$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft File: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json) Hash identifier: tfqeOmSvD7YruPNdpjr/YreWkRERAobFWIV9I0i1hH0= Subject key identifier: 5A:B5:BE:35:86:DA:7C:27:15:4F:D5:39:1D:42:19:52:F2:19:FD:D6 Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 Certificate issuer: /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft Manifest number: 078D Signing time: Fri 30 May 2025 21:36:56 +0000 Manifest this update: Fri 30 May 2025 21:36:56 +0000 Manifest next update: Fri 06 Jun 2025 21:36:56 +0000 Files and hashes: 1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: hZlEoEv95Ofm1sgfTmbtKz6RTsZRTf2gKPPLECTrY+w=) 2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: bCzW+BaRUSMEs6ksafkZ0M05EIAyYKkAVk7wGw2XL8U=) 3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: hlQlo3zj4oD4t9qHVL26IJYGsUxTLxyLxxcgSQsOSFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Validity Not Before: May 30 21:36:56 2025 GMT Not After : Jun 6 21:36:56 2025 GMT Subject: CN=683a24f8-7485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:24:b7:fc:fc:31:b2:31:99:34:6e:bd:2c: 7b:d1:61:e0:02:fd:9d:f7:3f:bf:92:bf:09:40:94: 46:cd:7e:47:3e:c1:a7:d8:b9:0f:b5:a2:d4:ed:29: 6f:cc:f4:7a:8c:9c:1a:62:a0:d4:4f:c7:c7:52:1d: ae:e3:73:ec:2b:b1:d9:13:e2:52:4c:8d:70:43:a6: f4:b1:9b:30:4d:1b:80:3e:7c:19:9a:ec:21:f0:35: 89:c0:06:6e:e0:0b:e3:c5:8e:8a:1b:a1:8a:c1:ac: 5a:38:46:00:87:27:1f:f1:0e:bf:30:b9:4f:68:5d: ef:76:75:c6:b7:0a:61:be:09:e6:3e:1e:c0:63:85: cf:f2:93:4d:57:89:7b:05:c6:1f:77:95:8c:f8:ff: fb:c8:a9:4a:fa:85:9c:d4:68:a0:61:0d:99:b1:bf: 74:23:63:1b:6a:f7:7a:37:d1:70:bd:e3:5e:8d:b8: 05:cb:89:1f:da:50:30:e6:d7:55:76:a3:07:ac:ec: 13:2b:cf:d5:13:2e:c4:c0:e9:19:e1:ac:ce:cf:7b: 5c:8c:e2:d6:ae:73:ac:63:43:c9:16:06:eb:49:12: 5f:9d:76:85:2b:59:60:15:cb:fd:72:db:90:b0:e4: 60:30:3f:d6:b6:7f:b7:20:c6:9c:25:8c:e1:d9:d2: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:BE:35:86:DA:7C:27:15:4F:D5:39:1D:42:19:52:F2:19:FD:D6 X509v3 Authority Key Identifier: keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:64:9b:09:2e:52:60:85:9c:1c:55:3b:b6:41:6a:46:70:4a: 4c:9a:28:8d:b3:26:29:7c:9f:dd:dd:e9:2f:3e:3b:9f:c0:7f: 82:b3:71:2b:ab:3e:a1:86:d6:27:25:00:91:3b:68:46:97:c8: df:c7:69:91:72:52:2f:76:1c:ca:80:0c:4a:9a:e6:4a:ba:65: 43:91:af:35:cb:71:76:37:ae:cf:f1:dd:4b:a8:ff:7f:9f:02: 34:ce:aa:c8:1b:2e:51:5c:33:4d:a3:2d:d7:f0:73:fe:3c:3c: 81:5a:79:71:83:37:b2:5e:9e:84:e5:3b:c7:ec:30:e7:fb:fa: 93:d0:ad:75:46:13:a9:28:7e:3f:4b:44:d7:4a:2c:b2:d3:ba: 0b:98:6e:b7:dd:7a:e5:fe:3a:15:db:1a:5d:38:00:4f:14:f6: a4:1e:de:28:c6:f0:cb:fb:5d:0a:5e:b3:19:9b:29:df:41:8e: 61:1e:86:43:a8:40:04:fe:df:e3:f2:07:2c:a7:25:9c:ce:8f: 65:de:f7:ba:c9:92:53:fe:c6:bb:99:73:99:29:04:64:01:d0: e4:c4:ca:2d:16:aa:5a:28:0d:26:10:9e:d0:4e:1c:b0:65:07: a2:21:2a:cd:f0:5f:fd:90:67:79:f1:ac:09:4c:7a:78:2a:c8: e3:a9:75:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEOTYxMTAvBgNVBAUTKENEOEJCRTcwNkNDRDlCNTUzMkNGM0VCMUQ1RkJCRDdE M0UzRUJFQTQwHhcNMjUwNTMwMjEzNjU2WhcNMjUwNjA2MjEzNjU2WjAYMRYwFAYD VQQDEw02ODNhMjRmOC03NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhEkt/z8MbIxmTRuvSx70WHgAv2d9z+/kr8JQJRGzX5HPsGn2LkPtaLU7Slv zPR6jJwaYqDUT8fHUh2u43PsK7HZE+JSTI1wQ6b0sZswTRuAPnwZmuwh8DWJwAZu 4AvjxY6KG6GKwaxaOEYAhycf8Q6/MLlPaF3vdnXGtwphvgnmPh7AY4XP8pNNV4l7 BcYfd5WM+P/7yKlK+oWc1GigYQ2Zsb90I2Mbavd6N9FwveNejbgFy4kf2lAw5tdV dqMHrOwTK8/VEy7EwOkZ4azOz3tcjOLWrnOsY0PJFgbrSRJfnXaFK1lgFcv9ctuQ sORgMD/Wtn+3IMacJYzh2dLAdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq1vjWG 2nwnFU/VOR1CGVLyGf3WMB8GA1UdIwQYMBaAFM2LvnBszZtVMs8+sdX7vX0+Pr6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQ5Ni83NTY2RjUyNjBE REIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0xVXl6ejZ4MWZ1OWZUNC12 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZdS1jR3pObTFVeXp6NngxZnU5ZlQ0LXZxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQ5Ni83NTY2RjUyNjBEREIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0x VXl6ejZ4MWZ1OWZUNC12cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZJsJLlJghZwcVTu2QWpGcEpMmiiNsyYpfJ/d3ekvPjufwH+Cs3Er qz6hhtYnJQCRO2hGl8jfx2mRclIvdhzKgAxKmuZKumVDka81y3F2N67P8d1LqP9/ nwI0zqrIGy5RXDNNoy3X8HP+PDyBWnlxgzeyXp6E5TvH7DDn+/qT0K11RhOpKH4/ S0TXSiyy07oLmG633Xrl/joV2xpdOABPFPakHt4oxvDL+10KXrMZmynfQY5hHoZD qEAE/t/j8gcspyWczo9l3ve6yZJT/sa7mXOZKQRkAdDkxMotFqpaKA0mEJ7QThyw ZQeiISrN8F/9kGd58awJTHp4KsjjqXUZ -----END CERTIFICATE-----Generated at Sat May 31 16:29:34 2025 by rpki-client