$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: 6H/zQUfR6XCn9Ren1YhTKfVHk35N6GhYFVthV/Gzo9M= Subject key identifier: 1F:24:36:E1:A5:62:DC:66:2C:7B:28:84:B6:65:E9:1D:E9:E0:1C:E8 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A09 Signing time: Fri 18 Apr 2025 16:29:13 +0000 Manifest this update: Fri 18 Apr 2025 16:29:12 +0000 Manifest next update: Fri 25 Apr 2025 16:29:12 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: KqueuIKbuvTqKTX3QqAYZ6uswlHBXeGDAHHeX4hfr5Y=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: nliRTAkVAtJ8FfxKEHQS9HqVovT0tZ32fPM48Sk/l8k=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: EijUWJlocJ1+GHXxh5XIDZa+yD2/CG2e199ekLmtdEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 16:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6693 (0x1a25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Apr 18 16:29:12 2025 GMT Not After : Apr 25 16:29:12 2025 GMT Subject: CN=68027dd8-2d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:52:77:b0:a9:4b:c7:0e:fc:39:47:71:1c:bd: 77:79:39:c5:57:ad:3f:25:c7:1e:4b:f0:d4:c7:2b: 1e:4b:bc:42:80:a6:29:41:44:86:f1:88:40:0c:f0: af:37:21:fa:f3:d1:e7:76:23:05:4c:e6:bf:f0:7d: 33:0c:7f:43:eb:3f:0f:ba:3d:2e:30:50:89:e6:9b: aa:1c:62:10:16:24:cc:d0:e6:7d:3f:85:40:48:a6: 14:59:a8:41:e7:f4:94:d4:a6:3a:64:a3:70:73:3b: bc:f0:75:a4:c7:6a:67:e9:9c:2b:fe:33:20:88:03: b6:a0:3d:44:58:76:c9:e7:05:5a:29:72:e9:6b:6c: 49:42:ec:a3:6c:05:e8:ea:76:fa:48:f7:4e:58:c5: f3:01:5c:fa:62:40:06:16:cf:e1:05:74:34:9d:25: 5f:b8:fc:a0:81:2c:c3:74:0d:e8:04:24:99:4c:2c: 4b:23:1b:fb:62:91:2c:54:5d:c5:30:a3:6e:15:69: 9b:07:b3:e2:d2:6a:24:e4:c3:be:bd:0a:e8:0c:5a: 8a:4f:33:60:21:5b:2d:d6:c8:bc:ca:59:58:3c:2b: 4b:21:e6:2e:dc:05:c7:d0:ff:c0:ce:45:e9:ee:09: 4f:65:30:7a:5d:75:c5:02:3a:66:9c:6b:33:ed:f7: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:24:36:E1:A5:62:DC:66:2C:7B:28:84:B6:65:E9:1D:E9:E0:1C:E8 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2f:e5:97:94:0f:59:3e:50:ff:f8:41:7a:14:b8:8f:0a:82: e2:83:22:e9:c3:e0:09:7d:b8:c3:cb:3f:67:c9:89:ce:b8:56: 19:ad:3b:c2:ad:b5:33:60:1e:35:32:0e:61:44:81:65:e5:a4: eb:f8:41:88:f7:cd:8f:16:1c:23:82:79:47:99:04:0a:41:b9: ce:f4:57:3d:90:2d:a5:db:f3:e0:ba:6a:37:95:2d:60:00:a9: 1e:b4:5f:b5:15:59:32:86:3f:bc:84:a1:34:42:66:58:36:91: 2a:a8:84:38:08:84:0d:99:93:13:2d:79:40:36:da:f7:87:73: 54:bf:cb:84:28:0d:6b:42:64:b3:52:71:c7:e4:e7:99:77:b3: f9:40:d7:52:f4:a9:ae:bc:33:46:85:77:2d:b1:a1:f4:b5:44: f9:39:69:8c:73:db:25:d2:ac:17:07:e6:de:6b:a5:d6:78:74: a0:76:62:74:39:bd:39:a6:0e:52:d0:bc:b5:32:be:13:6d:3c: 57:c6:77:20:50:61:b4:fb:c7:46:93:1a:93:f5:5e:6c:31:ce: e2:dd:5b:68:24:31:8c:39:ca:10:3e:92:33:38:d2:b6:f1:c3: 93:c4:44:c3:cd:df:d9:1a:f1:bc:da:b2:40:03:e1:8c:e0:59: f7:13:96:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUwNDE4MTYyOTEyWhcNMjUwNDI1MTYyOTEyWjAYMRYwFAYD VQQDEw02ODAyN2RkOC0yZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71J3sKlLxw78OUdxHL13eTnFV60/JcceS/DUxyseS7xCgKYpQUSG8YhADPCv NyH689HndiMFTOa/8H0zDH9D6z8Puj0uMFCJ5puqHGIQFiTM0OZ9P4VASKYUWahB 5/SU1KY6ZKNwczu88HWkx2pn6Zwr/jMgiAO2oD1EWHbJ5wVaKXLpa2xJQuyjbAXo 6nb6SPdOWMXzAVz6YkAGFs/hBXQ0nSVfuPyggSzDdA3oBCSZTCxLIxv7YpEsVF3F MKNuFWmbB7Pi0mok5MO+vQroDFqKTzNgIVst1si8yllYPCtLIeYu3AXH0P/AzkXp 7glPZTB6XXXFAjpmnGsz7fcEaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8kNuGl YtxmLHsohLZl6R3p4BzoMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1L+WXlA9ZPlD/+EF6FLiPCoLigyLpw+AJfbjDyz9nyYnOuFYZrTvC rbUzYB41Mg5hRIFl5aTr+EGI982PFhwjgnlHmQQKQbnO9Fc9kC2l2/Pgumo3lS1g AKketF+1FVkyhj+8hKE0QmZYNpEqqIQ4CIQNmZMTLXlANtr3h3NUv8uEKA1rQmSz UnHH5OeZd7P5QNdS9KmuvDNGhXctsaH0tUT5OWmMc9sl0qwXB+bea6XWeHSgdmJ0 Ob05pg5S0Ly1Mr4TbTxXxncgUGG0+8dGkxqT9V5sMc7i3VtoJDGMOcoQPpIzONK2 8cOTxETDzd/ZGvG82rJAA+GM4Fn3E5Zl -----END CERTIFICATE-----Generated at Sat Apr 19 06:00:56 2025 by rpki-client