$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: Cl82jSz0IG0cOpwy+WLaAubPJ78tBkm3fvtlkEBYzHE= Subject key identifier: A6:05:51:9F:DA:BB:66:C6:A1:C8:64:AE:58:6D:10:45:AF:DF:77:89 Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 01A6 Signing time: Sat 31 May 2025 02:58:27 +0000 Manifest this update: Sat 31 May 2025 02:58:26 +0000 Manifest next update: Sat 07 Jun 2025 02:58:26 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: vgP6iQNC6wrgzZJvGuA6oS2as8FjXBhplqWNsNTSTVI=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: vkUKnag58zCpuCP8+f6HBj43+NKzxFLQMFl2RAEd1t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: May 31 02:58:26 2025 GMT Not After : Jun 7 02:58:26 2025 GMT Subject: CN=683a7053-9926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:22:e7:ae:01:71:8f:79:e5:f6:55:40:05: 31:c6:eb:9a:e7:2d:98:56:70:eb:d1:d2:b5:7d:c3: 02:dd:02:4d:cd:e4:61:6f:de:f8:36:ec:4d:f5:f4: 3a:5b:e7:49:c6:15:7e:29:2f:9d:30:6d:dc:6d:55: 79:50:cd:cc:8b:92:b9:e7:42:d4:ef:2d:e8:b4:06: 89:bc:df:ef:3e:4e:e5:4b:d3:db:8f:10:62:b0:4c: df:18:37:ce:fb:2f:3f:28:b1:4c:15:b1:4b:62:0f: c3:e6:1d:c1:bc:8e:46:53:0f:c6:a4:ec:79:5e:7d: a2:92:2c:d0:51:6f:2d:98:5a:3a:6d:74:41:48:f5: 0f:57:40:71:e8:ca:e8:86:53:76:e0:22:97:1f:d4: 00:e8:76:a8:87:1d:fc:64:63:f5:cf:5c:01:b6:c9: ef:e6:39:91:42:39:a8:49:c3:7d:a5:0a:a7:6b:ea: e1:40:73:41:b1:de:ec:a2:06:46:4f:c2:73:8c:09: 04:92:e7:0b:b0:58:f3:2a:9f:64:9a:2b:bd:a7:5b: 8e:02:b0:8b:5b:6b:5f:99:2f:d4:15:79:3d:15:70: 46:1c:81:73:9b:64:10:b9:e1:3e:c8:f5:29:07:cb: ab:90:39:60:18:b2:b6:0b:ea:5a:21:7d:ea:be:6f: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:51:9F:DA:BB:66:C6:A1:C8:64:AE:58:6D:10:45:AF:DF:77:89 X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:91:61:5a:a3:9c:68:8e:5c:37:33:75:0c:3f:41:ee:b0:0d: 1e:27:d5:20:16:a8:3b:3b:d1:ed:35:1e:6c:bf:46:bf:6b:43: aa:8a:ff:e5:d7:cf:da:46:6f:af:ce:f2:28:c4:b2:fc:8d:99: 3e:91:d7:68:64:ab:3b:35:2a:85:55:95:06:f4:02:c5:68:45: ea:84:37:eb:dc:5a:89:16:67:1d:78:9a:2d:4e:50:a4:90:51: 33:82:b5:30:ac:01:94:5a:e9:01:b5:4a:09:2e:1e:fa:08:f9: 39:3f:4d:e9:ff:f3:6e:0f:89:f8:d1:b6:fa:fc:e3:48:11:af: 6d:c5:79:b9:62:eb:bf:5c:8c:54:ce:bc:15:74:27:84:9a:07: c7:ce:c0:92:85:db:29:65:b9:7d:4b:5d:1e:7d:b0:c5:3f:50: 3e:3f:3f:06:7a:b2:3e:49:a4:fc:39:69:7b:98:d1:6c:81:19: 42:22:d2:02:92:1a:7f:f5:7b:21:cf:83:cf:5a:1a:2a:00:24: b7:0c:a4:ca:b0:04:93:93:9c:35:2b:bf:bf:f4:0a:1e:bf:9d: f3:39:c9:6d:87:f8:6d:a0:c5:3b:e1:0d:b7:9f:4c:f7:0e:45: 37:87:9d:1e:0c:17:05:27:d8:4a:c6:4f:3e:03:b3:ba:f3:7f: ab:d3:3a:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjUwNTMxMDI1ODI2WhcNMjUwNjA3MDI1ODI2WjAYMRYwFAYD VQQDEw02ODNhNzA1My05OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOci564BcY955fZVQAUxxuua5y2YVnDr0dK1fcMC3QJNzeRhb974NuxN9fQ6 W+dJxhV+KS+dMG3cbVV5UM3Mi5K550LU7y3otAaJvN/vPk7lS9PbjxBisEzfGDfO +y8/KLFMFbFLYg/D5h3BvI5GUw/GpOx5Xn2ikizQUW8tmFo6bXRBSPUPV0Bx6Mro hlN24CKXH9QA6Haohx38ZGP1z1wBtsnv5jmRQjmoScN9pQqna+rhQHNBsd7sogZG T8JzjAkEkucLsFjzKp9kmiu9p1uOArCLW2tfmS/UFXk9FXBGHIFzm2QQueE+yPUp B8urkDlgGLK2C+paIX3qvm/KewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYFUZ/a u2bGochkrlhtEEWv33eJMB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEkWFao5xojlw3M3UMP0HusA0eJ9UgFqg7O9HtNR5sv0a/a0Oqiv/l 18/aRm+vzvIoxLL8jZk+kddoZKs7NSqFVZUG9ALFaEXqhDfr3FqJFmcdeJotTlCk kFEzgrUwrAGUWukBtUoJLh76CPk5P03p//NuD4n40bb6/ONIEa9txXm5Yuu/XIxU zrwVdCeEmgfHzsCShdspZbl9S10efbDFP1A+Pz8GerI+SaT8OWl7mNFsgRlCItIC khp/9Xshz4PPWhoqACS3DKTKsASTk5w1K7+/9Aoev53zOclth/htoMU74Q23n0z3 DkU3h50eDBcFJ9hKxk8+A7O683+r0zp6 -----END CERTIFICATE-----Generated at Sat May 31 17:26:14 2025 by rpki-client