$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: a0z2tmDAaTEva/YzEcL8NjYws4M8/uqMosvlE5KlIis= Subject key identifier: C6:C4:4A:FC:B5:78:C5:C8:16:35:EE:E3:40:06:C7:D7:2D:19:7B:5B Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2D7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2D5A Signing time: Sat 31 May 2025 15:29:38 +0000 Manifest this update: Sat 31 May 2025 15:29:38 +0000 Manifest next update: Sat 07 Jun 2025 15:29:38 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: vJ8KLr3UxqpmWtSqb5bJTCyeCIFOZovOv0dg0z8yYrQ=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11644 (0x2d7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: May 31 15:29:38 2025 GMT Not After : Jun 7 15:29:38 2025 GMT Subject: CN=683b2062-3dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:0f:33:1b:73:f1:7d:4c:b8:3f:ce:10:19: 25:d7:a1:a7:bd:06:bf:91:b1:ff:b3:cf:84:11:d0: 1c:35:41:89:e9:9c:25:fa:31:0a:e1:75:75:61:48: f0:ea:90:6b:33:ee:08:85:20:3e:83:39:c6:58:cb: be:ac:7d:44:96:8d:9e:a1:29:c9:2d:a4:77:a5:24: ad:35:27:80:7d:95:bf:dc:e1:c2:cc:19:6a:20:43: ea:11:de:52:e4:e0:de:b7:f4:c5:3c:69:e0:18:bd: 87:3e:6e:97:a2:84:52:69:5d:73:ee:d9:be:06:40: bb:58:f6:17:89:fc:b6:14:f2:1c:ca:3b:50:9f:bc: 51:47:11:f1:a2:29:a6:ca:61:bd:75:65:dd:6c:5a: 2b:9c:09:cf:c4:68:3e:82:bf:76:97:60:5b:a6:f2: e0:48:5c:61:5f:7c:4b:52:4d:0b:13:43:0d:3c:cd: 83:b4:b4:1d:e9:d3:53:b6:3f:6e:2a:19:52:19:0b: 73:5c:04:2f:39:0e:ea:b3:e9:21:fb:8b:57:8d:7c: 26:85:94:2a:29:e6:1c:fc:11:ca:05:a5:0b:c0:87: fb:a8:22:c9:5c:11:3f:75:b7:ad:33:62:d5:27:0c: 8e:0b:46:ca:5c:32:7c:b3:4c:a5:8f:0a:89:5a:df: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C4:4A:FC:B5:78:C5:C8:16:35:EE:E3:40:06:C7:D7:2D:19:7B:5B X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:ec:ba:df:a6:bc:2a:f8:58:13:b4:21:e8:09:61:6f:34:41: 20:f2:ba:45:a9:c3:16:61:31:26:fc:a9:8c:41:fa:b9:d0:ad: 48:fb:3e:9e:e8:9b:92:44:3c:57:9f:1f:bf:63:d2:22:e6:44: b4:cc:48:6c:29:13:7b:13:71:e9:ec:b6:5f:39:25:ef:d3:bf: 72:f5:65:2b:6d:77:f2:67:19:15:d8:fa:be:14:ca:69:62:b4: 61:0a:e3:ca:52:38:1c:c5:04:d8:e6:b0:c5:9b:48:63:3b:2e: 8d:2c:45:7e:18:87:71:bc:36:f3:e7:56:47:60:06:6c:4f:3c: fa:c9:a1:17:bb:ed:a9:89:db:c6:1f:01:87:8f:67:62:ce:14: d6:fd:10:89:fa:d3:c5:c0:52:82:97:87:29:65:e5:68:8b:4b: 9b:ed:be:2e:09:e7:96:48:0a:ed:cf:46:31:c8:16:2f:10:76: 1a:89:18:d8:d5:66:16:4d:49:b5:c5:a1:e5:ee:a5:7a:d8:57: 9b:6e:3b:3b:12:e2:aa:3a:da:66:ad:96:f9:97:3a:81:52:ef: 43:14:f0:91:bb:07:9e:a6:d5:aa:9b:b3:66:e5:c9:f8:35:d3: b3:9c:b9:7f:2e:b0:e1:89:b6:b1:f7:a2:e5:e1:a3:0e:51:f6: 74:7b:ae:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwNTMxMTUyOTM4WhcNMjUwNjA3MTUyOTM4WjAYMRYwFAYD VQQDEw02ODNiMjA2Mi0zZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto8PMxtz8X1MuD/OEBkl16GnvQa/kbH/s8+EEdAcNUGJ6Zwl+jEK4XV1YUjw 6pBrM+4IhSA+gznGWMu+rH1Elo2eoSnJLaR3pSStNSeAfZW/3OHCzBlqIEPqEd5S 5ODet/TFPGngGL2HPm6XooRSaV1z7tm+BkC7WPYXify2FPIcyjtQn7xRRxHxoimm ymG9dWXdbFornAnPxGg+gr92l2BbpvLgSFxhX3xLUk0LE0MNPM2DtLQd6dNTtj9u KhlSGQtzXAQvOQ7qs+kh+4tXjXwmhZQqKeYc/BHKBaULwIf7qCLJXBE/dbetM2LV JwyOC0bKXDJ8s0yljwqJWt82cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbESvy1 eMXIFjXu40AGx9ctGXtbMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDr7Lrfprwq+FgTtCHoCWFvNEEg8rpFqcMWYTEm/KmMQfq50K1I+z6e 6JuSRDxXnx+/Y9Ii5kS0zEhsKRN7E3Hp7LZfOSXv079y9WUrbXfyZxkV2Pq+FMpp YrRhCuPKUjgcxQTY5rDFm0hjOy6NLEV+GIdxvDbz51ZHYAZsTzz6yaEXu+2pidvG HwGHj2dizhTW/RCJ+tPFwFKCl4cpZeVoi0ub7b4uCeeWSArtz0YxyBYvEHYaiRjY 1WYWTUm1xaHl7qV62Febbjs7EuKqOtpmrZb5lzqBUu9DFPCRuweeptWqm7Nm5cn4 NdOznLl/LrDhibax96Ll4aMOUfZ0e65+ -----END CERTIFICATE-----Generated at Sat May 31 17:58:40 2025 by rpki-client