$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: THfRsk2NRimKq+tOnLMlHRCSEUOUWYXPBWpROj35oOw= Subject key identifier: C2:DA:4F:3F:8D:67:43:9D:8E:B6:F2:4C:D2:F6:CE:66:7A:2B:C8:13 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E25 Signing time: Fri 30 May 2025 17:58:11 +0000 Manifest this update: Fri 30 May 2025 17:58:10 +0000 Manifest next update: Fri 06 Jun 2025 17:58:10 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: e59fCS7qgly2CbWOXUngi4CpRTFUHKssDf7plkM5pmw=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: Wqabe9w2Uqip6TelVZ+NxYToXtXUdZ2r3Jhmi1abvwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: May 30 17:58:10 2025 GMT Not After : Jun 6 17:58:10 2025 GMT Subject: CN=6839f1b3-9219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:62:32:fc:4a:d0:e5:42:b3:90:72:0f:8d:e8: 8a:24:37:00:80:c0:3c:de:3b:15:9f:11:7a:97:ff: e1:3e:bf:9a:55:18:a1:d5:2c:d6:0c:50:90:aa:a9: 32:32:74:bb:ca:0c:27:fa:64:df:22:85:37:1a:63: 14:3c:c7:be:64:99:5c:52:85:f3:11:d3:30:f9:62: b7:7a:1a:54:94:34:2c:c8:96:9a:2d:0f:54:ca:76: 8c:3c:a8:1b:c3:8a:ea:09:ab:5d:f4:d9:c3:91:81: 94:3f:b8:f5:1d:ab:44:17:46:b6:42:b2:ae:57:0f: fa:38:08:d7:43:79:a6:94:2b:35:63:0f:4f:92:ae: 9b:f2:88:01:51:8b:2d:9f:9e:ef:1d:70:e2:9c:ce: ec:c7:26:7a:87:98:c4:21:61:61:e7:36:81:46:85: 7b:b0:d5:c0:b4:87:4e:34:d9:93:c9:d6:9a:c1:7a: 07:b8:64:6b:e0:4f:bd:37:e0:e5:e2:54:27:79:04: ad:bc:30:75:bf:25:6e:cc:c4:36:21:98:29:4b:78: 40:26:00:30:de:b6:86:d7:61:07:7e:6c:07:cc:57: 6c:31:e2:48:db:c6:df:f1:38:db:05:30:d6:93:26: 87:3d:d7:eb:16:18:36:ec:b3:99:be:9a:58:27:b9: 02:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DA:4F:3F:8D:67:43:9D:8E:B6:F2:4C:D2:F6:CE:66:7A:2B:C8:13 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:66:6f:8b:89:dc:30:98:13:df:6d:2f:fb:3d:03:d6:85:ba: 08:0e:b7:e6:a2:f7:95:47:65:6e:6e:c3:85:63:69:3a:ad:a6: 93:f4:47:c5:64:1c:44:2f:e0:05:d5:db:37:66:01:36:e4:54: 66:54:93:62:29:8b:20:b3:c2:ea:b7:d8:ee:ec:62:1b:44:8d: b6:9c:b4:e6:ba:99:2a:81:d0:11:cf:41:05:2c:38:6d:9d:fb: a1:6e:1d:f5:a3:92:bd:82:cc:b1:ca:53:1a:98:6b:c9:63:d3: 5b:e8:9e:1b:73:d3:2a:17:7e:12:bd:86:5e:50:66:a5:10:79: 52:b0:45:23:02:2b:bf:0b:5d:b3:68:b9:c0:0f:bf:36:5f:32: 4c:31:ea:c9:9a:bc:0b:e4:0b:7f:0d:ac:7d:05:42:3f:88:9d: b1:04:11:ee:78:4a:38:04:2d:30:5b:28:f3:03:64:3f:a2:b3: 61:0e:fb:c5:c5:19:dd:f2:23:66:90:c3:b6:be:6a:43:8f:4c: 57:ca:23:e2:30:1f:bc:e4:ab:7c:26:54:77:92:17:c0:16:43: 31:57:6b:91:b3:fc:d3:24:1b:32:57:5e:e0:b4:04:38:f6:b2: 12:19:7b:7d:d8:f7:fe:5e:19:1a:e9:7d:de:c7:64:6b:f1:aa: 65:66:3a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUwNTMwMTc1ODEwWhcNMjUwNjA2MTc1ODEwWjAYMRYwFAYD VQQDEw02ODM5ZjFiMy05MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WIy/ErQ5UKzkHIPjeiKJDcAgMA83jsVnxF6l//hPr+aVRih1SzWDFCQqqky MnS7ygwn+mTfIoU3GmMUPMe+ZJlcUoXzEdMw+WK3ehpUlDQsyJaaLQ9UynaMPKgb w4rqCatd9NnDkYGUP7j1HatEF0a2QrKuVw/6OAjXQ3mmlCs1Yw9Pkq6b8ogBUYst n57vHXDinM7sxyZ6h5jEIWFh5zaBRoV7sNXAtIdONNmTydaawXoHuGRr4E+9N+Dl 4lQneQStvDB1vyVuzMQ2IZgpS3hAJgAw3raG12EHfmwHzFdsMeJI28bf8TjbBTDW kyaHPdfrFhg27LOZvppYJ7kC5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLaTz+N Z0OdjrbyTNL2zmZ6K8gTMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbZm+LidwwmBPfbS/7PQPWhboIDrfmoveVR2VubsOFY2k6raaT9EfF ZBxEL+AF1ds3ZgE25FRmVJNiKYsgs8Lqt9ju7GIbRI22nLTmupkqgdARz0EFLDht nfuhbh31o5K9gsyxylMamGvJY9Nb6J4bc9MqF34SvYZeUGalEHlSsEUjAiu/C12z aLnAD782XzJMMerJmrwL5At/Dax9BUI/iJ2xBBHueEo4BC0wWyjzA2Q/orNhDvvF xRnd8iNmkMO2vmpDj0xXyiPiMB+85Kt8JlR3khfAFkMxV2uRs/zTJBsyV17gtAQ4 9rISGXt92Pf+Xhka6X3ex2Rr8aplZjrI -----END CERTIFICATE-----Generated at Sat May 31 17:08:54 2025 by rpki-client