$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: ZhIKbToMdj/muDVlvMUZ2U1o8DpDJprCONcSU6vQdKo= Subject key identifier: 89:BC:D2:48:89:DB:EB:CC:96:9A:0E:40:73:7C:92:F6:6E:D9:E9:B4 Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 09B5 Signing time: Mon 12 May 2025 19:49:21 +0000 Manifest this update: Mon 12 May 2025 19:49:20 +0000 Manifest next update: Mon 19 May 2025 19:49:20 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: rMka4RYZEh7TEZvLaY2AL56u6uuldK7bI1qojRdX0lg=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: May 12 19:49:20 2025 GMT Not After : May 19 19:49:20 2025 GMT Subject: CN=682250c1-d32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:83:08:6b:8e:1b:8b:ca:84:7f:ba:41:cb: 43:16:50:35:95:ea:27:8f:c7:2d:66:89:ec:e6:57: bd:39:36:be:e2:63:08:c9:98:e4:d8:f4:e4:8c:65: a6:d0:45:18:45:1a:40:9b:58:0e:8e:26:f6:e0:59: 3a:47:6e:52:01:b7:d9:d5:34:be:f8:b5:c5:8f:cd: a1:68:76:f1:1b:05:96:58:9b:06:24:9e:25:19:a7: 47:28:2d:30:a5:19:28:f7:26:c3:01:57:8c:fa:4c: 8a:c6:46:5a:ec:56:86:73:46:50:97:08:bf:79:99: 89:6e:11:cc:77:ae:20:21:92:e2:35:30:e6:bb:40: 60:10:fa:32:ce:a6:4b:68:a9:2b:7c:60:dd:24:a5: 92:4a:cd:68:1a:c6:5b:27:25:63:2d:7f:7b:64:82: ca:f4:b4:39:df:13:13:ee:9a:ab:5e:fb:c1:d8:17: 46:4f:46:13:fd:df:63:a4:9d:2d:4b:8a:57:5a:fe: 7f:de:5e:ce:a9:2a:56:26:dc:e2:bc:74:0f:c8:93: bd:d8:e4:03:2c:1b:1c:63:ca:fd:67:56:73:b9:59: 4a:30:6a:07:03:22:a7:ea:ea:a3:79:46:60:63:ac: 35:da:56:f7:77:2a:b5:6d:29:ca:eb:e9:f2:e3:1f: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BC:D2:48:89:DB:EB:CC:96:9A:0E:40:73:7C:92:F6:6E:D9:E9:B4 X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:bb:38:ab:32:fb:6e:22:6f:54:a7:76:88:1c:f6:41:18:74: c5:0b:9c:8d:2e:3a:df:91:fa:6e:76:4e:85:c2:9a:ab:c1:6a: 2c:ce:85:3f:14:81:e3:34:ba:32:95:e2:1f:5d:4b:8a:3d:7a: ac:3c:4c:d8:6a:87:aa:2d:22:5b:6e:ce:82:1b:bf:72:32:de: 4f:a6:92:5f:0e:ca:68:0c:b9:90:82:0f:21:b7:b5:7e:64:16: 19:f6:0d:67:c7:76:78:5b:2e:b0:ed:95:dc:a4:6d:51:91:0a: 66:56:73:dd:1e:4f:56:f4:f4:82:5c:7f:b5:ef:4c:47:19:fd: 1b:da:54:02:9c:17:7c:56:6a:db:ad:66:79:e6:e2:f1:cd:e6: 8d:95:2f:fe:ee:ef:33:36:cc:f6:cb:cb:18:ce:e7:65:1b:63: 6e:66:ff:fd:da:73:ff:e7:62:ed:b6:2f:07:ea:70:ba:17:08: a7:01:f8:f1:3f:5f:a1:09:1d:89:f1:3c:3e:de:6d:7b:cf:c3: 6f:09:f4:27:81:8b:5e:50:5c:4e:d2:e4:85:94:49:e9:00:f9: a3:d1:7c:8d:05:fb:c6:fb:c0:af:09:47:95:1b:5e:88:7e:40: 4e:32:ad:39:84:91:a1:c5:4a:7d:61:c5:f8:c6:9d:d1:ce:1e: 2c:1e:b6:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjUwNTEyMTk0OTIwWhcNMjUwNTE5MTk0OTIwWjAYMRYwFAYD VQQDEw02ODIyNTBjMS1kMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUCDCGuOG4vKhH+6QctDFlA1leonj8ctZons5le9OTa+4mMIyZjk2PTkjGWm 0EUYRRpAm1gOjib24Fk6R25SAbfZ1TS++LXFj82haHbxGwWWWJsGJJ4lGadHKC0w pRko9ybDAVeM+kyKxkZa7FaGc0ZQlwi/eZmJbhHMd64gIZLiNTDmu0BgEPoyzqZL aKkrfGDdJKWSSs1oGsZbJyVjLX97ZILK9LQ53xMT7pqrXvvB2BdGT0YT/d9jpJ0t S4pXWv5/3l7OqSpWJtzivHQPyJO92OQDLBscY8r9Z1ZzuVlKMGoHAyKn6uqjeUZg Y6w12lb3dyq1bSnK6+ny4x9tKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm80kiJ 2+vMlpoOQHN8kvZu2em0MB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSuzirMvtuIm9Up3aIHPZBGHTFC5yNLjrfkfpudk6FwpqrwWoszoU/ FIHjNLoyleIfXUuKPXqsPEzYaoeqLSJbbs6CG79yMt5PppJfDspoDLmQgg8ht7V+ ZBYZ9g1nx3Z4Wy6w7ZXcpG1RkQpmVnPdHk9W9PSCXH+170xHGf0b2lQCnBd8Vmrb rWZ55uLxzeaNlS/+7u8zNsz2y8sYzudlG2NuZv/92nP/52Ltti8H6nC6FwinAfjx P1+hCR2J8Tw+3m17z8NvCfQngYteUFxO0uSFlEnpAPmj0XyNBfvG+8CvCUeVG16I fkBOMq05hJGhxUp9YcX4xp3Rzh4sHrYF -----END CERTIFICATE-----Generated at Wed May 14 10:39:55 2025 by rpki-client