$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: L3iEH9DoLgrIMiWuhQ+oD9OkZeWBolH39fCrlhYD9Rw= Subject key identifier: 07:B5:6B:BF:9B:69:B8:8C:F4:2B:AF:F1:57:A6:EA:97:AB:AD:A7:CC Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 112E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 110F Signing time: Fri 04 Apr 2025 17:22:11 +0000 Manifest this update: Fri 04 Apr 2025 17:22:10 +0000 Manifest next update: Fri 11 Apr 2025 17:22:10 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: 24IFI3rmuZ7i42J6fyxiJUyDd+pNeVBdAMGAsQYpPwg=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: LI5814/1mo8RhGHDIyDmTnyAaT8jPK8eiZW8nnVoECM=) 3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: KE984DbFRTO0XDJnJvkUh9nTQI9OdADddfHh/b8sXns=) 4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: tG0xAoHX5Jrg4VXIV0PMgN27hGtGNiwPzNpPEMcc5ZU=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: NlRxG3SgenSihBb1Uz1mdp6In7PIY3SWzoat7OXr7O8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4398 (0x112e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB Validity Not Before: Apr 4 17:22:10 2025 GMT Not After : Apr 11 17:22:10 2025 GMT Subject: CN=67f01543-8cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:ab:40:e0:aa:a3:38:44:27:1f:64:a2:e1: 4b:76:b3:d2:1c:83:84:61:73:cc:bf:82:70:04:11: 14:b3:31:d1:35:93:f7:1a:1a:33:8c:f4:32:51:1b: 68:3c:36:d1:52:38:77:99:d1:0f:73:f5:5f:3f:ef: ce:95:60:35:f1:b1:b7:fc:13:e7:ec:fd:12:b1:78: 33:14:db:87:92:77:7b:ed:78:87:74:0d:77:33:65: f2:a5:95:c4:0d:68:bc:29:59:ab:49:7c:a3:6e:8c: 02:f9:22:06:7c:81:9e:65:24:3f:23:66:67:a4:b7: 28:47:a3:3d:cd:37:92:9a:50:ef:41:d6:10:24:4f: 02:eb:ed:76:68:3a:51:57:f7:49:d5:ab:62:84:f3: a4:06:c4:81:e6:9f:fe:a8:6b:7a:08:09:cf:da:fd: 82:71:d9:4c:d7:b2:ad:35:94:1e:c8:c2:8d:32:1c: aa:55:62:c7:b7:0e:2f:28:12:f2:d6:4d:80:7d:1f: 3c:a0:20:66:82:37:ca:42:4a:c8:eb:be:32:ce:12: 20:9e:23:97:b8:91:ab:11:d6:57:f2:87:a4:d1:59: b9:ad:eb:9d:13:c3:ab:2c:72:c4:05:58:9e:c8:12: 46:6b:0b:8b:dc:38:ac:99:48:2e:e0:f8:ba:1c:81: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B5:6B:BF:9B:69:B8:8C:F4:2B:AF:F1:57:A6:EA:97:AB:AD:A7:CC X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b0:3d:42:ec:36:c2:ef:f3:6f:39:66:28:cf:a9:2f:ba:de: 64:6c:85:fa:3d:25:2d:b3:91:1b:66:dc:a0:e6:44:73:4f:41: de:4f:c3:61:ef:7a:04:15:6e:7f:df:ad:0c:df:f3:9c:2b:bc: 25:1a:3b:5b:d2:4e:98:47:95:6a:e5:d7:7f:54:78:96:81:90: ec:92:b2:6f:53:2b:5f:6c:cb:13:ed:51:1e:1d:d8:ee:c6:a7: 6c:78:88:f7:85:53:32:e9:34:ac:b5:ce:f2:7e:49:04:00:b9: be:bd:94:e1:bd:8a:cb:b0:ba:29:ec:57:15:68:5f:80:94:be: 03:68:ac:64:52:ea:23:9a:4e:18:22:8e:24:25:46:e6:73:25: 74:a5:72:a0:db:b1:c3:40:da:0c:4f:1d:6e:49:5f:3f:53:32: 3f:c5:98:b3:a3:de:79:6f:8b:0a:62:55:ca:2e:03:4f:73:2b: ab:77:e9:07:68:2c:14:1b:eb:e7:ad:68:64:0f:74:bc:37:db: 32:57:cb:bc:43:33:97:b7:6b:2c:7d:89:9f:88:f4:1c:9f:b3: c4:83:73:01:ed:2d:b1:2e:00:db:38:6a:20:c2:d4:67:35:80: 08:f1:cd:27:53:48:bd:51:fa:0a:6d:38:6c:aa:eb:57:b3:7f: 6a:42:98:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICES4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUwNDA0MTcyMjEwWhcNMjUwNDExMTcyMjEwWjAYMRYwFAYD VQQDEw02N2YwMTU0My04Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzN2rQOCqozhEJx9kouFLdrPSHIOEYXPMv4JwBBEUszHRNZP3GhozjPQyURto PDbRUjh3mdEPc/VfP+/OlWA18bG3/BPn7P0SsXgzFNuHknd77XiHdA13M2XypZXE DWi8KVmrSXyjbowC+SIGfIGeZSQ/I2ZnpLcoR6M9zTeSmlDvQdYQJE8C6+12aDpR V/dJ1atihPOkBsSB5p/+qGt6CAnP2v2CcdlM17KtNZQeyMKNMhyqVWLHtw4vKBLy 1k2AfR88oCBmgjfKQkrI674yzhIgniOXuJGrEdZX8oek0Vm5reudE8OrLHLEBVie yBJGawuL3DismUgu4Pi6HIE6pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAe1a7+b abiM9Cuv8Vem6perrafMMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9sD1C7DbC7/NvOWYoz6kvut5kbIX6PSUts5EbZtyg5kRzT0HeT8Nh 73oEFW5/360M3/OcK7wlGjtb0k6YR5Vq5dd/VHiWgZDskrJvUytfbMsT7VEeHdju xqdseIj3hVMy6TSstc7yfkkEALm+vZThvYrLsLop7FcVaF+AlL4DaKxkUuojmk4Y Io4kJUbmcyV0pXKg27HDQNoMTx1uSV8/UzI/xZizo955b4sKYlXKLgNPcyurd+kH aCwUG+vnrWhkD3S8N9syV8u8QzOXt2ssfYmfiPQcn7PEg3MB7S2xLgDbOGogwtRn NYAI8c0nU0i9UfoKbThsqutXs39qQphj -----END CERTIFICATE-----Generated at Sat Apr 5 14:27:56 2025 by rpki-client