$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft File: zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json) Hash identifier: Rte//8DG3/ZIbsYk9511dRzhgkItFzHkkxwi4ETZFdM= Subject key identifier: E1:28:43:98:87:C5:C9:53:87:6E:B6:6B:D3:DE:91:7B:80:6E:97:C0 Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Certificate serial: 0E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft Manifest number: 0E2B Signing time: Fri 18 Apr 2025 17:53:40 +0000 Manifest this update: Fri 18 Apr 2025 17:53:39 +0000 Manifest next update: Fri 25 Apr 2025 17:53:39 +0000 Files and hashes: 1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: ZC17P1N5L//fe5JOiZpVnC/yR5VyUY/GVje5+FwTjt8=) 2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: am9c/5/9WUqfqDVJJkqHl1fMAMJ9WE34zLQ5kEncnkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 17:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3643 (0xe3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Validity Not Before: Apr 18 17:53:39 2025 GMT Not After : Apr 25 17:53:39 2025 GMT Subject: CN=680291a3-82d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:4a:38:80:6d:d5:31:98:e5:25:56:d7:44: d7:80:95:94:e1:fb:ec:7e:45:61:03:78:45:9c:f7: 30:f7:c1:12:5f:8c:37:3b:c1:1d:22:00:ab:92:40: ba:e5:b3:c7:44:9c:4e:de:14:44:62:80:aa:eb:28: b6:4c:ec:ff:7a:84:e9:63:9d:d5:88:7f:66:77:c6: f9:e6:69:a3:ec:48:d9:86:4f:89:3e:b8:6d:e1:5a: 8f:d9:cd:2b:a7:3d:ce:65:49:db:09:52:4b:eb:98: 4d:71:84:27:70:4a:fd:a2:59:d9:e4:0b:19:65:f6: b0:e5:ea:47:74:56:40:30:e0:7d:b0:d5:0e:df:29: 47:30:4a:26:94:64:94:34:c6:f7:61:23:cc:44:17: 5e:55:90:3a:1b:b1:35:2a:c7:03:23:a6:f3:c0:ee: 0b:9c:f1:ac:63:98:16:14:79:4f:ad:84:7f:50:f1: 4a:ed:91:a5:81:44:08:b6:fb:21:68:84:d7:8b:45: b7:66:de:87:8a:b5:83:18:f8:86:11:c5:17:a8:ac: 15:27:f7:8f:5b:c9:71:5e:7c:ca:ba:e2:1a:5c:b3: c2:2d:f2:cc:32:15:5d:51:cf:bb:ed:1b:c2:92:19: 43:e2:e0:66:68:39:89:c6:f3:4a:55:07:28:43:43: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:28:43:98:87:C5:C9:53:87:6E:B6:6B:D3:DE:91:7B:80:6E:97:C0 X509v3 Authority Key Identifier: keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:75:f8:67:61:4a:a8:b3:f7:91:0c:0e:b7:37:ec:c8:50:cb: fc:32:1f:6a:ce:15:ff:35:5e:fa:90:31:95:3a:16:e4:c6:cd: 75:15:d2:ca:56:cd:6e:2c:8d:19:be:8e:e7:3c:8f:0d:ca:d6: f6:d4:10:00:4b:cf:b5:37:0b:e5:b6:20:33:52:e0:01:e1:50: af:ef:d2:a7:84:56:72:42:bf:c3:8a:36:79:4e:a4:56:8e:0e: 3f:18:40:39:4c:d0:49:98:9e:61:16:33:18:69:c4:cc:24:e7: 56:c5:eb:04:5a:6d:21:50:16:ec:ec:ca:b6:53:f3:70:72:d6: f4:cb:72:d0:03:6d:80:9d:02:7e:66:a8:37:e7:76:39:14:41: 81:a3:ad:ed:d7:50:f7:ee:93:dd:6e:e2:fc:b2:18:c0:c8:c7: b2:fb:bd:23:d8:7b:03:cb:b4:50:cc:f7:b3:3c:b8:b8:52:e0: ed:31:bf:fb:19:1e:36:2c:2b:e1:e7:0e:0a:68:cb:91:f7:0d: 68:e5:51:5d:b9:d6:6e:a7:8d:b1:1c:cb:7e:4a:a5:86:95:2e: 9a:72:f2:80:87:80:e8:40:78:8e:30:b8:0a:57:50:fa:44:e4: 69:da:c7:f7:92:10:6a:19:f1:bc:6e:de:89:3a:21:7d:4e:71: 9b:0b:51:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlGMDgxMTAvBgNVBAUTKENFOENBRDM1NjIxQTkwMTJDNDBCMzYzNzUzN0NBNDBF M0QwN0U4Q0YwHhcNMjUwNDE4MTc1MzM5WhcNMjUwNDI1MTc1MzM5WjAYMRYwFAYD VQQDEw02ODAyOTFhMy04MmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKtKOIBt1TGY5SVW10TXgJWU4fvsfkVhA3hFnPcw98ESX4w3O8EdIgCrkkC6 5bPHRJxO3hREYoCq6yi2TOz/eoTpY53ViH9md8b55mmj7EjZhk+JPrht4VqP2c0r pz3OZUnbCVJL65hNcYQncEr9olnZ5AsZZfaw5epHdFZAMOB9sNUO3ylHMEomlGSU NMb3YSPMRBdeVZA6G7E1KscDI6bzwO4LnPGsY5gWFHlPrYR/UPFK7ZGlgUQItvsh aITXi0W3Zt6HirWDGPiGEcUXqKwVJ/ePW8lxXnzKuuIaXLPCLfLMMhVdUc+77RvC khlD4uBmaDmJxvNKVQcoQ0PnkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEoQ5iH xclTh262a9PekXuAbpfAMB8GA1UdIwQYMBaAFM6MrTViGpASxAs2N1N8pA49B+jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUYwOC8zMDkwRDkxNEEx NEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtCTEVDelkzVTN5a0RqMEg2 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pveXROV0lha0JMRUN6WTNVM3lrRGowSDZNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUYwOC8zMDkwRDkxNEExNEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtC TEVDelkzVTN5a0RqMEg2TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLdfhnYUqos/eRDA63N+zIUMv8Mh9qzhX/NV76kDGVOhbkxs11FdLK Vs1uLI0Zvo7nPI8Nytb21BAAS8+1NwvltiAzUuAB4VCv79KnhFZyQr/DijZ5TqRW jg4/GEA5TNBJmJ5hFjMYacTMJOdWxesEWm0hUBbs7Mq2U/Nwctb0y3LQA22AnQJ+ Zqg353Y5FEGBo63t11D37pPdbuL8shjAyMey+70j2HsDy7RQzPezPLi4UuDtMb/7 GR42LCvh5w4KaMuR9w1o5VFdudZup42xHMt+SqWGlS6acvKAh4DoQHiOMLgKV1D6 RORp2sf3khBqGfG8bt6JOiF9TnGbC1HN -----END CERTIFICATE-----Generated at Sat Apr 19 11:14:48 2025 by rpki-client