$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: ORS6b8ebNBm0JNcDD8BQ7uRS8fG9RUX0lAkbjTCEDiA= Subject key identifier: 9D:E1:FD:ED:33:1E:2F:EF:81:7C:5F:4A:EC:55:B6:0C:23:3E:35:60 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 01AD Signing time: Thu 17 Apr 2025 02:15:11 +0000 Manifest this update: Thu 17 Apr 2025 02:15:10 +0000 Manifest next update: Thu 24 Apr 2025 02:15:10 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: W68/5FxwMpS7ZQekRbxIhhRdJkAynK7crRuGDCReBWw=) 2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: 4hy1f5KhPhwHVnBrwdKHHsp/qGx5VbOvDT16foHwuRM=) 3: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: l3pw7Z4d1Nkw0APH0xp6K2791IsFOtCcx1C4farScNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 02:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Apr 17 02:15:10 2025 GMT Not After : Apr 24 02:15:10 2025 GMT Subject: CN=6800642f-1c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:6f:9c:c4:f7:df:5b:87:91:82:b6:2c:be: d4:43:ba:2e:41:12:e6:ff:34:2a:3a:22:40:6c:cd: 34:9e:52:58:83:ae:02:48:cd:65:bd:d9:81:07:17: 97:08:25:17:c9:28:9a:ba:8c:55:14:6e:57:41:cd: 0e:e3:70:a9:0b:a0:33:f8:93:04:a0:7e:68:d2:31: ef:3f:39:2e:a5:92:f0:ae:24:6f:eb:ca:48:7e:05: 86:02:bd:9d:e5:98:20:08:4a:09:0b:00:1f:d8:de: 47:82:a0:46:91:29:77:75:35:48:0e:56:cf:ae:cd: 96:42:de:c5:00:ef:4a:08:73:64:b8:77:2d:c3:f5: cb:63:d1:7e:d5:37:2c:5a:8e:05:2e:b0:6c:87:fb: d6:ca:e3:2b:22:ed:d4:ff:66:f6:9c:64:76:92:8d: 78:f1:85:48:a2:40:12:5b:a3:f1:19:4a:c2:4c:7c: 45:a3:4a:a4:be:a1:d8:8b:02:05:46:43:0c:f1:d9: 0a:74:d1:54:6a:79:e7:34:aa:59:9c:d0:2f:0d:ad: 75:f4:10:90:7a:b9:aa:57:b5:c8:40:e6:5c:c2:d1: bb:59:5f:36:04:cb:fb:63:a2:2d:e6:fb:23:82:94: f7:73:69:d4:b0:ff:2c:28:29:20:ca:ef:27:35:6b: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E1:FD:ED:33:1E:2F:EF:81:7C:5F:4A:EC:55:B6:0C:23:3E:35:60 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:87:4b:8a:2f:81:f4:9b:f4:26:49:a1:c8:d7:a0:d1:19:d0: 6a:2a:fa:8b:76:01:af:ec:cc:2a:ed:8f:01:7e:83:8d:ae:27: df:a1:49:b3:34:35:ab:9e:47:c7:8d:75:4b:78:6f:b1:45:a4: e8:d6:06:05:df:65:bd:6c:00:cb:02:94:c5:01:e8:6e:9e:5b: 87:01:dd:2c:28:1f:23:a3:30:c2:72:dd:73:2b:f7:9d:e5:5e: 02:67:29:50:34:d0:68:80:62:b0:c0:8b:2c:08:1f:b3:76:bb: a8:89:62:11:91:df:47:ca:4c:04:c6:e3:f3:ed:5d:6e:2f:1f: 0f:e3:18:00:fd:8f:cc:ed:57:4f:ba:f9:06:a5:78:2b:6b:5d: f3:04:c5:fc:97:49:79:f7:e5:ff:72:58:70:a1:87:42:72:87: 75:85:5b:df:69:e7:8c:bc:c9:45:da:66:c5:f0:cd:80:ee:01: 49:f5:9e:96:30:6a:f9:2d:b7:eb:1a:cc:2f:c6:a0:40:03:a3: 8f:b3:4e:b2:b7:76:35:04:f5:cc:9a:10:91:84:1c:7a:84:a0: 33:1a:73:62:41:51:cf:22:a0:70:23:61:ec:39:64:b4:a3:3c: a3:e9:4c:41:b4:71:13:bc:29:46:05:25:85:ba:38:a8:3d:6d: 15:ca:8d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUwNDE3MDIxNTEwWhcNMjUwNDI0MDIxNTEwWjAYMRYwFAYD VQQDEw02ODAwNjQyZi0xYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgdvnMT331uHkYK2LL7UQ7ouQRLm/zQqOiJAbM00nlJYg64CSM1lvdmBBxeX CCUXySiauoxVFG5XQc0O43CpC6Az+JMEoH5o0jHvPzkupZLwriRv68pIfgWGAr2d 5ZggCEoJCwAf2N5HgqBGkSl3dTVIDlbPrs2WQt7FAO9KCHNkuHctw/XLY9F+1Tcs Wo4FLrBsh/vWyuMrIu3U/2b2nGR2ko148YVIokASW6PxGUrCTHxFo0qkvqHYiwIF RkMM8dkKdNFUannnNKpZnNAvDa119BCQermqV7XIQOZcwtG7WV82BMv7Y6It5vsj gpT3c2nUsP8sKCkgyu8nNWvuEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3h/e0z Hi/vgXxfSuxVtgwjPjVgMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoh0uKL4H0m/QmSaHI16DRGdBqKvqLdgGv7Mwq7Y8BfoONriffoUmz NDWrnkfHjXVLeG+xRaTo1gYF32W9bADLApTFAehunluHAd0sKB8jozDCct1zK/ed 5V4CZylQNNBogGKwwIssCB+zdruoiWIRkd9HykwExuPz7V1uLx8P4xgA/Y/M7VdP uvkGpXgra13zBMX8l0l59+X/clhwoYdCcod1hVvfaeeMvMlF2mbF8M2A7gFJ9Z6W MGr5LbfrGswvxqBAA6OPs06yt3Y1BPXMmhCRhBx6hKAzGnNiQVHPIqBwI2HsOWS0 ozyj6UxBtHETvClGBSWFujioPW0Vyo10 -----END CERTIFICATE-----Generated at Sat Apr 19 01:07:24 2025 by rpki-client