$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: rmfUOnEwl34fMISiAIIQbjET5CaBFrxw3OPEsS2zJNo= Subject key identifier: 57:7D:41:65:0E:AA:81:52:45:71:DA:B1:83:E7:D0:65:1E:87:F6:7E Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 044E Signing time: Sat 29 Mar 2025 00:28:45 +0000 Manifest this update: Sat 29 Mar 2025 00:28:44 +0000 Manifest next update: Sat 05 Apr 2025 00:28:44 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: UBXT6lDnOQCRI9Agi9rqOFZc+B41M1HuqYzx1LDJdMQ=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37 Validity Not Before: Mar 29 00:28:44 2025 GMT Not After : Apr 5 00:28:44 2025 GMT Subject: CN=67e73ebc-b717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:8b:e3:9b:ab:96:b8:5a:5f:01:2a:13:90: 74:4b:9e:f6:5c:c2:3c:c5:3f:89:89:5a:7e:8d:83: 22:1a:25:5c:bc:09:3b:6b:64:0d:5c:1c:64:9d:72: d8:39:77:f2:4c:98:c9:b7:a6:c1:e9:37:75:2d:a3: ff:fd:ad:d9:de:23:38:4a:a2:6b:a8:5d:3b:59:fa: f8:97:8e:c8:32:f4:61:16:df:f0:55:23:2b:13:86: 49:1b:49:2a:2f:a0:09:6f:88:38:7e:61:d9:11:9e: 6d:4d:53:1a:59:ef:64:2f:b5:ff:0e:d7:4d:d9:fa: 13:a7:02:60:71:ae:22:d3:31:c4:9e:1e:9f:4e:ac: d7:c5:83:ea:a3:37:d4:02:93:fb:25:d9:14:30:9e: e1:c2:3b:73:b8:4f:7b:90:73:3c:62:87:0d:1c:9c: 50:8f:22:ad:a0:d2:c5:4d:8e:26:47:86:a9:10:61: 9d:7b:84:c1:49:c9:f6:20:c2:ed:a4:07:f3:bf:1b: 75:1a:5f:dd:bf:d7:56:33:78:94:22:f6:b9:25:cd: c5:09:e2:87:39:29:f8:5b:23:97:d1:3e:10:66:3d: 50:ee:e5:0e:e9:1f:53:a4:74:6f:40:93:7a:58:85: ac:8c:8c:da:93:6d:34:84:81:06:a6:f7:07:96:04: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:41:65:0E:AA:81:52:45:71:DA:B1:83:E7:D0:65:1E:87:F6:7E X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:01:74:d2:71:9e:eb:80:42:29:59:92:2b:cc:39:69:dc:11: a5:39:de:b7:1a:38:43:a4:51:c2:0b:bb:2f:93:e4:85:8e:4a: 07:54:5a:7a:57:2f:f8:41:52:1e:e0:a8:69:fb:89:80:b7:f7: 8d:e8:be:14:fe:ac:36:9a:d2:68:45:6c:7c:33:25:96:13:08: f3:e9:24:db:5c:53:87:2e:a6:75:ec:8b:62:6c:a9:a7:e3:bc: 24:4a:ee:66:2a:14:88:9c:f6:89:1a:59:d6:44:0a:11:19:31: 55:81:0b:ba:3a:f8:12:40:be:3f:e3:4b:00:9f:d4:81:e1:79: 69:a1:0b:09:da:4e:ea:be:13:f4:f4:f5:a8:77:ee:86:71:3f: 76:43:bb:4a:2b:f1:34:dc:1d:d9:05:a4:a9:cc:0c:bd:da:37: b5:91:75:0f:92:c1:8b:b4:62:28:d0:7e:cd:fc:76:a2:3c:43: 1c:1e:7d:a2:84:d4:8c:98:20:16:89:fc:27:9f:36:b6:a4:50: bb:a3:da:b3:1c:67:cb:62:b9:68:ef:32:ed:cc:57:e8:b4:0f: dd:e4:8b:15:9b:ed:08:86:89:2d:c0:e7:aa:3b:e5:c8:ae:c2: c0:b0:4f:b8:e6:9f:b4:8c:8a:21:96:64:0e:d3:22:27:15:2a: 96:10:97:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwMzI5MDAyODQ0WhcNMjUwNDA1MDAyODQ0WjAYMRYwFAYD VQQDEw02N2U3M2ViYy1iNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy22L45urlrhaXwEqE5B0S572XMI8xT+JiVp+jYMiGiVcvAk7a2QNXBxknXLY OXfyTJjJt6bB6Td1LaP//a3Z3iM4SqJrqF07Wfr4l47IMvRhFt/wVSMrE4ZJG0kq L6AJb4g4fmHZEZ5tTVMaWe9kL7X/DtdN2foTpwJgca4i0zHEnh6fTqzXxYPqozfU ApP7JdkUMJ7hwjtzuE97kHM8YocNHJxQjyKtoNLFTY4mR4apEGGde4TBScn2IMLt pAfzvxt1Gl/dv9dWM3iUIva5Jc3FCeKHOSn4WyOX0T4QZj1Q7uUO6R9TpHRvQJN6 WIWsjIzak200hIEGpvcHlgT9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd9QWUO qoFSRXHasYPn0GUeh/Z+MB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvAXTScZ7rgEIpWZIrzDlp3BGlOd63GjhDpFHCC7svk+SFjkoHVFp6 Vy/4QVIe4Khp+4mAt/eN6L4U/qw2mtJoRWx8MyWWEwjz6STbXFOHLqZ17ItibKmn 47wkSu5mKhSInPaJGlnWRAoRGTFVgQu6OvgSQL4/40sAn9SB4XlpoQsJ2k7qvhP0 9PWod+6GcT92Q7tKK/E03B3ZBaSpzAy92je1kXUPksGLtGIo0H7N/HaiPEMcHn2i hNSMmCAWifwnnza2pFC7o9qzHGfLYrlo7zLtzFfotA/d5IsVm+0IhoktwOeqO+XI rsLAsE+45p+0jIohlmQO0yInFSqWEJcV -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:02 2025 by rpki-client