$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: fqLn/1/Li8LLPp2i4pKzPy4yr9tMDANHpcUBSzTLmb8= Subject key identifier: 30:96:89:29:51:9C:5A:0B:B6:22:BA:6C:12:3D:C8:98:E1:E5:D1:09 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 01C7 Signing time: Mon 09 Jun 2025 02:05:32 +0000 Manifest this update: Mon 09 Jun 2025 02:05:32 +0000 Manifest next update: Mon 16 Jun 2025 02:05:32 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: oV34xHdBDwxE3n+xkSKI6UZaraA1t3nhi7iSF16jNyA=) 2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: 4hy1f5KhPhwHVnBrwdKHHsp/qGx5VbOvDT16foHwuRM=) 3: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: l3pw7Z4d1Nkw0APH0xp6K2791IsFOtCcx1C4farScNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 02:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Jun 9 02:05:32 2025 GMT Not After : Jun 16 02:05:32 2025 GMT Subject: CN=6846416c-74b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:f4:d3:62:32:0b:37:2d:04:0d:3b:bc:3e: 20:9f:43:d0:0c:60:de:8a:7b:5b:12:89:4c:4e:4d: d1:f2:e3:f8:bd:9b:23:ad:21:ea:54:cd:3d:d0:46: 7f:9f:76:9d:71:d3:d8:2c:df:f0:49:64:a4:98:59: 10:e5:3d:10:30:e4:70:c6:8d:d7:57:25:63:e6:58: 1d:df:5f:5f:72:0e:77:b3:09:2b:76:b0:13:68:7b: c3:42:2a:3d:c7:03:54:8b:1a:4e:57:8c:10:2b:00: ca:cb:3d:8f:ae:5e:d9:e2:04:44:ed:2c:50:53:78: 40:07:5a:86:fd:b1:d0:90:5a:e7:70:dd:84:3c:a6: cd:5f:b0:43:10:14:66:a5:d3:52:5c:be:43:2b:9f: f8:4e:04:e8:76:36:1e:31:22:f7:42:c0:7b:76:18: 52:14:36:e9:ad:59:51:59:db:fc:ad:74:9d:da:f7: 0d:a0:74:61:e0:bd:c4:5a:6d:27:1d:ba:ba:b4:98: 46:5a:25:bd:3a:8b:88:3f:15:7c:d1:01:8f:7e:ce: b6:96:bb:2d:e3:64:35:44:61:4b:03:38:d0:d1:c8: 9f:14:e0:05:38:6a:33:1e:7c:2b:8b:fb:52:f6:cb: e5:57:4f:41:69:f9:1f:66:3d:8f:be:27:89:c8:28: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:96:89:29:51:9C:5A:0B:B6:22:BA:6C:12:3D:C8:98:E1:E5:D1:09 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2a:e1:e7:77:8e:6b:b9:9a:70:9a:e5:cd:b8:84:8b:bb:0d: 88:d4:e7:84:18:a7:b4:af:4a:00:bc:c6:3b:03:ff:a2:47:d6: 8f:f3:61:68:35:13:a4:db:77:92:a6:aa:45:6c:da:b0:40:53: d7:1b:c2:54:8c:6b:ff:51:8f:86:cb:3f:15:d7:8e:c3:ff:24: 08:c4:51:3a:22:23:25:c2:62:2d:a6:45:0a:75:4c:7c:d0:2a: b0:bf:be:09:a4:6e:ef:4e:65:b5:c0:78:d8:8a:d7:f5:6e:71: 9a:3d:19:96:c5:16:f4:63:08:18:b5:fb:c7:ea:ae:a5:bb:a9: bc:48:2e:08:77:12:ba:61:f1:06:9c:80:20:fa:8b:37:d9:1f: a6:cb:ac:88:05:35:df:21:56:c5:48:14:23:ee:a7:ac:a3:79: b9:58:9f:f0:d2:f2:60:79:7f:d9:21:b0:c9:29:17:6e:57:05: cf:e2:a0:38:2a:fa:64:4a:2c:bf:7c:31:73:e7:a0:57:d2:73: 10:46:a5:03:79:c0:e4:5e:9c:2f:36:a5:9d:7b:22:68:35:cd: a4:d1:66:4b:82:4d:bb:6e:6a:78:60:6d:80:8e:c6:b5:f7:16: de:82:fa:51:96:be:cc:66:4f:46:ec:99:63:e3:3a:85:2c:7e: e0:04:dc:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUwNjA5MDIwNTMyWhcNMjUwNjE2MDIwNTMyWjAYMRYwFAYD VQQDEw02ODQ2NDE2Yy03NGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3br002IyCzctBA07vD4gn0PQDGDeintbEolMTk3R8uP4vZsjrSHqVM090EZ/ n3adcdPYLN/wSWSkmFkQ5T0QMORwxo3XVyVj5lgd319fcg53swkrdrATaHvDQio9 xwNUixpOV4wQKwDKyz2Prl7Z4gRE7SxQU3hAB1qG/bHQkFrncN2EPKbNX7BDEBRm pdNSXL5DK5/4TgTodjYeMSL3QsB7dhhSFDbprVlRWdv8rXSd2vcNoHRh4L3EWm0n Hbq6tJhGWiW9OouIPxV80QGPfs62lrst42Q1RGFLAzjQ0cifFOAFOGozHnwri/tS 9svlV09BafkfZj2PvieJyCh0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCWiSlR nFoLtiK6bBI9yJjh5dEJMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiKuHnd45ruZpwmuXNuISLuw2I1OeEGKe0r0oAvMY7A/+iR9aP82Fo NROk23eSpqpFbNqwQFPXG8JUjGv/UY+Gyz8V147D/yQIxFE6IiMlwmItpkUKdUx8 0Cqwv74JpG7vTmW1wHjYitf1bnGaPRmWxRb0YwgYtfvH6q6lu6m8SC4IdxK6YfEG nIAg+os32R+my6yIBTXfIVbFSBQj7qeso3m5WJ/w0vJgeX/ZIbDJKRduVwXP4qA4 KvpkSiy/fDFz56BX0nMQRqUDecDkXpwvNqWdeyJoNc2k0WZLgk27bmp4YG2Ajsa1 9xbegvpRlr7MZk9G7Jlj4zqFLH7gBNxF -----END CERTIFICATE-----Generated at Tue Jun 10 04:42:57 2025 by rpki-client