$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: 3QnzcukcDD+xiakz7s1gtPFDP+yEbGAhc12b169Hsgo= Subject key identifier: A3:77:B2:B1:6F:11:22:CA:8A:D2:25:5E:DC:59:C8:05:EC:AF:E9:F6 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0C32 Signing time: Fri 30 May 2025 18:44:10 +0000 Manifest this update: Fri 30 May 2025 18:44:09 +0000 Manifest next update: Fri 06 Jun 2025 18:44:09 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: IaXVQTaq1UPO7AmxUz3QMl6+0xGpMgC00rqm1fW3EHo=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: O2LLRL8b/tm+vv16MRK3yWBKThY2uxl21s2tEaGgYZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: May 30 18:44:09 2025 GMT Not After : Jun 6 18:44:09 2025 GMT Subject: CN=6839fc79-db12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:d0:0c:f1:0b:4c:83:30:9f:db:47:c6:24: 4a:f1:57:7d:7c:24:9d:cc:48:17:49:59:cf:e1:3d: 81:9d:dd:44:08:db:82:5e:1e:95:d1:97:0a:85:b7: 81:53:12:d0:87:40:1c:4f:53:60:c5:f8:b9:13:7f: bc:9f:2e:28:9b:d8:c8:97:cc:38:78:7d:24:de:cf: dd:5d:3c:62:d4:7d:a0:b9:88:d6:fe:58:0d:08:56: 8f:ed:6e:b6:ec:87:1d:de:11:fd:24:b9:79:8b:6d: 7c:3b:fa:b9:9b:15:12:c3:8e:9c:31:9d:ed:1e:3c: dc:07:1b:39:47:6f:62:4f:0d:83:76:d8:3c:a3:2d: d0:89:e5:40:02:03:ff:a6:f0:4a:cc:6d:9d:4f:07: c6:93:88:20:e3:92:bb:67:0a:85:41:cf:54:e3:93: e5:3b:47:92:72:7b:78:2c:13:cd:d2:64:86:e1:e8: 49:f1:8b:0a:e7:e7:16:ec:01:62:8a:ed:d4:9e:c4: 2c:af:4b:1c:2b:bc:58:68:eb:21:06:a1:2e:b8:4c: 68:6f:80:4b:a4:06:41:7b:d3:13:c5:88:e9:49:aa: 97:35:64:4c:c2:94:46:da:a5:09:b5:3f:0d:fd:44: 25:b5:5c:6b:51:dc:3f:b7:4c:69:8b:49:22:b0:a5: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:77:B2:B1:6F:11:22:CA:8A:D2:25:5E:DC:59:C8:05:EC:AF:E9:F6 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:84:d7:41:39:48:ed:2f:a3:a4:f4:ac:1e:a9:fa:5e:6c: e5:11:15:2e:8b:1b:50:94:90:5c:34:d8:2d:3f:3a:18:24:4d: 16:ab:46:bd:f2:30:bf:40:1a:52:d3:74:75:c0:91:7e:dd:39: 41:e0:11:ba:2f:2a:da:e6:92:12:cc:db:87:69:d6:5f:25:14: 81:51:91:94:a4:3f:b6:03:bf:7c:bd:c6:2b:cf:e9:d5:80:60: 93:c5:34:70:01:e7:31:39:f3:ab:d1:4b:12:cf:96:d3:36:77: 4c:fc:3b:d1:ac:5e:e6:1d:d0:af:b1:ef:3e:e0:a8:f4:64:89: 7e:a0:88:80:e1:c7:9c:ba:03:26:44:8f:24:39:ee:51:0f:e9: 79:89:f9:2d:36:ca:d3:16:c3:a3:fe:ab:dd:a8:4c:b3:40:ae: 52:0c:1b:85:0f:ec:6b:00:85:f7:8e:81:b6:91:c5:1c:69:83: dd:17:0c:d6:a7:c9:6f:9d:c5:83:62:14:bf:27:8e:0f:79:8d: 4d:ba:9f:a5:c0:6b:a7:c3:d9:2f:8d:7e:c5:72:bc:c5:91:1a: c9:1b:f8:07:ca:05:88:09:54:8a:dc:e6:48:92:55:18:39:56: 38:bb:ce:d2:32:d0:1b:bc:d4:ea:18:8c:27:92:e7:ff:5a:d5: 2a:a4:f7:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUwNTMwMTg0NDA5WhcNMjUwNjA2MTg0NDA5WjAYMRYwFAYD VQQDEw02ODM5ZmM3OS1kYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iPQDPELTIMwn9tHxiRK8Vd9fCSdzEgXSVnP4T2Bnd1ECNuCXh6V0ZcKhbeB UxLQh0AcT1Ngxfi5E3+8ny4om9jIl8w4eH0k3s/dXTxi1H2guYjW/lgNCFaP7W62 7Icd3hH9JLl5i218O/q5mxUSw46cMZ3tHjzcBxs5R29iTw2Ddtg8oy3QieVAAgP/ pvBKzG2dTwfGk4gg45K7ZwqFQc9U45PlO0eScnt4LBPN0mSG4ehJ8YsK5+cW7AFi iu3UnsQsr0scK7xYaOshBqEuuExob4BLpAZBe9MTxYjpSaqXNWRMwpRG2qUJtT8N /UQltVxrUdw/t0xpi0kisKVPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN3srFv ESLKitIlXtxZyAXsr+n2MB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqcoTXQTlI7S+jpPSsHqn6XmzlERUuixtQlJBcNNgtPzoYJE0Wq0a9 8jC/QBpS03R1wJF+3TlB4BG6Lyra5pISzNuHadZfJRSBUZGUpD+2A798vcYrz+nV gGCTxTRwAecxOfOr0UsSz5bTNndM/DvRrF7mHdCvse8+4Kj0ZIl+oIiA4cecugMm RI8kOe5RD+l5ifktNsrTFsOj/qvdqEyzQK5SDBuFD+xrAIX3joG2kcUcaYPdFwzW p8lvncWDYhS/J44PeY1Nup+lwGunw9kvjX7FcrzFkRrJG/gHygWICVSK3OZIklUY OVY4u87SMtAbvNTqGIwnkuf/WtUqpPfn -----END CERTIFICATE-----Generated at Sat May 31 16:50:36 2025 by rpki-client