$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft File: z8CATaxP_3oipAThDphkpxHeGck.mft (raw, json) Hash identifier: GRR0LPRn1DPwI0fkmyYPd3ifHbueosgJtRjuy7Njwqs= Subject key identifier: A4:F5:F8:96:58:38:6F:E3:B7:B6:4E:F4:6A:3D:27:79:50:F7:5F:A9 Authority key identifier: CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9 Certificate issuer: /CN=A91A12C4/serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft Manifest number: 71 Signing time: Fri 11 Apr 2025 06:02:28 +0000 Manifest this update: Fri 11 Apr 2025 06:02:28 +0000 Manifest next update: Fri 18 Apr 2025 06:02:28 +0000 Files and hashes: 1: z8CATaxP_3oipAThDphkpxHeGck.crl (hash: lNv4858Zdfuu0ivLYuU0dawak/ToOhptNlHqsP4NqT8=) 2: BCA395126C1811EFAFBE6B0FC4F9AE02.roa (hash: Mb/JnRkZoctaPV3WHu0XOAV8U5+c9ZbVehfTb/x4GMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4, serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9 Validity Not Before: Apr 11 06:02:28 2025 GMT Not After : Apr 18 06:02:28 2025 GMT Subject: CN=67f8b074-099d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:07:33:ad:82:cc:23:48:6b:2e:2f:00:e0: 2b:f5:d1:e9:45:53:c8:e1:04:22:5f:ca:56:fd:87: d6:c9:46:3c:eb:8d:42:4f:02:dc:13:75:eb:93:8b: 5e:1c:54:24:37:99:b1:2d:3a:1f:98:b0:28:17:6d: 5e:ae:52:3e:df:cc:9d:dc:8a:35:cd:87:c5:e6:dc: d8:17:65:3a:e5:fc:1d:96:c9:e9:6b:26:df:24:0a: 4d:9f:11:2e:5c:4e:33:7b:e3:32:c5:ed:04:d7:68: 7e:a6:4e:ea:0a:a1:f9:90:55:dc:6c:0d:0e:0a:e0: 8a:a4:40:db:85:0d:e7:57:d3:80:2f:62:37:49:a7: 8d:c5:89:f2:26:67:96:8b:f7:e5:27:a5:31:23:38: 48:2f:9d:f2:41:35:cc:96:09:0c:b0:44:a0:91:ae: 7d:a7:f7:21:8f:7f:c5:04:65:c1:e7:7e:53:b8:64: 36:f2:ab:50:b4:5a:4d:f2:8e:7f:85:5b:17:6e:31: 26:55:f0:05:56:d3:5b:07:a9:94:52:5c:41:4f:c5: 80:3d:e9:37:c8:19:0c:36:dd:de:1b:e2:87:37:66: 63:10:4d:0b:d1:68:d4:24:50:e6:a6:37:b5:c8:65: 41:25:2c:d4:82:8b:41:15:20:cd:fa:50:2b:b7:62: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F5:F8:96:58:38:6F:E3:B7:B6:4E:F4:6A:3D:27:79:50:F7:5F:A9 X509v3 Authority Key Identifier: keyid:CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7f:24:ef:3f:32:ae:6f:f2:e9:ee:5c:19:55:94:5c:7f:6a: 4d:94:0a:4c:df:f8:b8:cb:c8:c9:78:8d:46:31:ce:dc:e2:b0: 22:77:a7:3a:f7:d6:3a:32:c1:e2:27:d1:31:c5:75:cb:ef:84: 23:78:70:e0:77:a4:66:d2:05:0c:99:55:38:10:b5:7f:03:0e: 7c:87:33:30:b0:4f:b7:6b:96:0c:d5:bb:e3:01:82:95:9c:cf: 52:67:51:cd:26:a1:e9:81:48:cc:b2:ba:5c:81:9e:33:db:b7: 50:52:9f:a7:8f:70:a7:29:2b:04:0a:52:04:03:40:10:81:34: 51:b8:47:6c:dd:45:74:78:2e:b4:3a:4d:db:03:4c:3b:79:88: fa:77:4b:94:b1:11:fd:1c:ab:62:8e:36:62:6d:86:66:46:53: 12:e2:09:46:17:19:56:7e:c4:0b:1f:03:6e:8e:25:00:c0:9b: f3:3b:a9:d9:fc:6f:f0:83:96:38:66:e2:10:7e:39:9b:d4:17: 8c:e6:17:9c:e2:7e:27:42:7d:42:a1:85:c8:02:28:5d:91:a8: bf:d6:7e:ee:05:3d:59:d3:fe:f4:7e:0f:2d:e3:d2:f6:ba:fe: 22:03:7b:8f:1c:67:b9:69:a4:9d:0a:a5:59:89:05:7c:14:a1: f2:89:24:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTJDNDExMC8GA1UEBRMoQ0ZDMDgwNERBQzRGRkY3QTIyQTQwNEUxMEU5ODY0QTcx MURFMTlDOTAeFw0yNTA0MTEwNjAyMjhaFw0yNTA0MTgwNjAyMjhaMBgxFjAUBgNV BAMTDTY3ZjhiMDc0LTA5OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzKwczrYLMI0hrLi8A4Cv10elFU8jhBCJfylb9h9bJRjzrjUJPAtwTdeuTi14c VCQ3mbEtOh+YsCgXbV6uUj7fzJ3cijXNh8Xm3NgXZTrl/B2WyelrJt8kCk2fES5c TjN74zLF7QTXaH6mTuoKofmQVdxsDQ4K4IqkQNuFDedX04AvYjdJp43FifImZ5aL 9+UnpTEjOEgvnfJBNcyWCQywRKCRrn2n9yGPf8UEZcHnflO4ZDbyq1C0Wk3yjn+F WxduMSZV8AVW01sHqZRSXEFPxYA96TfIGQw23d4b4oc3ZmMQTQvRaNQkUOamN7XI ZUElLNSCi0EVIM36UCu3Yg01AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpPX4llg4 b+O3tk70aj0neVD3X6kwHwYDVR0jBBgwFoAUz8CATaxP/3oipAThDphkpxHeGckw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExMkM0L0YzMTlFREMyNkMx NzExRUZCREJGRDUwQkM0RjlBRTAyL3o4Q0FUYXhQXzNvaXBBVGhEcGhrcHhIZUdj ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvejhDQVRheFBfM29pcEFUaERwaGtweEhlR2NrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx MkM0L0YzMTlFREMyNkMxNzExRUZCREJGRDUwQkM0RjlBRTAyL3o4Q0FUYXhQXzNv aXBBVGhEcGhrcHhIZUdjay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACB/JO8/Mq5v8unuXBlVlFx/ak2UCkzf+LjLyMl4jUYxztzisCJ3pzr3 1joyweIn0THFdcvvhCN4cOB3pGbSBQyZVTgQtX8DDnyHMzCwT7drlgzVu+MBgpWc z1JnUc0moemBSMyyulyBnjPbt1BSn6ePcKcpKwQKUgQDQBCBNFG4R2zdRXR4LrQ6 TdsDTDt5iPp3S5SxEf0cq2KONmJthmZGUxLiCUYXGVZ+xAsfA26OJQDAm/M7qdn8 b/CDljhm4hB+OZvUF4zmF5zifidCfUKhhcgCKF2RqL/Wfu4FPVnT/vR+Dy3j0va6 /iIDe48cZ7lppJ0KpVmJBXwUofKJJA8= -----END CERTIFICATE-----Generated at Sun Apr 13 01:31:54 2025 by rpki-client