$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: 0YNk8gpRvqLQ/wyo/O1Jdu6Ld4YVhXcz07IoxV0rYcY= Subject key identifier: 14:C7:57:12:F3:A0:CC:81:F4:90:AE:FF:D4:5B:3F:90:09:7F:EB:A0 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 1597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 1597 Signing time: Sat 10 May 2025 16:41:45 +0000 Manifest this update: Sat 10 May 2025 16:41:45 +0000 Manifest next update: Sat 17 May 2025 16:41:45 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: EcjPrMr+Krn0TTDlKxHj8FQSIo/pN+vMP8f0k9Juy+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5527 (0x1597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: May 10 16:41:45 2025 GMT Not After : May 17 16:41:45 2025 GMT Subject: CN=681f81c9-a1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:1b:a4:1c:99:89:4b:67:a9:d6:36:5b:bf: b8:97:0c:88:f2:29:c5:65:43:50:2e:a4:b5:2d:9a: 63:57:1d:ab:e1:6e:8a:8f:16:67:bc:70:46:75:c3: f7:4e:72:a5:55:e7:0a:f3:f3:ab:ad:3e:78:2d:23: e4:17:f2:b6:85:d9:bd:43:d7:e7:1c:82:31:bf:4b: 27:ff:f4:77:c1:78:08:62:6a:63:e9:dd:c4:3e:f3: 72:b8:63:b2:5d:a5:36:47:70:91:1d:a8:0b:86:0c: a4:50:30:7d:7a:36:30:14:16:4d:00:ae:93:f3:4c: e5:07:9b:e1:95:1e:c4:2a:5d:cc:cf:7d:4f:f6:a7: f6:73:ba:90:79:41:ba:bc:71:2e:b9:b9:b7:dc:ca: 74:ce:4b:7e:79:4e:11:e2:50:b2:c1:31:35:e9:d9: f9:9a:80:44:24:6f:c5:7f:03:3d:18:6d:2c:07:d1: 27:7e:63:95:e2:1e:f4:7f:dc:3c:30:62:0b:70:5f: 2d:fa:d1:6c:c8:c3:a5:4b:11:1b:ab:98:23:af:f4: ae:0a:70:f5:66:43:22:76:91:bb:b8:14:62:48:a0: 3b:4e:b8:b2:9c:0c:ba:0f:a7:8b:b4:5e:da:32:ff: db:4e:e9:4c:ec:b5:03:44:ba:b6:28:ee:04:a0:b9: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:57:12:F3:A0:CC:81:F4:90:AE:FF:D4:5B:3F:90:09:7F:EB:A0 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f0:9d:68:df:8c:0f:58:d9:ec:32:99:39:f0:e4:fa:95:b2: 77:db:9a:db:c4:03:ce:fb:d9:ee:80:f2:8c:a4:5c:04:e9:1e: 84:a9:71:1c:4f:e6:97:7f:97:d6:b5:db:60:82:0e:52:65:dd: dc:ba:bc:08:ef:95:a1:4c:57:f6:3d:af:cd:0b:85:20:e6:45: 6e:61:c8:da:77:72:70:ba:e7:2f:51:62:46:df:cd:a1:9d:bc: 36:6d:f4:88:00:5b:73:ae:f8:3d:65:ce:7d:96:de:a1:10:a5: d3:0c:fa:ff:3e:03:cf:9d:23:63:72:c3:23:e0:20:a4:80:e8: 04:98:b0:12:ea:d8:c3:92:76:58:9b:38:95:8e:80:76:0a:de: 68:87:80:16:e3:0c:2f:f3:ec:27:46:0c:e0:40:22:1f:69:10: 54:8d:b4:64:18:10:30:6d:00:eb:f0:bd:f6:a4:7c:b2:c6:b0: 65:0f:66:ae:ec:07:2c:9e:9c:c8:a4:3f:f8:5b:1c:3c:e0:ea: 00:c0:04:1b:9b:c5:a8:df:3a:58:65:3f:34:62:68:ff:91:2a: df:07:f7:32:91:80:18:e0:25:5a:2e:2e:42:59:95:58:7d:90: 6a:e4:82:99:09:af:ca:0c:a8:26:27:9e:04:da:5d:d6:c6:5c: 90:e5:31:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjUwNTEwMTY0MTQ1WhcNMjUwNTE3MTY0MTQ1WjAYMRYwFAYD VQQDEw02ODFmODFjOS1hMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVkbpByZiUtnqdY2W7+4lwyI8inFZUNQLqS1LZpjVx2r4W6KjxZnvHBGdcP3 TnKlVecK8/OrrT54LSPkF/K2hdm9Q9fnHIIxv0sn//R3wXgIYmpj6d3EPvNyuGOy XaU2R3CRHagLhgykUDB9ejYwFBZNAK6T80zlB5vhlR7EKl3Mz31P9qf2c7qQeUG6 vHEuubm33Mp0zkt+eU4R4lCywTE16dn5moBEJG/FfwM9GG0sB9EnfmOV4h70f9w8 MGILcF8t+tFsyMOlSxEbq5gjr/SuCnD1ZkMidpG7uBRiSKA7TriynAy6D6eLtF7a Mv/bTulM7LUDRLq2KO4EoLmztQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTHVxLz oMyB9JCu/9RbP5AJf+ugMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz8J1o34wPWNnsMpk58OT6lbJ325rbxAPO+9nugPKMpFwE6R6EqXEc T+aXf5fWtdtggg5SZd3curwI75WhTFf2Pa/NC4Ug5kVuYcjad3JwuucvUWJG382h nbw2bfSIAFtzrvg9Zc59lt6hEKXTDPr/PgPPnSNjcsMj4CCkgOgEmLAS6tjDknZY mziVjoB2Ct5oh4AW4wwv8+wnRgzgQCIfaRBUjbRkGBAwbQDr8L32pHyyxrBlD2au 7AcsnpzIpD/4Wxw84OoAwAQbm8Wo3zpYZT80Ymj/kSrfB/cykYAY4CVaLi5CWZVY fZBq5IKZCa/KDKgmJ54E2l3WxlyQ5TGN -----END CERTIFICATE-----Generated at Mon May 12 18:21:05 2025 by rpki-client