$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: 6u8CsS/KvEj2Ar3UdCVen+MTJGXVDFq8J3LvZAeDEXo= Subject key identifier: 62:25:47:F2:4C:7E:2A:A1:CA:A1:07:CE:7C:3C:8D:22:D4:FB:D0:64 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C37 Signing time: Fri 30 May 2025 18:42:28 +0000 Manifest this update: Fri 30 May 2025 18:42:27 +0000 Manifest next update: Fri 06 Jun 2025 18:42:27 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: zHaby5HTqCOupfS5gdZrX9nLtfJqxkVC7VxCZx2J3kw=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: x9X6wGJ3mbVyR78mjvIljIMszM7hIhEyNVBMIZ+VGz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: May 30 18:42:27 2025 GMT Not After : Jun 6 18:42:27 2025 GMT Subject: CN=6839fc13-0a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:0f:1a:55:dc:f9:e3:71:d3:ad:06:8e:f4: 35:f0:a1:e3:c2:e4:79:11:e7:6b:87:83:4d:d8:b0: 99:ad:31:b1:db:90:89:fb:e5:be:fc:f7:3d:f1:7b: 36:dc:64:13:29:9a:d9:19:17:89:c8:2a:8f:b1:af: 60:62:49:de:f8:13:51:b9:93:9f:6f:02:df:73:e3: 71:29:28:75:98:0e:17:11:90:ec:5b:ca:14:35:1c: 66:f5:d6:a7:80:ea:75:5c:e3:59:89:13:13:b6:31: 0f:4e:7c:b5:c4:42:92:6f:89:e3:92:45:72:d9:2a: 0e:fe:44:c0:2b:23:5f:30:19:f6:2d:6d:24:36:74: 12:78:07:5b:69:ca:36:ae:ce:0b:a6:48:70:16:3c: b7:90:d2:44:ca:96:51:7d:f3:a6:42:19:ee:b3:72: 19:c4:eb:db:37:5c:10:7c:03:42:bd:0a:86:6b:f2: a4:2d:48:41:3c:07:c4:bc:b7:45:87:87:e9:3d:21: 75:42:24:ac:d3:3d:6f:d4:a0:25:84:21:e2:3e:46: 8b:05:cb:81:96:45:32:27:f7:e1:e7:ff:3c:74:ef: 85:45:77:08:90:dc:55:5b:55:ac:cc:46:64:94:2c: 02:91:a3:f5:68:ab:15:45:ad:ef:fa:e0:36:d4:79: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:25:47:F2:4C:7E:2A:A1:CA:A1:07:CE:7C:3C:8D:22:D4:FB:D0:64 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e9:b5:7f:9d:66:e1:9f:44:95:f9:71:12:23:36:08:49:cc: 4d:f6:fa:56:eb:d5:fe:dd:85:42:9a:4e:c4:ec:88:97:00:e8: 7b:6a:ba:1e:b8:28:85:7d:98:5f:8f:42:02:56:58:ca:c2:65: 48:37:e6:2f:cd:ba:c5:bb:51:5b:a1:0e:e5:f9:e2:9a:0e:7f: d3:83:88:f8:0f:e9:01:e8:16:19:e7:f2:36:5b:c7:a4:a4:45: 81:82:34:15:47:7b:5b:65:0e:70:45:a7:e0:90:9b:64:96:71: ef:67:3b:79:3d:5a:ba:60:ec:c6:c3:4b:5a:b8:e8:a0:4f:8c: 6c:30:7c:bb:c5:05:31:8f:1a:3c:62:6d:ff:dd:c4:60:54:05: a1:df:e3:69:f4:39:5d:2a:c6:f8:36:94:b8:f0:9f:69:02:10: 9f:5f:45:bf:d6:2b:be:83:14:d8:52:39:49:c4:09:82:5b:f3: ea:9a:04:04:55:b2:51:1a:97:7f:35:16:66:a7:04:c8:17:14: 96:72:53:57:7f:24:a2:2a:92:9d:81:4f:47:cc:eb:65:3a:a8: be:c4:a9:d1:f2:1c:f4:41:15:3c:c9:43:f4:31:3b:22:a2:30: 73:3e:cd:63:bf:f3:91:e7:72:a9:e7:05:cb:59:5a:c6:49:3f: 91:5b:52:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUwNTMwMTg0MjI3WhcNMjUwNjA2MTg0MjI3WjAYMRYwFAYD VQQDEw02ODM5ZmMxMy0wYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQcPGlXc+eNx060GjvQ18KHjwuR5Eedrh4NN2LCZrTGx25CJ++W+/Pc98Xs2 3GQTKZrZGReJyCqPsa9gYkne+BNRuZOfbwLfc+NxKSh1mA4XEZDsW8oUNRxm9dan gOp1XONZiRMTtjEPTny1xEKSb4njkkVy2SoO/kTAKyNfMBn2LW0kNnQSeAdbaco2 rs4LpkhwFjy3kNJEypZRffOmQhnus3IZxOvbN1wQfANCvQqGa/KkLUhBPAfEvLdF h4fpPSF1QiSs0z1v1KAlhCHiPkaLBcuBlkUyJ/fh5/88dO+FRXcIkNxVW1WszEZk lCwCkaP1aKsVRa3v+uA21HnEQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIlR/JM fiqhyqEHznw8jSLU+9BkMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr6bV/nWbhn0SV+XESIzYIScxN9vpW69X+3YVCmk7E7IiXAOh7aroe uCiFfZhfj0ICVljKwmVIN+YvzbrFu1FboQ7l+eKaDn/Tg4j4D+kB6BYZ5/I2W8ek pEWBgjQVR3tbZQ5wRafgkJtklnHvZzt5PVq6YOzGw0tauOigT4xsMHy7xQUxjxo8 Ym3/3cRgVAWh3+Np9DldKsb4NpS48J9pAhCfX0W/1iu+gxTYUjlJxAmCW/PqmgQE VbJRGpd/NRZmpwTIFxSWclNXfySiKpKdgU9HzOtlOqi+xKnR8hz0QRU8yUP0MTsi ojBzPs1jv/OR53Kp5wXLWVrGST+RW1Ie -----END CERTIFICATE-----Generated at Sat May 31 14:39:50 2025 by rpki-client