$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: 9OjkC9fQeb26zsaF6HidIuqXPZHbOHIJ722CONecMt8= Subject key identifier: 08:05:A0:DD:39:3E:EE:34:EF:2E:77:BC:4C:B8:E1:16:82:16:AF:F5 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06A2 Signing time: Tue 08 Apr 2025 22:21:18 +0000 Manifest this update: Tue 08 Apr 2025 22:21:17 +0000 Manifest next update: Tue 15 Apr 2025 22:21:17 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: TYQs0DUdo3XajyQ7OCdV/I7vQ3/MkixnnYz20iFEayY=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: gigu9XXG4TciW/baJe+D9FNij/SMJDKtLbxaQE6wPW8=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: FmdbY9QipzaQlUDFsL3jY9YqRtDMRVNSSqRy0Syi7ec=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: g+zMllLE2VCl9M+OB2Fx9FsTbN85M1LU1pE2Ig0HpqA=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: +y+hJ5qJjcNTcDHQRQUIm9QSLwoFCs3tpko5IxlscxY=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: ECS4oxCwGoPittuwiBAwWcmaSVPvRXUwLMLK1Srfnf4=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: +HIWxJiLolDgRpb6PQ9bp+rcmEeyPFvi32O1KjhIdI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41 Validity Not Before: Apr 8 22:21:17 2025 GMT Not After : Apr 15 22:21:17 2025 GMT Subject: CN=67f5a15d-515d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:e8:8f:9c:31:3f:b8:85:8a:e4:ee:b7:4c: 41:5b:e4:66:32:c3:07:fd:cb:85:38:e8:b1:98:c1: d2:d6:59:9c:74:7b:74:f7:3f:91:89:d3:3b:d0:33: b7:21:a5:0a:8c:e5:6b:0b:6e:80:50:34:34:ec:23: 22:8f:f1:0b:6b:89:f0:6c:0a:bd:3f:97:e6:09:c9: 21:46:bd:eb:ee:7f:9f:64:7a:5d:fc:40:bb:41:06: bf:dc:29:d1:61:8e:86:6d:fc:1d:1b:8e:0b:25:db: 4d:84:ba:51:34:33:ad:de:3d:9b:64:23:af:07:ac: ed:6c:fb:82:bd:e8:4c:c9:4b:be:1b:53:95:14:ec: 78:4e:e9:e2:01:c5:08:cf:76:47:00:30:c0:9d:4f: cd:ba:0c:4b:ad:cf:86:97:fc:66:32:c2:50:ee:8f: 56:83:d0:03:f5:14:9f:f6:2a:dc:94:0b:83:30:51: eb:9b:c6:6b:5f:af:cc:c7:f6:07:44:18:62:bd:fb: dd:c9:64:a1:8a:4b:56:67:63:cf:4a:f6:5c:b1:e0: b8:85:95:b6:71:11:32:5a:d6:c5:82:7e:c7:ef:40: d3:43:fe:34:09:a1:44:59:77:87:33:70:65:e8:f5: a7:7f:75:8c:19:a9:e3:e3:b3:e1:61:5f:de:6b:90: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:05:A0:DD:39:3E:EE:34:EF:2E:77:BC:4C:B8:E1:16:82:16:AF:F5 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:1d:b4:d2:4a:62:b9:b3:2b:04:e6:d7:a6:9d:85:7c:3d:d6: 2d:56:9b:d3:1a:4e:9e:1e:88:b7:0e:ad:22:62:11:da:75:4e: eb:7c:3e:6d:df:d3:3b:21:3e:8c:ba:77:e9:ab:49:28:66:79: 94:ae:cd:42:af:70:c1:a7:ac:55:dd:36:6e:d2:8f:29:a1:2b: 5e:53:5c:9a:a6:a2:94:9d:14:f5:64:c8:ee:ab:c4:a6:dc:fe: 38:fa:eb:52:c6:47:2b:38:cb:12:b2:88:75:6e:b8:6c:08:37: e2:94:ad:cd:54:f9:c3:4f:12:b3:34:05:76:8c:70:38:a2:2f: 57:8f:2b:39:97:81:c6:82:11:2c:40:ed:73:fa:d7:4c:b2:c1: 0f:e1:b1:4f:08:06:c2:62:a2:eb:df:c2:30:98:77:13:95:f7: 81:0b:64:c2:92:f9:4c:a3:75:3b:b7:c7:14:f4:6c:e7:08:09: 37:0d:38:bb:8f:5b:50:f0:43:e4:11:18:97:00:80:eb:f4:82: de:0e:6b:ae:6a:d6:1b:21:bf:50:5e:6b:39:50:34:e3:04:65: 23:13:e8:5e:da:fb:76:ef:92:c8:ba:37:06:26:a0:a7:92:58: 8e:d0:78:37:bd:50:cc:a4:0d:6a:81:2f:e0:83:c8:a2:51:04: f5:02:d9:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwNDA4MjIyMTE3WhcNMjUwNDE1MjIyMTE3WjAYMRYwFAYD VQQDEw02N2Y1YTE1ZC01MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPfoj5wxP7iFiuTut0xBW+RmMsMH/cuFOOixmMHS1lmcdHt09z+RidM70DO3 IaUKjOVrC26AUDQ07CMij/ELa4nwbAq9P5fmCckhRr3r7n+fZHpd/EC7QQa/3CnR YY6GbfwdG44LJdtNhLpRNDOt3j2bZCOvB6ztbPuCvehMyUu+G1OVFOx4TuniAcUI z3ZHADDAnU/NugxLrc+Gl/xmMsJQ7o9Wg9AD9RSf9irclAuDMFHrm8ZrX6/Mx/YH RBhivfvdyWShiktWZ2PPSvZcseC4hZW2cREyWtbFgn7H70DTQ/40CaFEWXeHM3Bl 6PWnf3WMGanj47PhYV/ea5ChVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgFoN05 Pu407y53vEy44RaCFq/1MB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNHbTSSmK5sysE5temnYV8PdYtVpvTGk6eHoi3Dq0iYhHadU7rfD5t 39M7IT6Munfpq0koZnmUrs1Cr3DBp6xV3TZu0o8poSteU1yapqKUnRT1ZMjuq8Sm 3P44+utSxkcrOMsSsoh1brhsCDfilK3NVPnDTxKzNAV2jHA4oi9Xjys5l4HGghEs QO1z+tdMssEP4bFPCAbCYqLr38IwmHcTlfeBC2TCkvlMo3U7t8cU9GznCAk3DTi7 j1tQ8EPkERiXAIDr9ILeDmuuatYbIb9QXms5UDTjBGUjE+he2vt275LIujcGJqCn kliO0Hg3vVDMpA1qgS/gg8iiUQT1AtkJ -----END CERTIFICATE-----Generated at Thu Apr 10 20:44:18 2025 by rpki-client