$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: J6xJ6VdNVy2NABeJcytLDI8DqtwC8a99FPGHMnerjgQ= Subject key identifier: 5A:E8:FB:81:5A:F0:68:CD:F1:B2:A3:9B:A1:05:5F:79:FD:D1:FD:CA Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: C7 Signing time: Sat 31 May 2025 05:36:53 +0000 Manifest this update: Sat 31 May 2025 05:36:53 +0000 Manifest next update: Sat 07 Jun 2025 05:36:53 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: BQDcT5h3emxVSHzs8b1vP/MjV2WNP3LQCqJ/vofaTjA=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 25OwR8XYdGuev6/l5HqM3nWw1IEfuwMcD9rJsTiO0fE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: May 31 05:36:53 2025 GMT Not After : Jun 7 05:36:53 2025 GMT Subject: CN=683a9575-ca5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:dc:9e:d5:13:c0:34:7d:23:c3:0f:77:49: a2:b0:ba:a1:65:f2:e4:e8:d5:92:c9:14:8c:87:48: 70:e6:50:16:04:b4:29:b7:dd:9a:4c:03:a9:0c:ce: 07:07:6a:a6:ba:13:69:4c:fd:e9:c9:37:82:f8:85: 5d:ba:69:a2:8c:93:d8:5a:a6:a3:46:bc:44:31:72: 8f:d6:ab:7d:8d:a6:49:21:29:ac:65:8f:1b:34:fe: d9:24:69:a9:69:85:19:33:45:b5:c9:25:45:1f:ba: 2d:c5:69:3d:30:6a:12:1f:b6:c3:55:12:03:ce:0a: 72:55:5e:14:fc:41:2e:24:ec:b0:fa:18:f6:55:98: 40:99:fa:57:3e:91:65:bf:6b:4f:c5:a1:ba:08:1f: 32:52:f4:d1:d5:5d:ae:39:b8:29:7d:e8:5f:f1:cc: 14:53:a5:81:5d:94:db:6b:91:85:1a:cd:b5:86:71: 06:e5:fb:7c:d4:88:58:4b:07:81:20:48:51:bb:e8: 05:94:d9:96:9a:39:b7:70:54:4a:e8:87:1b:d6:ab: db:e9:d0:86:13:07:85:6a:63:71:78:30:58:a2:21: 89:72:3e:70:6c:87:3a:fc:a4:b0:29:8e:f7:4d:60: 0f:ba:1d:fc:15:15:f4:e5:d2:59:35:0c:ac:30:0f: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:FB:81:5A:F0:68:CD:F1:B2:A3:9B:A1:05:5F:79:FD:D1:FD:CA X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:91:88:1a:68:43:eb:15:0e:50:30:08:02:da:59:6b:9e:ba: 68:60:ea:09:48:ca:da:45:5f:d0:5b:2d:0d:85:09:eb:68:b5: 17:5f:9a:73:9e:e0:9c:5a:45:8d:c7:31:d5:e3:e0:31:ee:bf: 98:17:c5:b5:0a:b3:c6:0b:b1:ce:78:da:c1:78:80:68:92:87: 6f:03:32:40:2c:41:86:aa:36:57:ab:4d:bd:41:7d:d9:23:7b: bd:3b:cc:2e:11:19:00:3c:ae:c9:33:f2:a4:df:25:95:52:1b: 8a:ac:1f:25:97:44:d5:bb:19:89:37:e2:29:02:b9:42:3f:4f: 2e:2b:00:f3:b6:22:e7:1b:75:15:82:c4:d0:56:9f:b9:67:98: 22:3c:11:22:15:7f:22:76:b8:8c:8b:af:13:58:9d:af:fb:fb: 8f:b2:bb:bc:74:1a:4e:33:90:10:57:b6:17:9c:94:0a:c4:f7: ae:43:3c:c7:c5:e1:39:07:1e:3c:b5:4f:41:c4:89:9d:82:e8: 4b:fd:48:26:f2:25:6c:46:62:fe:a7:0a:5e:f3:63:51:ec:65: b7:90:2d:1e:e5:b1:54:cb:17:c2:75:49:73:01:45:de:0b:41: aa:71:59:57:cc:d1:b5:c1:b2:f0:80:0a:29:8a:64:57:60:e0: ff:f2:be:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwNTMxMDUzNjUzWhcNMjUwNjA3MDUzNjUzWjAYMRYwFAYD VQQDEw02ODNhOTU3NS1jYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL3cntUTwDR9I8MPd0misLqhZfLk6NWSyRSMh0hw5lAWBLQpt92aTAOpDM4H B2qmuhNpTP3pyTeC+IVdummijJPYWqajRrxEMXKP1qt9jaZJISmsZY8bNP7ZJGmp aYUZM0W1ySVFH7otxWk9MGoSH7bDVRIDzgpyVV4U/EEuJOyw+hj2VZhAmfpXPpFl v2tPxaG6CB8yUvTR1V2uObgpfehf8cwUU6WBXZTba5GFGs21hnEG5ft81IhYSweB IEhRu+gFlNmWmjm3cFRK6Icb1qvb6dCGEweFamNxeDBYoiGJcj5wbIc6/KSwKY73 TWAPuh38FRX05dJZNQysMA+sbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFro+4Fa 8GjN8bKjm6EFX3n90f3KMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqkYgaaEPrFQ5QMAgC2llrnrpoYOoJSMraRV/QWy0NhQnraLUXX5pz nuCcWkWNxzHV4+Ax7r+YF8W1CrPGC7HOeNrBeIBokodvAzJALEGGqjZXq029QX3Z I3u9O8wuERkAPK7JM/Kk3yWVUhuKrB8ll0TVuxmJN+IpArlCP08uKwDztiLnG3UV gsTQVp+5Z5giPBEiFX8idriMi68TWJ2v+/uPsru8dBpOM5AQV7YXnJQKxPeuQzzH xeE5Bx48tU9BxImdguhL/Ugm8iVsRmL+pwpe82NR7GW3kC0e5bFUyxfCdUlzAUXe C0GqcVlXzNG1wbLwgAopimRXYOD/8r6y -----END CERTIFICATE-----Generated at Sat May 31 17:54:48 2025 by rpki-client