$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: h1VgjJqfHCXiHLV2g04ZCWAPvTRmHmKJZEaIbVv3Bgw= Subject key identifier: 36:A7:02:F4:F7:4F:65:C1:A9:75:DE:D7:3F:51:C3:C5:6D:16:A8:9F Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 46 Signing time: Thu 17 Apr 2025 06:13:25 +0000 Manifest this update: Thu 17 Apr 2025 06:13:24 +0000 Manifest next update: Thu 24 Apr 2025 06:13:24 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: Vli3clsj+XGUhEzxkMdLD1XT3I2el7On6oJqcsmR7bg=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Apr 17 06:13:24 2025 GMT Not After : Apr 24 06:13:24 2025 GMT Subject: CN=68009c05-8dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:90:3d:e4:65:59:9a:8c:52:38:7d:e1:0a: 21:91:48:6a:e9:17:60:5b:43:19:22:20:03:e7:3f: ce:c0:32:be:f3:bb:8b:61:cd:e4:63:a8:d2:28:c2: 04:76:b7:d1:a8:6b:55:fe:e9:88:f9:cc:c2:6d:a5: 82:ea:5c:2f:5a:df:61:1c:29:bd:59:2a:04:4c:86: 16:30:ff:84:59:6b:40:d6:db:45:51:3d:54:78:5a: 4f:01:57:93:eb:61:fc:34:1e:4e:e8:c8:38:21:5b: 02:11:bb:13:6e:26:3b:19:46:73:18:13:93:14:2e: 7c:3e:92:cb:75:8c:1d:1e:f9:9c:90:57:19:ba:0c: d4:aa:de:1c:cb:f1:26:0e:5f:c4:ab:c1:a4:af:99: 9c:99:df:cb:54:66:0f:33:c8:c2:b7:1b:ec:cd:99: 6d:51:73:6b:78:cf:18:18:33:a5:f9:33:33:52:1e: a5:8f:a7:b6:3b:69:fb:9d:9f:6c:05:68:82:3a:f9: 5c:95:ee:6a:2a:b5:f6:63:72:81:9e:6b:d3:e8:ae: a4:19:10:bd:38:c7:37:75:4a:d8:50:71:12:43:b0: e6:e3:c9:fe:35:be:65:48:90:2d:a1:39:58:c2:25: 20:d8:7f:4d:91:aa:4d:57:a6:96:c5:21:8e:dd:44: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A7:02:F4:F7:4F:65:C1:A9:75:DE:D7:3F:51:C3:C5:6D:16:A8:9F X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2c:24:a7:13:a1:e8:d2:61:89:7f:ad:c9:52:d2:3e:c4:c9: d3:ec:2c:8c:20:55:98:28:d4:0a:01:2f:f4:e3:f0:ff:37:7e: 43:f4:4d:62:33:3d:8e:67:95:56:d7:b2:36:c7:fe:6c:fb:92: 0d:07:1e:59:21:a2:8c:c9:90:02:eb:1a:b3:2d:49:cd:b1:df: d4:12:d7:9a:e4:a2:22:e3:2e:d3:c2:28:b8:fa:36:29:57:3f: 15:62:44:ad:63:ee:37:65:25:25:da:8d:ff:fa:9d:9c:11:f3: bf:52:39:a5:13:63:3b:17:c9:3b:e6:b8:4b:d8:3a:aa:41:9f: 2c:73:79:d1:5d:b6:59:32:a0:f3:f5:39:06:93:f8:94:da:0d: d1:17:d2:f3:c2:dd:ed:59:10:06:ba:20:0e:b5:88:f3:c0:16: 47:ca:2e:bc:1b:c6:b3:38:8e:62:06:4f:9f:ce:56:7c:4a:0c: bb:da:db:fe:60:ea:fc:2c:bf:29:67:32:af:91:b7:d5:f5:b1: 27:a1:3b:18:66:57:3a:9e:33:07:d9:69:32:5d:36:ef:88:49: af:eb:e5:8a:18:7a:92:63:1d:f8:af:0e:2b:39:d9:ce:55:db: 09:b5:ad:2e:fa:5e:17:b2:6f:ca:66:92:c7:94:91:de:fd:62: 55:1e:a4:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNTA0MTcwNjEzMjRaFw0yNTA0MjQwNjEzMjRaMBgxFjAUBgNV BAMTDTY4MDA5YzA1LThkZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPB5A95GVZmoxSOH3hCiGRSGrpF2BbQxkiIAPnP87AMr7zu4thzeRjqNIowgR2 t9Goa1X+6Yj5zMJtpYLqXC9a32EcKb1ZKgRMhhYw/4RZa0DW20VRPVR4Wk8BV5Pr Yfw0Hk7oyDghWwIRuxNuJjsZRnMYE5MULnw+kst1jB0e+ZyQVxm6DNSq3hzL8SYO X8SrwaSvmZyZ38tUZg8zyMK3G+zNmW1Rc2t4zxgYM6X5MzNSHqWPp7Y7afudn2wF aII6+VyV7moqtfZjcoGea9PorqQZEL04xzd1SthQcRJDsObjyf41vmVIkC2hOVjC JSDYf02Rqk1XppbFIY7dRIK7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNqcC9PdP ZcGpdd7XP1HDxW0WqJ8wHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIssJKcToejSYYl/rclS0j7EydPsLIwgVZgo1AoBL/Tj8P83fkP0TWIz PY5nlVbXsjbH/mz7kg0HHlkhoozJkALrGrMtSc2x39QS15rkoiLjLtPCKLj6NilX PxViRK1j7jdlJSXajf/6nZwR879SOaUTYzsXyTvmuEvYOqpBnyxzedFdtlkyoPP1 OQaT+JTaDdEX0vPC3e1ZEAa6IA61iPPAFkfKLrwbxrM4jmIGT5/OVnxKDLva2/5g 6vwsvylnMq+Rt9X1sSehOxhmVzqeMwfZaTJdNu+ISa/r5YoYepJjHfivDis52c5V 2wm1rS76Xheyb8pmkseUkd79YlUepEM= -----END CERTIFICATE-----Generated at Thu Apr 17 22:55:11 2025 by rpki-client