$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: XMkb8awWp6PuVqPyQ1PDFTAt9Ude8FO1zjLZwz0F49w= Subject key identifier: C0:A9:8A:34:32:DA:69:5C:2B:10:47:1A:B3:13:5B:A8:DF:21:5A:C9 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C1C Signing time: Fri 04 Apr 2025 18:40:41 +0000 Manifest this update: Fri 04 Apr 2025 18:40:41 +0000 Manifest next update: Fri 11 Apr 2025 18:40:41 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: qynVsuaGyByCT2ZLrYZOUtM4mHKhF5jdHy3Ce5vpwos=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: x9X6wGJ3mbVyR78mjvIljIMszM7hIhEyNVBMIZ+VGz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D Validity Not Before: Apr 4 18:40:41 2025 GMT Not After : Apr 11 18:40:41 2025 GMT Subject: CN=67f027a9-f4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:b5:f9:7d:5f:e5:d8:fe:60:c2:02:0a:8c: b2:dc:a3:a6:7d:00:1a:0a:25:ad:00:c3:a6:4f:61: 8c:21:81:a1:5d:19:6a:13:74:59:40:62:0e:b5:dc: 23:e3:e2:c3:3f:18:f4:9b:cd:14:da:c2:14:a8:81: 9d:19:e4:ff:96:cd:5c:de:2f:79:f7:48:7d:7b:ab: 5c:3b:2b:57:03:ed:8a:d5:34:1b:ba:72:62:a5:17: 68:a4:06:40:03:a5:de:ad:4a:f2:97:40:58:c6:6e: 94:88:61:61:d4:f5:78:9a:e8:dc:3f:51:37:87:9e: af:fa:d5:3d:98:6a:cf:58:9b:72:ce:9e:05:ab:08: b7:35:7e:b7:fa:f4:53:e5:a9:8f:36:1a:07:a8:58: 87:66:bc:9b:a7:5e:2a:e5:f5:dd:36:88:5e:20:60: 53:0c:cd:6e:6e:51:e5:6c:82:27:55:9e:03:84:31: 69:b0:00:4b:51:9a:1b:c0:f1:c4:d4:a8:03:cc:9f: ee:20:aa:5a:a4:fc:ea:5b:ff:1a:9e:60:14:0f:fc: ec:24:4d:97:41:29:0a:fd:cb:3c:df:5e:ef:b9:93: 95:54:21:95:a4:f9:17:d6:04:e8:b1:1a:38:f1:c1: 3d:30:e3:c2:f7:b9:d0:fe:28:8c:f2:e3:d5:27:fa: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:8A:34:32:DA:69:5C:2B:10:47:1A:B3:13:5B:A8:DF:21:5A:C9 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8f:78:45:9e:8d:b5:ee:50:bd:d2:55:76:fc:2b:f0:75:7d: 92:7e:82:31:5b:c6:bd:43:c3:de:7d:73:fc:08:d5:4f:5c:c6: 88:56:84:20:2b:79:ac:b4:0c:25:62:b1:0d:4b:66:90:76:f6: 42:8f:8e:8d:ee:b7:3d:09:93:c7:b1:ea:2e:1b:e0:92:90:4f: f7:cd:ca:73:4b:4a:3a:47:6b:81:be:32:9b:2d:ed:4b:d2:56: 4d:c1:94:19:a4:59:4e:16:6a:59:77:e3:3e:2b:e3:38:0a:f6: a2:c5:c4:db:5f:52:26:c1:68:5d:d1:c1:55:bc:35:b0:da:68: 1a:4a:79:a2:be:82:e7:fd:42:8c:d0:07:5a:f0:50:c1:9b:ff: 67:54:bd:ac:b1:78:3b:52:3a:10:bc:bd:62:ab:79:7f:9e:73: 93:51:c8:f2:d6:74:f5:ea:17:a5:53:a6:f4:fb:a5:a6:d0:25: 59:7b:31:ef:90:42:f3:db:61:18:66:a8:f6:32:a1:f0:70:a9: 21:91:e4:4e:59:9c:e7:e4:a7:ea:eb:55:d4:9e:aa:cf:cf:63: cb:f1:19:44:18:84:25:b7:e1:46:9b:4c:73:66:7e:eb:64:c8: ce:27:41:25:fb:63:59:90:96:63:49:d9:aa:e3:ad:95:aa:01: 28:a7:76:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUwNDA0MTg0MDQxWhcNMjUwNDExMTg0MDQxWjAYMRYwFAYD VQQDEw02N2YwMjdhOS1mNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvu1+X1f5dj+YMICCoyy3KOmfQAaCiWtAMOmT2GMIYGhXRlqE3RZQGIOtdwj 4+LDPxj0m80U2sIUqIGdGeT/ls1c3i9590h9e6tcOytXA+2K1TQbunJipRdopAZA A6XerUryl0BYxm6UiGFh1PV4mujcP1E3h56v+tU9mGrPWJtyzp4Fqwi3NX63+vRT 5amPNhoHqFiHZrybp14q5fXdNoheIGBTDM1ublHlbIInVZ4DhDFpsABLUZobwPHE 1KgDzJ/uIKpapPzqW/8anmAUD/zsJE2XQSkK/cs8317vuZOVVCGVpPkX1gTosRo4 8cE9MOPC97nQ/iiM8uPVJ/qO0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCpijQy 2mlcKxBHGrMTW6jfIVrJMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApj3hFno217lC90lV2/CvwdX2SfoIxW8a9Q8PefXP8CNVPXMaIVoQg K3mstAwlYrENS2aQdvZCj46N7rc9CZPHseouG+CSkE/3zcpzS0o6R2uBvjKbLe1L 0lZNwZQZpFlOFmpZd+M+K+M4CvaixcTbX1ImwWhd0cFVvDWw2mgaSnmivoLn/UKM 0Ada8FDBm/9nVL2ssXg7UjoQvL1iq3l/nnOTUcjy1nT16helU6b0+6Wm0CVZezHv kELz22EYZqj2MqHwcKkhkeROWZzn5Kfq61XUnqrPz2PL8RlEGIQlt+FGm0xzZn7r ZMjOJ0El+2NZkJZjSdmq462VqgEop3YU -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:32 2025 by rpki-client