$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json) Hash identifier: slPy6mBLyBTMQfmDibuq5u0AVFErnrCPtRhF1nP54N4= Subject key identifier: 72:16:29:5C:68:22:71:71:28:E6:D3:7E:55:85:11:4E:65:A1:1C:72 Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft Manifest number: 053A Signing time: Wed 02 Apr 2025 23:30:37 +0000 Manifest this update: Wed 02 Apr 2025 23:30:36 +0000 Manifest next update: Wed 09 Apr 2025 23:30:36 +0000 Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: M+aGZFNmYUZKLHScWQCycFh1X9iD/sqdBLhCUbOuT/U=) 2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: 0uI77WnMvgx38BJ7x5ctqph2jfLMtLeb4wieKz5xnjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6194 Validity Not Before: Apr 2 23:30:36 2025 GMT Not After : Apr 9 23:30:36 2025 GMT Subject: CN=67edc89c-1871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:af:68:10:ef:bc:62:82:3b:14:5c:4d:47: a4:0d:cb:33:a0:f6:df:e8:56:d5:84:ba:13:35:fc: 9b:bb:8e:b7:a7:80:01:0d:a9:34:95:64:df:34:da: 25:72:b6:42:fb:b4:6c:5b:c9:79:96:7f:b8:d7:be: 20:64:b1:6f:65:29:93:af:20:9a:58:00:a9:3f:d3: b9:89:f3:51:33:ba:aa:44:f0:00:fb:43:7a:89:91: e8:08:8b:ff:17:0a:bc:ed:8a:3c:5a:15:b5:9d:94: b6:2a:a1:49:ab:50:71:91:b8:0b:25:dd:b4:ea:d3: ad:5b:11:33:5e:65:3b:17:6f:c7:0e:c8:05:3f:02: f7:9a:83:b1:29:25:22:fd:b2:92:0d:36:22:fd:c4: d0:81:c5:f0:19:b8:db:a1:f2:a6:08:6a:65:53:fc: 1d:5b:0a:30:94:c9:92:ca:21:17:49:ee:d9:7a:5f: 0d:2e:e4:66:46:4d:64:42:b4:ea:c5:50:6c:ed:03: 30:f1:cf:60:7f:fc:70:5c:cd:69:f9:5b:02:80:dd: e9:d4:66:50:97:50:b7:2d:f7:ba:29:e2:45:4c:12: 29:8c:fa:9b:9c:4d:4e:ba:86:0c:98:84:68:3c:1c: 28:49:c5:da:00:aa:ca:21:bc:be:5e:b2:4e:7d:41: c0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:16:29:5C:68:22:71:71:28:E6:D3:7E:55:85:11:4E:65:A1:1C:72 X509v3 Authority Key Identifier: keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:4b:9f:b4:1a:c0:50:ba:2b:0c:31:f6:2f:7a:18:ad:b5:ee: 65:7f:94:17:02:c9:a5:14:cf:7b:b8:ae:e0:0d:f8:c4:23:9e: 87:f6:b1:65:f5:0a:ba:01:f9:a1:e4:d1:02:e2:ad:dd:b1:b6: ba:08:91:a4:31:a7:46:19:26:f4:73:ed:eb:41:d8:65:bf:d1: 9b:e2:9b:df:4f:92:32:1e:8a:a6:e0:4f:a5:fa:20:d6:7b:24: 24:3b:ce:67:95:3c:45:84:a0:0c:62:e4:7f:ff:09:42:43:d0: 91:16:8b:ec:c2:cd:b7:75:75:0f:96:d9:12:f5:61:f2:5e:5e: 0f:53:2b:d0:ff:a2:7e:1e:a2:56:be:18:7e:53:c7:5d:10:95: 91:b3:79:64:81:28:ec:03:37:39:de:d7:8a:10:dc:c6:47:07: 52:2d:97:27:f8:66:3f:84:25:86:df:2c:fa:b8:e8:6a:4c:d2: e5:82:2d:13:fe:1d:16:c8:db:40:34:91:19:71:90:7d:75:68: 13:4a:f7:88:2f:e2:26:4e:ea:44:63:b2:fd:58:f7:20:08:e6: f0:dd:d2:e0:91:06:af:a8:f4:d3:0b:e4:72:14:84:60:4c:b1: 01:43:6b:8f:82:f4:15:fe:60:19:96:41:6f:a8:2c:85:51:c8: 92:14:20:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxOTQxMTAvBgNVBAUTKDY3REQ3NzQ3QTlEQjhCMDFBNUU3Q0NBMTQ2QzQ4OTY1 QTIzMDgwOTEwHhcNMjUwNDAyMjMzMDM2WhcNMjUwNDA5MjMzMDM2WjAYMRYwFAYD VQQDEw02N2VkYzg5Yy0xODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z+vaBDvvGKCOxRcTUekDcszoPbf6FbVhLoTNfybu463p4ABDak0lWTfNNol crZC+7RsW8l5ln+4174gZLFvZSmTryCaWACpP9O5ifNRM7qqRPAA+0N6iZHoCIv/ Fwq87Yo8WhW1nZS2KqFJq1BxkbgLJd206tOtWxEzXmU7F2/HDsgFPwL3moOxKSUi /bKSDTYi/cTQgcXwGbjbofKmCGplU/wdWwowlMmSyiEXSe7Zel8NLuRmRk1kQrTq xVBs7QMw8c9gf/xwXM1p+VsCgN3p1GZQl1C3Lfe6KeJFTBIpjPqbnE1OuoYMmIRo PBwoScXaAKrKIby+XrJOfUHApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIWKVxo InFxKObTflWFEU5loRxyMB8GA1UdIwQYMBaAFGfdd0ep24sBpefMoUbEiWWiMICR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjE5NC81RjM3QjlFRUVG NkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3R2w1OHloUnNTSlphSXdn SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5MTNSNm5iaXdHbDU4eWhSc1NKWmFJd2dKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjE5NC81RjM3QjlFRUVGNkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3 R2w1OHloUnNTSlphSXdnSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyS5+0GsBQuisMMfYvehitte5lf5QXAsmlFM97uK7gDfjEI56H9rFl 9Qq6Afmh5NEC4q3dsba6CJGkMadGGSb0c+3rQdhlv9Gb4pvfT5IyHoqm4E+l+iDW eyQkO85nlTxFhKAMYuR//wlCQ9CRFovsws23dXUPltkS9WHyXl4PUyvQ/6J+HqJW vhh+U8ddEJWRs3lkgSjsAzc53teKENzGRwdSLZcn+GY/hCWG3yz6uOhqTNLlgi0T /h0WyNtANJEZcZB9dWgTSveIL+ImTupEY7L9WPcgCObw3dLgkQavqPTTC+RyFIRg TLEBQ2uPgvQV/mAZlkFvqCyFUciSFCBI -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:14 2025 by rpki-client