$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: Z+5LtLK9YxgA9Ukmi50IlymLsfpqFKU/BsWSQypMicE= Subject key identifier: 4A:28:94:02:B2:B6:D6:5F:F6:3B:39:30:35:50:D5:E8:4C:29:D7:50 Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 010B Signing time: Sat 31 May 2025 04:37:32 +0000 Manifest this update: Sat 31 May 2025 04:37:32 +0000 Manifest next update: Sat 07 Jun 2025 04:37:32 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: MiJjJ0bT4K3uFRgdgLjFksRM1bv9e4ZqdPHz3ARJ8tg=) 2: 725ED2DC3C3E11EF8E9ED658C4F9AE02.roa (hash: b8Nk35gI73n6vPSPeGhcdp8/EnX7d3C+aJhz3JSGsbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: May 31 04:37:32 2025 GMT Not After : Jun 7 04:37:32 2025 GMT Subject: CN=683a878c-6a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:bd:9e:60:4a:a6:46:64:d5:93:67:a9:4f: 8b:be:9f:e3:ee:92:55:1c:9d:b4:c6:d6:21:37:8c: ed:59:e1:61:e9:c7:1e:b3:ff:0d:87:d0:9b:76:68: 0d:42:06:c4:b3:2d:90:93:36:af:ea:36:6c:69:3f: 5f:94:18:09:b4:85:8b:f0:c9:56:58:9e:5d:6e:69: 76:1c:3a:73:cf:0b:49:21:bd:7b:59:6f:fb:c6:48: a4:8c:ee:b9:f0:ee:d9:aa:94:11:70:85:73:bb:80: ef:69:85:5f:e7:87:e7:6d:6d:cc:8d:c6:e1:41:83: dd:8c:24:3f:b2:f7:28:b7:02:6e:f7:6b:3b:fc:21: 92:d8:49:a5:2e:6b:c9:5e:0b:c0:bf:c6:d9:fa:f1: 2f:d2:f6:29:09:f4:ef:b8:b6:11:1b:2a:81:2a:96: 7f:f5:88:cd:75:6a:7a:ee:12:45:bf:92:99:6f:5b: ac:b9:26:b7:60:6b:a2:4a:38:ec:25:05:52:62:3f: 9f:3e:68:78:e4:a4:27:8c:ae:dc:92:13:07:54:80: c9:bf:18:27:7b:7d:e5:ab:51:34:b7:fd:fb:21:bc: 0b:1e:8c:65:2a:d7:4b:dd:ad:f2:07:90:37:78:b5: f7:09:04:0d:ec:c9:e7:f8:21:b5:ca:2b:32:0c:6d: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:94:02:B2:B6:D6:5F:F6:3B:39:30:35:50:D5:E8:4C:29:D7:50 X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:99:58:a2:e8:a6:af:5c:d9:45:b1:6e:b0:4b:b8:94:3b:aa: 8b:d2:47:b9:e0:80:77:b1:88:38:c7:ad:01:95:07:14:ca:76: ba:92:4e:9c:90:cd:d9:6d:17:3b:f4:d7:88:50:47:44:ab:ff: 8c:0b:ba:f1:3f:09:97:5d:32:d8:90:bd:36:d0:2c:b5:90:70: 8e:3c:81:82:23:12:5c:ea:c9:d8:8c:74:09:9d:5c:f6:75:4a: 19:08:a8:f9:eb:54:2c:64:c9:e1:13:af:a0:5c:b7:9c:a0:0a: 55:93:9f:8b:18:c8:85:02:5f:95:b3:72:3e:15:43:53:5d:54: 2b:a8:c5:d1:73:d0:7d:3f:d5:40:65:d6:6f:38:90:72:1a:6b: 78:fd:89:78:ba:f0:fd:43:08:68:d0:07:1d:41:26:71:cc:d5: 6b:bb:d5:3f:a7:f6:89:25:9f:1b:07:d7:d1:01:27:1e:50:7a: c8:bd:6e:5e:2c:f3:89:69:d9:ee:5c:0b:cf:38:f3:12:67:69: 09:da:57:9a:81:c4:63:36:f4:33:c5:95:bd:e9:28:80:e2:ee: 83:43:1b:2b:54:61:9d:30:bd:71:ac:2b:f5:a3:7d:af:49:f4: dc:78:e2:7c:0b:ca:ba:bd:0b:9c:92:3d:a7:da:26:66:ef:0c: d6:5f:e6:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjUwNTMxMDQzNzMyWhcNMjUwNjA3MDQzNzMyWjAYMRYwFAYD VQQDEw02ODNhODc4Yy02YTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9e9nmBKpkZk1ZNnqU+Lvp/j7pJVHJ20xtYhN4ztWeFh6cces/8Nh9CbdmgN QgbEsy2Qkzav6jZsaT9flBgJtIWL8MlWWJ5dbml2HDpzzwtJIb17WW/7xkikjO65 8O7ZqpQRcIVzu4DvaYVf54fnbW3MjcbhQYPdjCQ/svcotwJu92s7/CGS2EmlLmvJ XgvAv8bZ+vEv0vYpCfTvuLYRGyqBKpZ/9YjNdWp67hJFv5KZb1usuSa3YGuiSjjs JQVSYj+fPmh45KQnjK7ckhMHVIDJvxgne33lq1E0t/37IbwLHoxlKtdL3a3yB5A3 eLX3CQQN7Mnn+CG1yisyDG0wawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoolAKy ttZf9js5MDVQ1ehMKddQMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2mVii6KavXNlFsW6wS7iUO6qL0ke54IB3sYg4x60BlQcUyna6kk6c kM3ZbRc79NeIUEdEq/+MC7rxPwmXXTLYkL020Cy1kHCOPIGCIxJc6snYjHQJnVz2 dUoZCKj561QsZMnhE6+gXLecoApVk5+LGMiFAl+Vs3I+FUNTXVQrqMXRc9B9P9VA ZdZvOJByGmt4/Yl4uvD9Qwho0AcdQSZxzNVru9U/p/aJJZ8bB9fRASceUHrIvW5e LPOJadnuXAvPOPMSZ2kJ2leagcRjNvQzxZW96SiA4u6DQxsrVGGdML1xrCv1o32v SfTceOJ8C8q6vQuckj2n2iZm7wzWX+bK -----END CERTIFICATE-----Generated at Sat May 31 16:57:48 2025 by rpki-client