$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json) Hash identifier: O56kfMCAYjlu/kQifsQiwq+tBvp+q0FILeaPktkMcZM= Subject key identifier: 58:E9:50:64:A8:28:0C:BC:31:63:F5:D1:67:F2:52:45:D2:E8:94:1E Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft Manifest number: 0182 Signing time: Fri 11 Apr 2025 02:57:22 +0000 Manifest this update: Fri 11 Apr 2025 02:57:21 +0000 Manifest next update: Fri 18 Apr 2025 02:57:21 +0000 Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: 6gJkhYHINpYQXbKU7CI4jg8RGNKCMm7mnHs91w6rVVw=) 2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: QPqR58JeNFPJi8H+5XnKJrf+9hDaJRDjHQAg1P1N4n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Validity Not Before: Apr 11 02:57:21 2025 GMT Not After : Apr 18 02:57:21 2025 GMT Subject: CN=67f88512-3407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:84:f0:76:aa:35:1f:9a:19:00:a3:45:00: 91:80:70:73:e9:3f:a6:b8:19:78:a2:9c:ab:f1:77: 47:61:21:81:08:2e:66:45:f7:33:f7:cc:50:5b:f2: fe:d8:d1:2d:6c:3c:09:a4:a4:23:80:39:5f:3c:5a: 48:7b:25:d4:b7:f4:24:1e:4d:a1:9f:a3:63:5f:3f: ed:2b:9f:6e:00:7a:67:5c:92:86:f0:80:8a:a0:0a: 40:90:e4:e5:d7:f8:49:d3:99:14:50:c2:0d:d3:51: ba:b4:80:ae:57:54:93:ba:a4:cb:2b:34:6a:a2:2c: b9:6b:3f:20:86:96:83:b7:7f:0c:13:70:ec:75:d4: a4:32:11:4f:0c:36:4a:21:ea:1a:a3:66:f4:32:6c: de:3e:d8:0d:21:a7:97:4e:c2:76:66:07:4c:96:5e: 79:1c:d2:35:39:94:60:21:e1:93:ec:e1:d9:6f:8e: 43:3a:da:4a:6d:3e:0d:95:b7:5c:cf:72:33:bc:2d: 5c:83:5a:ff:1e:a9:35:5e:c9:4b:62:f3:dc:32:4b: 19:8c:ac:58:f0:88:f5:e8:74:a1:50:43:a6:e1:04: b3:57:aa:0b:51:2f:c3:5a:1e:43:27:d0:8d:ec:8f: e8:17:d6:c9:29:29:fc:26:3d:c5:f9:34:3e:dc:03: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E9:50:64:A8:28:0C:BC:31:63:F5:D1:67:F2:52:45:D2:E8:94:1E X509v3 Authority Key Identifier: keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ff:ac:c3:b4:25:bf:68:57:5e:50:c5:f6:11:26:59:cd:5d: 49:c1:ec:11:23:32:af:a5:4e:53:ae:22:b3:81:db:4a:d5:bb: d5:e6:b3:ef:69:9a:1e:1e:08:8a:71:ce:6e:8c:8e:c9:5e:5b: f3:35:7a:4e:78:61:ea:db:42:7e:f8:eb:b0:b7:dc:00:73:1c: df:8a:bf:b6:12:cb:b5:76:ce:6a:0a:9f:9d:74:7c:a4:ab:b9: 78:e1:39:f3:35:ec:1e:7c:b3:1f:61:a3:71:f7:ff:dc:5c:33: 06:d5:fa:60:cb:c3:82:f1:69:92:5d:b4:cc:47:4b:c6:51:95: 0e:94:a7:10:2b:5b:fc:3f:7c:17:b7:cc:bd:17:ae:5e:5c:15: 71:0b:5e:c3:9e:bb:0f:54:9f:6a:4d:38:38:b7:7f:e2:34:31: f7:59:da:2d:bc:77:d0:58:86:49:aa:49:ca:fd:bd:86:cf:76: 6c:11:c3:0b:92:39:c6:e5:3a:e6:fb:29:ea:2c:87:43:88:fc: 9d:f6:4d:90:53:6e:d1:d9:4a:ba:d3:b5:6b:26:16:dd:4e:04: 98:38:5f:d2:5e:62:ed:98:cc:4f:03:e2:0f:ac:22:dc:47:d5: 74:ba:0c:34:6e:3d:74:15:03:32:62:92:db:85:c9:db:17:c2: d7:e8:63:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0 ODRCRUVFNzEwHhcNMjUwNDExMDI1NzIxWhcNMjUwNDE4MDI1NzIxWjAYMRYwFAYD VQQDEw02N2Y4ODUxMi0zNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiCE8HaqNR+aGQCjRQCRgHBz6T+muBl4opyr8XdHYSGBCC5mRfcz98xQW/L+ 2NEtbDwJpKQjgDlfPFpIeyXUt/QkHk2hn6NjXz/tK59uAHpnXJKG8ICKoApAkOTl 1/hJ05kUUMIN01G6tICuV1STuqTLKzRqoiy5az8ghpaDt38ME3DsddSkMhFPDDZK Ieoao2b0MmzePtgNIaeXTsJ2ZgdMll55HNI1OZRgIeGT7OHZb45DOtpKbT4Nlbdc z3IzvC1cg1r/Hqk1XslLYvPcMksZjKxY8Ij16HShUEOm4QSzV6oLUS/DWh5DJ9CN 7I/oF9bJKSn8Jj3F+TQ+3AMOxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjpUGSo KAy8MWP10WfyUkXS6JQeMB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03 bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU eG1heXYya1ZQeUJJUy03bkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq/6zDtCW/aFdeUMX2ESZZzV1JwewRIzKvpU5TriKzgdtK1bvV5rPv aZoeHgiKcc5ujI7JXlvzNXpOeGHq20J++Ouwt9wAcxzfir+2Esu1ds5qCp+ddHyk q7l44TnzNewefLMfYaNx9//cXDMG1fpgy8OC8WmSXbTMR0vGUZUOlKcQK1v8P3wX t8y9F65eXBVxC17DnrsPVJ9qTTg4t3/iNDH3WdotvHfQWIZJqknK/b2Gz3ZsEcML kjnG5Trm+ynqLIdDiPyd9k2QU27R2Uq607VrJhbdTgSYOF/SXmLtmMxPA+IPrCLc R9V0ugw0bj10FQMyYpLbhcnbF8LX6GMK -----END CERTIFICATE-----Generated at Sat Apr 12 18:51:56 2025 by rpki-client