$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: ATAq/YqACY4Nkvvjmmdee3X+k4SJLJ4kW/VZ71ip2fk= Subject key identifier: AE:73:D0:ED:4E:22:CA:3A:D1:76:A7:42:E8:C1:90:38:26:ED:99:5A Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 046D Signing time: Sat 31 May 2025 00:19:31 +0000 Manifest this update: Sat 31 May 2025 00:19:31 +0000 Manifest next update: Sat 07 Jun 2025 00:19:31 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: VQ0fGMYhHuGzgPaKNz02a+nltsZUvkM8gX1WCpaFXSw=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: May 31 00:19:31 2025 GMT Not After : Jun 7 00:19:31 2025 GMT Subject: CN=683a4b13-70d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:de:48:16:9b:25:16:1b:84:6c:2c:23:c3:e6: ac:e1:9d:1a:f8:de:60:e8:7a:43:d2:2c:8a:9a:a8: 9b:da:06:27:78:36:60:9e:8e:f8:e1:91:ec:61:f5: ef:26:bb:6b:f4:21:ea:cf:a7:92:0b:05:2c:9b:b3: b9:dc:90:ff:81:3a:7a:79:8d:cb:6e:d2:ce:b3:3d: 27:11:0d:cb:f4:ee:8b:6e:43:5a:99:ea:33:5d:2e: 46:5e:e4:81:15:7c:7a:7f:a0:73:a0:fd:b3:5c:75: 4e:67:50:ae:48:7a:21:d2:b5:81:c5:4d:b1:16:54: 09:11:15:90:68:80:89:79:7f:4e:ff:84:f3:1d:ab: 0f:56:29:77:09:7f:1d:93:35:62:df:cc:a8:16:e5: 4a:6f:96:90:a7:73:75:76:fb:79:ec:42:20:60:85: 2c:11:50:40:b0:5a:53:0b:9c:e9:99:22:87:d0:15: b5:19:e5:88:bb:09:93:8d:13:c8:c5:1b:fc:e3:bf: 4b:73:0d:67:8b:d2:05:00:11:e0:f7:cf:41:13:98: ba:e2:68:0b:37:2a:26:51:35:3f:47:cf:63:8a:27: 7a:74:5b:20:3e:63:6b:1d:57:41:20:6f:11:1d:a2: b0:b2:af:fa:30:b1:ac:eb:ba:29:66:b7:2b:34:48: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:73:D0:ED:4E:22:CA:3A:D1:76:A7:42:E8:C1:90:38:26:ED:99:5A X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:eb:62:c5:8e:4f:ef:ad:dd:1e:37:fa:9b:12:c6:88:9f:06: 4d:0f:9f:74:ce:84:2e:b7:e8:9e:b4:79:a3:3e:b7:4f:74:d4: 7a:09:82:88:51:49:9c:ff:63:00:23:2e:21:6f:5f:eb:8f:0b: 25:54:fc:a4:8b:99:ac:15:a7:c6:ac:f9:4d:b7:78:e9:5b:6c: 3d:2d:aa:cf:f6:a3:dd:64:c7:82:0b:2f:e6:5b:1b:cc:f9:87: 04:23:f5:14:17:51:0f:89:bd:0f:42:3c:96:f0:dc:59:98:de: 43:e2:b3:74:fc:f0:95:d6:8e:c6:16:07:8f:06:9d:5e:84:e6: 48:c3:01:26:36:a8:5a:d1:c5:36:09:5e:7d:72:d5:64:39:f5: 77:44:b8:0f:3b:2d:92:e1:bf:3e:e3:db:90:8e:25:62:cb:2a: 37:39:6b:e0:45:9c:59:3f:83:38:4c:5f:71:36:5b:58:b3:08: ff:36:2b:5a:ee:47:5e:14:0e:28:ee:4f:66:c0:34:c0:e9:88: 1f:eb:53:11:62:e0:cb:30:f6:7c:cf:31:1b:78:84:90:94:4b: 55:0e:ab:ef:bd:b0:0f:4d:9c:cb:1c:ed:07:20:a2:87:0a:55: d0:7a:07:bd:71:d9:48:0f:59:1e:0a:2b:31:02:9f:0b:60:99: 94:76:a2:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwNTMxMDAxOTMxWhcNMjUwNjA3MDAxOTMxWjAYMRYwFAYD VQQDEw02ODNhNGIxMy03MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7d5IFpslFhuEbCwjw+as4Z0a+N5g6HpD0iyKmqib2gYneDZgno744ZHsYfXv Jrtr9CHqz6eSCwUsm7O53JD/gTp6eY3LbtLOsz0nEQ3L9O6LbkNameozXS5GXuSB FXx6f6BzoP2zXHVOZ1CuSHoh0rWBxU2xFlQJERWQaICJeX9O/4TzHasPVil3CX8d kzVi38yoFuVKb5aQp3N1dvt57EIgYIUsEVBAsFpTC5zpmSKH0BW1GeWIuwmTjRPI xRv8479Lcw1ni9IFABHg989BE5i64mgLNyomUTU/R89jiid6dFsgPmNrHVdBIG8R HaKwsq/6MLGs67opZrcrNEjWWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5z0O1O Iso60XanQujBkDgm7ZlaMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv62LFjk/vrd0eN/qbEsaInwZND590zoQut+ietHmjPrdPdNR6CYKI UUmc/2MAIy4hb1/rjwslVPyki5msFafGrPlNt3jpW2w9LarP9qPdZMeCCy/mWxvM +YcEI/UUF1EPib0PQjyW8NxZmN5D4rN0/PCV1o7GFgePBp1ehOZIwwEmNqha0cU2 CV59ctVkOfV3RLgPOy2S4b8+49uQjiViyyo3OWvgRZxZP4M4TF9xNltYswj/Nita 7kdeFA4o7k9mwDTA6Ygf61MRYuDLMPZ8zzEbeISQlEtVDqvvvbAPTZzLHO0HIKKH ClXQege9cdlID1keCisxAp8LYJmUdqJO -----END CERTIFICATE-----Generated at Sat May 31 17:44:12 2025 by rpki-client