$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: VwDc/2B/2onQ1CUQWviTD88auMVkdPXbjMRfHeZcRNI= Subject key identifier: F7:82:F2:1C:C0:7C:39:AB:9C:18:BB:10:0D:42:9B:AD:36:AD:AF:59 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06BD Signing time: Fri 30 May 2025 22:44:31 +0000 Manifest this update: Fri 30 May 2025 22:44:31 +0000 Manifest next update: Fri 06 Jun 2025 22:44:31 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: Au/Nn2DP9TQsRiYQoyz0j5b5qLrw+FBJNBEskAYuV+0=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: May 30 22:44:31 2025 GMT Not After : Jun 6 22:44:31 2025 GMT Subject: CN=683a34cf-05a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:62:88:d3:44:09:d1:dc:b5:47:8b:f3:62:2e: e7:16:70:a9:d4:55:ff:05:71:e7:34:c9:21:18:ac: d3:74:a9:9b:1e:47:cc:6c:c4:fc:ac:70:db:d9:8b: c0:1d:81:98:3a:74:40:34:10:c1:8a:9c:79:3a:b2: 0c:db:c0:5e:30:f4:b2:91:c2:ab:de:b9:9a:9a:d9: 4f:be:66:33:0e:49:14:ad:1a:20:77:0d:80:c8:91: e7:0c:0e:59:74:7b:48:06:90:ae:8e:e5:00:aa:a5: 29:70:ab:10:b0:f1:1c:5c:96:b1:ec:ce:c4:f0:84: 25:96:6f:f7:f1:66:80:ce:94:09:14:4f:d2:1e:eb: 69:7e:58:7f:af:db:4f:7c:2c:01:c2:db:fa:aa:af: f1:3c:29:56:1e:ab:01:15:21:b6:4f:57:d6:77:5a: 82:d7:4b:d8:8b:b8:bf:6d:b9:6b:e9:bd:b0:9d:66: 39:74:e1:65:0b:80:2e:20:b9:25:3b:d5:3e:98:58: 21:1a:fd:ea:43:93:0a:ce:e8:cf:72:78:ac:fb:65: d1:15:d5:3b:e4:d3:c0:1c:94:5b:72:19:cc:5a:c9: d4:d1:c7:8d:b4:b3:3a:f4:4a:46:7f:99:b9:7a:a1: 84:ce:94:51:c5:7b:83:47:a4:ff:a2:04:b6:6a:76: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:82:F2:1C:C0:7C:39:AB:9C:18:BB:10:0D:42:9B:AD:36:AD:AF:59 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ac:78:cd:cb:d6:0f:99:67:65:9b:27:41:7a:9a:0c:ec:28: 49:87:be:a5:d6:ed:31:8f:21:d5:a7:e0:9e:42:ed:10:6d:6c: 0d:52:e6:58:41:5e:6b:25:03:8c:0d:69:15:d4:39:b9:b9:2d: f9:a3:a5:5c:31:c8:3f:50:d0:74:08:af:02:a8:7b:1c:cb:0b: d4:3f:5b:26:7d:32:95:42:15:ed:27:b6:41:32:bb:d3:b8:50: fb:ca:d5:ce:74:e4:0b:22:30:f5:ab:1c:10:60:5c:7b:5d:d0: f3:6d:27:53:e6:3a:a7:77:8f:ff:54:26:da:0e:7d:9e:11:43: b9:d2:49:f5:7a:33:78:87:84:9e:cd:3e:15:00:6c:92:84:32: 71:d7:9d:be:d9:2f:61:2b:e0:90:6b:c5:04:d5:ed:c7:91:40: 7f:3f:bf:09:e4:24:cd:b3:e3:45:45:6a:1a:cb:0c:56:f6:8d: 66:43:18:6f:74:82:0c:9d:6c:0a:3c:b9:fb:be:91:8d:03:19: f9:a3:f9:f6:90:6a:75:1c:8c:9d:0d:97:d0:59:ec:91:27:95: 2b:37:65:e4:d9:7e:33:ea:ab:08:8d:09:e5:75:80:d9:fd:9c: 37:18:e1:f7:b1:1f:6e:9f:7d:9f:bc:53:03:5e:cb:54:ec:ad: fb:62:ad:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwNTMwMjI0NDMxWhcNMjUwNjA2MjI0NDMxWjAYMRYwFAYD VQQDEw02ODNhMzRjZi0wNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGKI00QJ0dy1R4vzYi7nFnCp1FX/BXHnNMkhGKzTdKmbHkfMbMT8rHDb2YvA HYGYOnRANBDBipx5OrIM28BeMPSykcKr3rmamtlPvmYzDkkUrRogdw2AyJHnDA5Z dHtIBpCujuUAqqUpcKsQsPEcXJax7M7E8IQllm/38WaAzpQJFE/SHutpflh/r9tP fCwBwtv6qq/xPClWHqsBFSG2T1fWd1qC10vYi7i/bblr6b2wnWY5dOFlC4AuILkl O9U+mFghGv3qQ5MKzujPcnis+2XRFdU75NPAHJRbchnMWsnU0ceNtLM69EpGf5m5 eqGEzpRRxXuDR6T/ogS2anaI3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeC8hzA fDmrnBi7EA1Cm602ra9ZMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJrHjNy9YPmWdlmydBepoM7ChJh76l1u0xjyHVp+CeQu0QbWwNUuZY QV5rJQOMDWkV1Dm5uS35o6VcMcg/UNB0CK8CqHscywvUP1smfTKVQhXtJ7ZBMrvT uFD7ytXOdOQLIjD1qxwQYFx7XdDzbSdT5jqnd4//VCbaDn2eEUO50kn1ejN4h4Se zT4VAGyShDJx152+2S9hK+CQa8UE1e3HkUB/P78J5CTNs+NFRWoaywxW9o1mQxhv dIIMnWwKPLn7vpGNAxn5o/n2kGp1HIydDZfQWeyRJ5UrN2Xk2X4z6qsIjQnldYDZ /Zw3GOH3sR9un32fvFMDXstU7K37Yq2c -----END CERTIFICATE-----Generated at Sat May 31 17:45:04 2025 by rpki-client