$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: 7z0UEfH0Kl03quMyejnSnIbNWtKOF4egoNNL6UzjELk= Subject key identifier: 8D:73:EE:5A:5B:5A:B9:7B:61:9B:1C:00:EC:F1:10:55:76:BF:F6:68 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 08A0 Signing time: Wed 14 May 2025 20:38:54 +0000 Manifest this update: Wed 14 May 2025 20:38:54 +0000 Manifest next update: Wed 21 May 2025 20:38:54 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: 3yqAkxQbkBCTMeE54jxiBuagpmTEpIFqfH+CCnyOb2o=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: May 14 20:38:54 2025 GMT Not After : May 21 20:38:54 2025 GMT Subject: CN=6824ff5e-5a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:cf:3c:63:06:86:68:fa:3a:dc:d2:21:2e: 54:a0:f8:be:0d:27:fb:70:44:10:20:31:c4:7b:b4: 74:c7:1c:8a:e4:27:3a:38:6e:3f:fb:9f:55:d5:aa: c7:14:ae:4f:e0:88:7d:40:18:97:f4:99:c6:f0:01: bd:89:b8:35:84:51:ef:66:a2:b9:15:8f:19:a6:cd: 2b:ea:48:c8:7c:47:4b:5b:81:99:39:d1:ed:36:a8: 18:40:8c:13:da:09:ee:5c:53:6c:00:a2:61:c9:75: d7:08:bd:aa:ed:67:9a:a8:22:55:fb:98:77:06:e5: 1b:1c:d8:9c:a8:e9:32:d6:65:f2:df:3e:f0:ad:32: 31:56:c5:5a:53:5a:7e:1b:8e:53:47:79:02:73:a1: 71:da:f8:c7:cf:55:ae:ac:a9:ef:0d:f4:84:b2:d3: a7:11:be:43:68:54:00:35:40:e5:89:33:6f:84:f9: a6:42:ba:71:c0:b2:24:19:48:9a:fd:d9:3f:78:85: 06:d0:ad:d2:1e:63:9d:00:25:cc:c6:13:e2:fc:e7: 5b:17:1d:37:66:1c:e8:d2:43:e2:6c:2b:93:9e:6f: aa:78:4f:e0:91:4c:6b:f7:ff:6a:0b:7f:54:b7:ff: 93:7c:80:83:9f:3e:c6:e1:1c:e0:46:05:a8:a4:4f: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:73:EE:5A:5B:5A:B9:7B:61:9B:1C:00:EC:F1:10:55:76:BF:F6:68 X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c7:1c:9d:8f:60:2b:48:24:03:dc:06:e4:91:4c:b9:33:07: 1f:09:3b:9a:43:3a:48:46:f2:98:bf:97:c5:85:98:08:db:11: e2:f8:b0:f6:ad:51:e2:92:6a:f9:6c:76:9c:2b:4d:a2:17:57: 9e:f7:03:df:52:a0:10:3f:15:b2:b4:32:df:84:ac:0b:19:9e: f3:1d:c6:e2:c1:c5:89:3c:35:98:10:bc:d0:ee:76:dc:91:96: 68:cf:c1:77:30:6b:3f:10:86:cb:cd:64:89:cf:ad:88:d1:87: 19:5d:48:4f:2e:a2:49:54:9b:3f:d8:7e:09:65:08:3d:a6:6d: 25:e0:c6:28:d9:59:b1:cb:34:2d:61:d7:ba:93:2d:bd:81:7a: 57:11:75:9c:a2:02:cc:c9:06:81:ec:ee:f4:51:a3:b7:97:e9: 39:27:22:a6:ac:1a:4c:14:ec:9b:f4:91:66:d7:08:5f:80:f2: e1:5e:58:19:06:13:92:ed:cf:de:ad:e7:24:22:c6:e7:be:7a: 83:91:69:a1:c0:1c:fa:5e:5d:62:21:91:6d:13:6f:cb:8a:8f: 27:d4:0a:18:3d:58:72:77:7b:e5:71:70:e1:91:30:3a:37:54: a3:17:e5:05:31:1b:61:12:04:72:3e:ab:d1:18:57:e6:d6:9e: e8:9e:f3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjUwNTE0MjAzODU0WhcNMjUwNTIxMjAzODU0WjAYMRYwFAYD VQQDEw02ODI0ZmY1ZS01YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7PPPGMGhmj6OtzSIS5UoPi+DSf7cEQQIDHEe7R0xxyK5Cc6OG4/+59V1arH FK5P4Ih9QBiX9JnG8AG9ibg1hFHvZqK5FY8Zps0r6kjIfEdLW4GZOdHtNqgYQIwT 2gnuXFNsAKJhyXXXCL2q7WeaqCJV+5h3BuUbHNicqOky1mXy3z7wrTIxVsVaU1p+ G45TR3kCc6Fx2vjHz1WurKnvDfSEstOnEb5DaFQANUDliTNvhPmmQrpxwLIkGUia /dk/eIUG0K3SHmOdACXMxhPi/OdbFx03Zhzo0kPibCuTnm+qeE/gkUxr9/9qC39U t/+TfICDnz7G4RzgRgWopE8ZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1z7lpb Wrl7YZscAOzxEFV2v/ZoMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBixxydj2ArSCQD3AbkkUy5MwcfCTuaQzpIRvKYv5fFhZgI2xHi+LD2 rVHikmr5bHacK02iF1ee9wPfUqAQPxWytDLfhKwLGZ7zHcbiwcWJPDWYELzQ7nbc kZZoz8F3MGs/EIbLzWSJz62I0YcZXUhPLqJJVJs/2H4JZQg9pm0l4MYo2VmxyzQt Yde6ky29gXpXEXWcogLMyQaB7O70UaO3l+k5JyKmrBpMFOyb9JFm1whfgPLhXlgZ BhOS7c/ereckIsbnvnqDkWmhwBz6Xl1iIZFtE2/Lio8n1AoYPVhyd3vlcXDhkTA6 N1SjF+UFMRthEgRyPqvRGFfm1p7onvMU -----END CERTIFICATE-----Generated at Fri May 16 16:51:21 2025 by rpki-client