrk=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED Validity Not Before: Mar 28 22:34:35 2025 GMT Not After : Apr 4 22:34:35 2025 GMT Subject: CN=67e723fb-b42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:2b:7f:46:ce:8e:d4:23:5c:2a:cb:38:83: c9:b2:f7:5d:af:99:74:a4:65:52:87:3d:08:99:00: 95:09:e9:fb:e0:ca:db:0c:88:86:21:ff:a5:f6:a5: 9c:0c:1d:c0:44:b1:6f:10:80:07:a2:0e:9e:cf:3b: 6f:bd:50:6d:48:4a:21:12:3b:3b:c8:b7:9a:62:87: 7f:72:ee:0b:43:f0:f8:92:b5:30:ac:8e:2f:bd:8f: 1d:59:1b:7d:55:fd:01:4d:4b:c2:dc:08:cf:07:20: 1e:ab:e2:02:22:8a:40:64:c2:f7:57:4e:e2:89:1e: 08:b9:19:64:27:1b:1a:22:03:a4:7d:fe:29:73:74: 9b:05:5e:41:97:b0:ec:74:62:d1:ca:4b:22:16:82: 42:4e:84:a1:f4:e3:78:26:8f:8a:a8:a7:a2:1d:9f: 60:46:2d:d8:9b:9a:ee:59:21:1c:7d:7b:39:db:ab: d1:e5:1b:92:b2:cc:23:fe:b7:4d:49:82:ff:bb:31: 35:7d:94:09:ac:48:12:8d:18:46:45:5b:f8:a3:c3: 8c:75:82:73:bf:f0:b0:f5:a5:f2:04:15:2d:96:64: 0c:f5:2c:49:06:06:76:af:b3:6c:f2:75:5a:a1:17: e9:e5:f2:ab:4e:80:e9:ad:02:0a:68:e7:8a:17:4d: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:A9:F7:ED:D0:5E:4B:B7:A4:21:1D:F5:5C:51:88:82:8F:1F:73 X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:18:52:25:79:18:a9:05:20:e3:18:f6:44:1f:ca:61:6c:28: 45:d8:c6:4f:64:1a:99:90:93:fd:fb:7f:04:c1:c5:52:16:9c: 03:98:d9:21:f9:af:24:87:7b:92:d5:bb:17:a6:94:59:9f:99: 04:7f:13:ac:96:b5:0c:7f:c8:5f:d4:6e:30:2a:9a:02:6d:d7: 6f:63:70:bb:07:8f:a0:52:18:e7:54:67:34:5d:16:37:fe:d7: b1:ef:26:e6:23:e9:43:1b:87:34:bf:8b:6c:65:82:d5:b9:c7: af:12:ae:f4:ee:ee:14:91:4e:2b:84:b4:6c:25:0f:a4:00:25: 1c:90:45:40:00:c5:c8:99:fa:93:2e:7f:0d:c3:c6:81:10:03: 87:8f:e7:11:15:37:6f:21:a1:9a:49:e7:c3:88:cd:7a:e7:a5: eb:6b:da:40:76:02:be:37:13:91:22:03:9a:80:cb:a2:1a:32: b7:9d:cf:5d:7c:1d:e3:3d:83:e1:2e:93:f5:37:eb:8a:97:63: c1:a9:5d:3a:fe:ce:6a:1e:64:89:dc:fd:5c:95:d2:7b:7a:6f: 66:15:ae:da:81:bd:98:1d:44:ce:bc:e0:67:ee:40:f2:33:5a: 06:e0:97:95:42:8e:d5:41:65:4d:07:92:f0:5d:3d:87:66:ce: c4:1d:15:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUwMzI4MjIzNDM1WhcNMjUwNDA0MjIzNDM1WjAYMRYwFAYD VQQDEw02N2U3MjNmYi1iNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxYrf0bOjtQjXCrLOIPJsvddr5l0pGVShz0ImQCVCen74MrbDIiGIf+l9qWc DB3ARLFvEIAHog6ezztvvVBtSEohEjs7yLeaYod/cu4LQ/D4krUwrI4vvY8dWRt9 Vf0BTUvC3AjPByAeq+ICIopAZML3V07iiR4IuRlkJxsaIgOkff4pc3SbBV5Bl7Ds dGLRyksiFoJCToSh9ON4Jo+KqKeiHZ9gRi3Ym5ruWSEcfXs526vR5RuSsswj/rdN SYL/uzE1fZQJrEgSjRhGRVv4o8OMdYJzv/Cw9aXyBBUtlmQM9SxJBgZ2r7Ns8nVa oRfp5fKrToDprQIKaOeKF02URwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPRqfft 0F5Lt6QhHfVcUYiCjx9zMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAGFIleRipBSDjGPZEH8phbChF2MZPZBqZkJP9+38EwcVSFpwDmNkh +a8kh3uS1bsXppRZn5kEfxOslrUMf8hf1G4wKpoCbddvY3C7B4+gUhjnVGc0XRY3 /tex7ybmI+lDG4c0v4tsZYLVucevEq707u4UkU4rhLRsJQ+kACUckEVAAMXImfqT Ln8Nw8aBEAOHj+cRFTdvIaGaSefDiM1656Xra9pAdgK+NxORIgOagMuiGjK3nc9d fB3jPYPhLpP1N+uKl2PBqV06/s5qHmSJ3P1cldJ7em9mFa7agb2YHUTOvOBn7kDy M1oG4JeVQo7VQWVNB5LwXT2HZs7EHRVV -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:14 2025 by rpki-client