$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: 4/7W6ddTd0UlQ9N8PcHcXbnqQFvyM398dkvft7v1bF4= Subject key identifier: 90:04:5A:D6:28:3E:99:A4:B2:C6:DD:22:41:01:2E:D2:18:AD:01:5F Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 0430 Signing time: Sat 31 May 2025 00:33:58 +0000 Manifest this update: Sat 31 May 2025 00:33:57 +0000 Manifest next update: Sat 07 Jun 2025 00:33:57 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: loDlnt6OhBDkI/EhTSdx4CWDbtrfAc8NQ41Ggu8/TgM=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: May 31 00:33:57 2025 GMT Not After : Jun 7 00:33:57 2025 GMT Subject: CN=683a4e75-9abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:97:28:fa:cc:6a:6c:26:09:f3:4d:b5:3d: ec:27:c9:25:45:ad:e3:a4:f0:58:c3:3d:19:eb:14: 8a:48:b3:50:fd:6f:07:fe:d8:dd:92:90:72:0d:82: 44:3d:d9:54:58:f6:a2:96:cf:45:41:ed:1a:15:43: 88:07:69:6d:21:9c:b2:58:32:02:c3:be:aa:cd:53: c4:83:00:2f:18:fa:f3:8e:56:3b:90:6f:44:c1:a2: cd:f9:e1:78:ff:36:30:a8:51:5f:fe:9f:4c:ea:6f: bd:57:da:f7:d0:7c:3f:b9:ac:3b:8f:e3:2e:f6:26: 08:af:a1:0b:d2:5e:e3:6e:19:f9:96:35:52:4b:16: 5f:68:70:0e:cd:98:bf:ce:0c:d3:d8:1d:a7:81:06: 9b:53:db:d4:f9:6f:a8:82:41:ee:20:0c:cf:72:ed: 00:24:54:5b:cc:8e:a6:35:47:8d:87:94:d3:fb:a5: 90:d2:52:62:d8:1e:fa:a7:0a:ac:d0:ca:ba:c7:b6: 03:73:a3:66:02:54:82:4c:64:14:56:58:e4:83:41: 7b:1f:71:43:a2:d7:fa:b3:1c:68:a4:65:ec:70:2e: 44:83:b9:0f:ca:a6:e1:68:17:68:8b:6e:90:3d:cd: 68:91:a7:b9:52:ae:07:aa:fe:8b:fa:54:da:f5:11: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:04:5A:D6:28:3E:99:A4:B2:C6:DD:22:41:01:2E:D2:18:AD:01:5F X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:12:9a:2e:9e:e2:ec:ac:6f:77:d7:0b:e3:21:04:df:6a:7f: 8d:5d:ae:66:c1:11:62:da:58:ab:49:6a:fe:b8:b5:22:88:bb: e5:d3:cc:45:e6:3a:5f:fe:82:8a:ee:20:3e:a3:e0:c6:8b:a8: 4a:c3:fe:d5:de:6a:f1:42:1f:ca:fd:f2:04:07:3b:e4:aa:fe: 9c:53:5b:82:32:53:a9:4e:96:f7:29:34:58:e1:14:af:50:55: 89:2c:f4:d9:0a:4c:ad:16:16:3b:36:f8:17:e8:f7:45:e7:de: 2c:6a:ae:fb:a6:e1:a4:dd:34:b7:90:9e:bc:08:ad:84:89:87: 18:72:de:4a:ae:49:e2:29:09:d2:52:66:34:ae:da:bf:0d:20: af:43:75:1d:24:31:c1:3e:22:a9:3f:94:ac:dd:84:8b:4b:82: a1:2a:82:d7:11:ef:20:f5:86:7e:d0:0d:cb:c1:e0:3b:39:0d: 1b:af:96:63:08:d7:8c:05:97:be:e5:23:cf:f4:75:0b:82:7f: b0:0e:95:dd:1d:13:ff:a9:9d:e5:15:d5:6e:56:44:d5:03:9b: 22:ab:a2:33:8c:0c:5c:6e:96:a5:92:f5:8b:c5:5c:01:39:2e: a1:cf:1e:bf:8f:5d:f1:be:02:65:9e:9e:dc:4d:76:e1:86:06: 75:c4:4b:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjUwNTMxMDAzMzU3WhcNMjUwNjA3MDAzMzU3WjAYMRYwFAYD VQQDEw02ODNhNGU3NS05YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmKXKPrMamwmCfNNtT3sJ8klRa3jpPBYwz0Z6xSKSLNQ/W8H/tjdkpByDYJE PdlUWPails9FQe0aFUOIB2ltIZyyWDICw76qzVPEgwAvGPrzjlY7kG9EwaLN+eF4 /zYwqFFf/p9M6m+9V9r30Hw/uaw7j+Mu9iYIr6EL0l7jbhn5ljVSSxZfaHAOzZi/ zgzT2B2ngQabU9vU+W+ogkHuIAzPcu0AJFRbzI6mNUeNh5TT+6WQ0lJi2B76pwqs 0Mq6x7YDc6NmAlSCTGQUVljkg0F7H3FDotf6sxxopGXscC5Eg7kPyqbhaBdoi26Q Pc1okae5Uq4Hqv6L+lTa9REgVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAEWtYo PpmkssbdIkEBLtIYrQFfMB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoEpounuLsrG931wvjIQTfan+NXa5mwRFi2lirSWr+uLUiiLvl08xF 5jpf/oKK7iA+o+DGi6hKw/7V3mrxQh/K/fIEBzvkqv6cU1uCMlOpTpb3KTRY4RSv UFWJLPTZCkytFhY7NvgX6PdF594saq77puGk3TS3kJ68CK2EiYcYct5KrkniKQnS UmY0rtq/DSCvQ3UdJDHBPiKpP5Ss3YSLS4KhKoLXEe8g9YZ+0A3LweA7OQ0br5Zj CNeMBZe+5SPP9HULgn+wDpXdHRP/qZ3lFdVuVkTVA5siq6IzjAxcbpalkvWLxVwB OS6hzx6/j13xvgJlnp7cTXbhhgZ1xEuR -----END CERTIFICATE-----Generated at Sat May 31 17:57:41 2025 by rpki-client