$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json) Hash identifier: wqDlxk+GjUY+SXtnaA+mG8lGIogXEDRGRlD3BrujDbc= Subject key identifier: A1:6A:78:41:18:95:B2:57:F9:EF:09:36:BE:B6:88:B8:2C:2C:B9:E8 Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Certificate serial: 1D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft Manifest number: 1D52 Signing time: Fri 30 May 2025 16:19:13 +0000 Manifest this update: Fri 30 May 2025 16:19:12 +0000 Manifest next update: Fri 06 Jun 2025 16:19:12 +0000 Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: 9H67w3D6aM8n8rNy3dXPyJaLLe+M/A7RbA2eAhkLJoQ=) 2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: djmV6ni7hy6C8m5F1gtlxw3KFQjLB6LT9Z3a9xMILMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7517 (0x1d5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Validity Not Before: May 30 16:19:12 2025 GMT Not After : Jun 6 16:19:12 2025 GMT Subject: CN=6839da80-d3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:53:5a:6e:71:fb:64:94:ba:58:db:b2:b1: 8a:1f:36:dd:ea:c3:df:9e:3b:c4:2c:d2:a9:9e:9b: 13:a1:12:39:3f:6f:fe:c6:b3:46:db:4e:d1:0b:7f: a7:3a:fa:72:71:89:dc:f1:c5:79:9f:40:d1:12:c2: 47:35:13:68:6b:d6:21:48:1a:b8:bc:4a:9a:6d:8b: 0c:e7:3c:8b:1c:5d:40:88:7b:9b:b5:5a:03:09:47: e0:ed:98:09:6f:8c:55:62:9c:0f:82:63:1e:4e:41: 2d:ba:af:b1:b3:90:d9:f9:91:12:b1:2d:16:61:0a: 03:95:8e:f5:51:be:e6:60:11:6b:ed:4b:2e:96:35: a2:4c:4b:03:02:57:8d:8c:b6:1e:44:8f:6a:8a:e5: dc:35:cd:51:5e:f2:15:cc:39:ba:93:3e:11:4a:8d: 05:69:c3:a2:5c:18:e9:e1:ce:6c:4d:0a:09:84:be: fb:10:43:f6:89:38:8e:dd:f2:bc:52:f8:e3:07:b9: 64:c5:43:63:8f:2b:59:64:2f:0b:c2:8a:c2:f9:dc: 57:b5:3e:13:d6:1e:06:58:72:d3:3f:61:7a:31:b0: 33:e3:55:fc:f4:e7:95:0d:b0:13:0e:38:2b:95:b9: 4b:39:4b:ea:68:f6:c7:79:45:2c:1c:0a:f7:4c:ed: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6A:78:41:18:95:B2:57:F9:EF:09:36:BE:B6:88:B8:2C:2C:B9:E8 X509v3 Authority Key Identifier: keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:54:1d:64:c9:c4:84:43:cf:cf:3e:9d:c3:d7:25:40:c3:56: 90:33:17:6e:ad:a1:96:b8:dc:d4:36:d6:89:31:32:69:44:35: 98:5b:57:b5:80:d4:de:c3:9f:80:d1:c7:59:18:d8:44:35:42: 1a:60:7c:26:5e:4e:e0:e9:aa:cf:94:d8:d7:d0:d8:14:a5:d9: c0:8c:fc:34:dd:3d:68:74:e6:a5:a3:55:8f:bf:7b:f5:f2:51: 38:96:71:cb:0c:5e:06:de:b4:8c:fe:89:05:3b:81:95:9e:13: 44:24:f6:86:7b:37:af:64:b6:32:85:ab:1c:b1:00:23:4e:94: 26:ef:c1:26:4f:14:c1:61:4d:84:09:69:41:fe:b7:b1:96:3e: bb:2c:d5:4b:a9:00:a6:05:f6:4a:5d:e1:3e:9f:02:6d:cb:c9: 12:33:92:7e:97:d5:60:da:e8:9f:2d:9a:3d:cb:38:04:ac:67: e6:f6:f6:9e:ba:30:04:4b:cf:f5:f1:ca:0d:d5:d9:91:5a:58: 3e:39:c2:5a:6a:71:6e:d1:ca:f0:cb:8b:00:69:ad:7a:b6:ed: 11:6e:c3:27:b2:5e:3f:2b:e5:d8:b9:0d:96:8e:f0:f8:ef:42: 7e:5d:aa:65:37:e6:60:1f:64:f8:f2:0a:5e:2a:05:ed:ce:84: ec:78:8b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlENEExMTAvBgNVBAUTKDY0NkIxQzQxQTgxRkY3RTU4MkI1RUNEQzFDRUY1NENF NjExNTI1NjMwHhcNMjUwNTMwMTYxOTEyWhcNMjUwNjA2MTYxOTEyWjAYMRYwFAYD VQQDEw02ODM5ZGE4MC1kM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJhTWm5x+2SUuljbsrGKHzbd6sPfnjvELNKpnpsToRI5P2/+xrNG207RC3+n OvpycYnc8cV5n0DREsJHNRNoa9YhSBq4vEqabYsM5zyLHF1AiHubtVoDCUfg7ZgJ b4xVYpwPgmMeTkEtuq+xs5DZ+ZESsS0WYQoDlY71Ub7mYBFr7UsuljWiTEsDAleN jLYeRI9qiuXcNc1RXvIVzDm6kz4RSo0FacOiXBjp4c5sTQoJhL77EEP2iTiO3fK8 UvjjB7lkxUNjjytZZC8LworC+dxXtT4T1h4GWHLTP2F6MbAz41X89OeVDbATDjgr lblLOUvqaPbHeUUsHAr3TO3URQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFqeEEY lbJX+e8JNr62iLgsLLnoMB8GA1UdIwQYMBaAFGRrHEGoH/flgrXs3BzvVM5hFSVj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUQ0QS8yNDgxMDNBNEFD OTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjktV0N0ZXpjSE85VXptRVZK V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pHc2NRYWdmOS1XQ3RlemNITzlVem1FVkpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUQ0QS8yNDgxMDNBNEFDOTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjkt V0N0ZXpjSE85VXptRVZKV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/VB1kycSEQ8/PPp3D1yVAw1aQMxduraGWuNzUNtaJMTJpRDWYW1e1 gNTew5+A0cdZGNhENUIaYHwmXk7g6arPlNjX0NgUpdnAjPw03T1odOalo1WPv3v1 8lE4lnHLDF4G3rSM/okFO4GVnhNEJPaGezevZLYyhascsQAjTpQm78EmTxTBYU2E CWlB/rexlj67LNVLqQCmBfZKXeE+nwJty8kSM5J+l9Vg2uifLZo9yzgErGfm9vae ujAES8/18coN1dmRWlg+OcJaanFu0crwy4sAaa16tu0RbsMnsl4/K+XYuQ2WjvD4 70J+XaplN+ZgH2T48gpeKgXtzoTseIvN -----END CERTIFICATE-----Generated at Sat May 31 15:50:00 2025 by rpki-client