$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: 0Dw3y7jdfue5B6YPgUo1GokjjXJTxByXjVL2Geia+Nc= Subject key identifier: 96:88:B9:B1:34:5E:DC:DF:73:A1:03:B6:AA:52:4A:06:97:BD:96:D8 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 083E Signing time: Wed 16 Apr 2025 20:33:38 +0000 Manifest this update: Wed 16 Apr 2025 20:33:38 +0000 Manifest next update: Wed 23 Apr 2025 20:33:38 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: vZTn+X9sCM1eUzvXr/Fjlc2ChtF32mPmLn9ugIwY9zc=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: f9tQPToB76p1pPXGROGF6QphrQQvfLBw4Gw3PGjwt1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Apr 16 20:33:38 2025 GMT Not After : Apr 23 20:33:38 2025 GMT Subject: CN=68001422-2694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:9b:71:73:58:1f:6f:54:3f:69:ce:c8:c7: 61:6c:5b:e0:4b:66:df:9d:31:34:02:20:d9:c2:a6: d3:ef:fd:f9:4d:e4:82:df:4e:75:f1:ef:42:51:a4: 5d:0f:27:c5:f0:bd:9f:38:cc:98:5e:4f:7a:c6:66: 38:4a:93:48:df:8f:bc:96:ed:9d:20:5b:ef:07:e1: a3:03:0e:91:c7:a0:00:68:f3:40:6e:eb:46:cf:5f: b4:5a:b1:66:69:a9:28:f5:39:3a:55:27:f8:6b:4c: b7:dc:55:24:0a:84:ae:30:6c:fc:42:01:55:70:23: 4d:17:db:79:c4:2f:0e:a5:57:08:d3:29:55:cd:1d: 85:5a:73:20:68:0a:fb:b0:23:38:02:ed:9d:b0:60: b1:60:20:70:e3:fc:dc:a5:e6:63:7d:f7:97:69:e5: 0a:11:6e:90:d2:68:26:2b:67:69:37:62:e5:1a:8d: 48:44:92:66:e0:61:08:0d:c0:3e:0e:e7:1a:2d:d3: e3:99:a0:f4:df:7c:af:27:de:41:07:fc:5f:7d:4a: a0:c6:33:f4:91:4e:10:71:1b:b2:78:bf:2d:5e:6a: 43:c1:cd:bb:d5:40:89:3c:f7:66:68:77:b8:57:40: 3f:b6:c3:6b:58:71:9d:e6:45:17:4b:56:39:3e:5b: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:88:B9:B1:34:5E:DC:DF:73:A1:03:B6:AA:52:4A:06:97:BD:96:D8 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:69:d4:3a:eb:f1:f0:94:1d:43:11:54:d1:98:6a:74:36:3f: ae:b1:76:5c:0f:fe:fd:4c:08:68:12:96:30:df:4f:88:36:74: d5:6c:cb:5f:6f:c1:c0:42:16:78:e0:c6:f4:97:1b:55:3b:b1: 37:5e:4c:ba:eb:6e:f2:89:22:c7:e0:b0:e1:08:e9:62:74:ff: 56:fd:da:4e:2a:ff:da:b8:47:78:a9:f5:93:8d:fc:00:b9:8a: 6b:cb:27:bd:75:40:9b:74:ea:ad:19:80:17:65:eb:88:17:03: f1:36:c9:4b:5c:b8:36:ae:04:19:33:9f:49:27:74:79:13:74: a9:8f:ec:30:12:8d:fc:71:20:60:1c:25:92:9d:df:b9:1c:83: 38:69:85:3d:81:34:fe:0c:63:ea:a1:14:11:13:c4:c9:52:dd: 95:67:55:e9:32:b8:e0:37:bf:91:d0:4e:27:fb:65:3b:24:37: 9c:9d:d2:f8:f6:71:8c:b8:0e:52:fb:5d:37:b0:89:a5:f6:3e: 29:e5:d8:21:c8:ca:ef:34:78:ff:40:81:f1:b6:1a:d0:22:f1: 24:3a:46:c0:ec:34:73:d3:72:d9:f5:32:ef:ac:94:a7:23:68: db:46:ec:9b:65:8a:ec:28:0a:a1:63:7b:2d:96:cb:ac:5b:66: 82:55:c4:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUwNDE2MjAzMzM4WhcNMjUwNDIzMjAzMzM4WjAYMRYwFAYD VQQDEw02ODAwMTQyMi0yNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdGbcXNYH29UP2nOyMdhbFvgS2bfnTE0AiDZwqbT7/35TeSC30518e9CUaRd DyfF8L2fOMyYXk96xmY4SpNI34+8lu2dIFvvB+GjAw6Rx6AAaPNAbutGz1+0WrFm aako9Tk6VSf4a0y33FUkCoSuMGz8QgFVcCNNF9t5xC8OpVcI0ylVzR2FWnMgaAr7 sCM4Au2dsGCxYCBw4/zcpeZjffeXaeUKEW6Q0mgmK2dpN2LlGo1IRJJm4GEIDcA+ DucaLdPjmaD033yvJ95BB/xffUqgxjP0kU4QcRuyeL8tXmpDwc271UCJPPdmaHe4 V0A/tsNrWHGd5kUXS1Y5PlvWNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaIubE0 Xtzfc6EDtqpSSgaXvZbYMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+adQ66/HwlB1DEVTRmGp0Nj+usXZcD/79TAhoEpYw30+INnTVbMtf b8HAQhZ44Mb0lxtVO7E3Xky6627yiSLH4LDhCOlidP9W/dpOKv/auEd4qfWTjfwA uYpryye9dUCbdOqtGYAXZeuIFwPxNslLXLg2rgQZM59JJ3R5E3Spj+wwEo38cSBg HCWSnd+5HIM4aYU9gTT+DGPqoRQRE8TJUt2VZ1XpMrjgN7+R0E4n+2U7JDecndL4 9nGMuA5S+103sIml9j4p5dghyMrvNHj/QIHxthrQIvEkOkbA7DRz03LZ9TLvrJSn I2jbRuybZYrsKAqhY3stlsusW2aCVcTE -----END CERTIFICATE-----Generated at Fri Apr 18 10:58:20 2025 by rpki-client