$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: kFpUjbN9orIHfAdQ7UmbaDcrBbJfoz1FRzGMZwWaDfU= Subject key identifier: FE:77:AA:A6:94:EA:75:C9:34:06:68:66:1E:07:6B:E0:EC:98:7D:6F Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0DB7 Signing time: Sat 10 May 2025 17:46:14 +0000 Manifest this update: Sat 10 May 2025 17:46:13 +0000 Manifest next update: Sat 17 May 2025 17:46:13 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: k2XupPRK4TWWyeBys3C8wVcOnushbUx7n8v3SePdmc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A, serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: May 10 17:46:13 2025 GMT Not After : May 17 17:46:13 2025 GMT Subject: CN=681f90e5-d060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:d6:fd:c0:08:b7:a0:74:41:72:ff:d4:36: 81:39:10:4b:6a:6c:2d:db:72:1d:e9:20:35:78:6e: 38:16:fa:cd:9c:70:16:5b:95:35:0e:42:5e:d9:d3: c6:72:83:4b:97:df:65:2c:80:a6:1b:69:3e:d6:81: f6:38:13:a1:5c:79:35:4d:05:f8:99:6c:6f:b7:0f: e1:46:b0:08:03:bb:6b:af:71:ff:6b:12:3e:b9:ae: 61:0a:00:59:6f:05:88:eb:25:f6:01:10:46:ac:10: 15:35:a8:f0:d7:2f:ca:af:17:cd:1d:a6:9c:14:da: c7:14:3a:a5:45:31:af:59:36:93:59:93:35:7e:a1: 6e:be:f2:66:2c:cf:f4:d0:47:01:87:ad:e5:3c:3b: 45:71:12:64:d8:65:cf:96:2c:33:23:84:c5:54:e7: 34:e2:dd:29:c7:0f:f1:96:1e:49:29:10:bc:0d:05: 18:cd:0f:c3:a9:3c:86:aa:f7:4e:63:9e:eb:13:32: 80:20:90:e3:1e:80:80:50:8b:60:af:8b:ee:d3:f0: fb:bd:d7:c1:6d:1c:cd:31:d0:2c:73:fc:86:53:6c: b9:8e:32:b7:f3:00:9b:dc:52:56:61:41:3e:96:d8: 79:82:da:e7:18:9e:ac:f6:28:e1:db:61:7b:e2:47: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:AA:A6:94:EA:75:C9:34:06:68:66:1E:07:6B:E0:EC:98:7D:6F X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c8:21:8e:d0:34:e9:a1:cb:a5:69:a4:f3:ac:5d:5d:03:4e: 02:26:08:10:a5:45:18:dc:8f:6d:46:63:23:f8:b3:d4:cd:0d: e8:2f:b9:40:7b:b0:3b:de:3e:65:a4:ca:df:2d:88:79:dd:7e: a0:b3:b4:3d:da:5f:b6:35:94:9b:82:e4:f0:21:c4:6d:a3:1d: c9:ba:17:fd:93:6e:68:40:54:57:d7:c3:8f:8d:c0:d9:9c:59: e3:68:37:30:4a:46:76:5f:ba:b9:4d:0a:0c:5b:ac:f2:bb:e4: 93:9e:24:a7:b9:04:6a:ef:a4:52:9c:52:68:46:a9:fb:c1:77: 2d:3d:aa:8e:c3:29:a7:3c:b9:21:b8:01:17:d8:7f:7e:d7:bd: 78:c7:ee:5c:a5:47:7b:21:28:e7:30:3b:8a:22:24:92:b0:26: c4:76:dc:c9:ff:29:9e:a4:7f:e7:82:b5:d4:a0:4f:92:9d:9e: 39:9f:4f:4c:33:21:c6:2d:37:00:d1:66:29:ad:1e:28:99:84: 6a:48:8d:3d:dd:87:c1:e0:7a:35:6f:45:22:52:fc:ae:6e:f6: 19:b3:e4:09:16:78:a8:df:fb:6f:1b:f4:53:e9:db:af:87:70: 48:70:2c:ad:50:bb:f8:ad:88:81:a2:71:42:b2:74:85:12:58: fb:0c:82:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjUwNTEwMTc0NjEzWhcNMjUwNTE3MTc0NjEzWjAYMRYwFAYD VQQDEw02ODFmOTBlNS1kMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGTW/cAIt6B0QXL/1DaBORBLamwt23Id6SA1eG44FvrNnHAWW5U1DkJe2dPG coNLl99lLICmG2k+1oH2OBOhXHk1TQX4mWxvtw/hRrAIA7trr3H/axI+ua5hCgBZ bwWI6yX2ARBGrBAVNajw1y/KrxfNHaacFNrHFDqlRTGvWTaTWZM1fqFuvvJmLM/0 0EcBh63lPDtFcRJk2GXPliwzI4TFVOc04t0pxw/xlh5JKRC8DQUYzQ/DqTyGqvdO Y57rEzKAIJDjHoCAUItgr4vu0/D7vdfBbRzNMdAsc/yGU2y5jjK38wCb3FJWYUE+ lth5gtrnGJ6s9ijh22F74kcVbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP53qqaU 6nXJNAZoZh4Ha+DsmH1vMB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFyCGO0DTpoculaaTzrF1dA04CJggQpUUY3I9tRmMj+LPUzQ3oL7lA e7A73j5lpMrfLYh53X6gs7Q92l+2NZSbguTwIcRtox3Juhf9k25oQFRX18OPjcDZ nFnjaDcwSkZ2X7q5TQoMW6zyu+STniSnuQRq76RSnFJoRqn7wXctPaqOwymnPLkh uAEX2H9+1714x+5cpUd7ISjnMDuKIiSSsCbEdtzJ/ymepH/ngrXUoE+SnZ45n09M MyHGLTcA0WYprR4omYRqSI093YfB4Ho1b0UiUvyubvYZs+QJFnio3/tvG/RT6duv h3BIcCytULv4rYiBonFCsnSFElj7DIKt -----END CERTIFICATE-----Generated at Sun May 11 17:03:40 2025 by rpki-client