$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: e5MzGujfYb35xXajoIzq0ZjQMlW0WxBrBQ+JzkaQLuA= Subject key identifier: CD:F7:AF:50:1A:6D:C3:B2:96:AE:32:19:C9:82:3C:8E:4C:FC:CD:E0 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: A3 Signing time: Fri 09 May 2025 05:15:45 +0000 Manifest this update: Fri 09 May 2025 05:15:44 +0000 Manifest next update: Fri 16 May 2025 05:15:44 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: kwKdgUMUGBPRngvQwXMGurP7vXtb1h+No99g/iDoqE0=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: May 9 05:15:44 2025 GMT Not After : May 16 05:15:44 2025 GMT Subject: CN=681d8f80-5939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:0e:80:53:60:e0:a6:28:33:fa:bb:9c:b9: 52:84:b6:5a:6b:ad:41:be:b0:99:86:2a:c7:4b:dc: 52:05:b6:2f:d1:66:9a:09:db:83:3a:42:b9:8c:77: 91:86:70:10:04:e9:66:cf:f0:dd:29:fe:b6:17:a1: 91:93:fc:37:0a:f2:d0:e8:4f:86:e9:1d:3f:1a:1b: 8e:a2:0f:9d:e0:c0:6f:f0:f7:d8:e5:69:29:12:c8: f8:1d:e8:4b:29:1f:2f:a6:d9:d8:8e:15:e1:a0:94: bc:51:e5:46:00:09:c5:f9:a2:5e:24:b6:d1:17:99: 24:64:6d:fd:e2:ad:d3:be:31:ff:59:0b:20:69:0c: 3a:3d:ef:92:5f:99:ec:f4:c3:19:29:ac:59:e1:e0: 62:ae:44:a2:54:e7:db:1f:43:a1:1c:1f:93:40:f6: a0:9c:be:0b:f8:4f:5f:e1:5c:a0:51:87:28:ae:c4: c4:b7:19:7e:f3:a7:3c:4f:bb:d0:a3:69:50:fd:fa: d1:30:90:cb:5f:81:b3:86:9d:e5:75:b3:d7:9a:d3: ae:96:7c:f5:35:43:75:de:24:f8:45:6c:5d:a4:bd: b4:9f:ad:34:3d:6a:b2:06:83:ce:a3:08:3e:42:39: 6b:fa:40:6f:cd:05:54:9a:21:00:3f:90:3e:f7:36: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F7:AF:50:1A:6D:C3:B2:96:AE:32:19:C9:82:3C:8E:4C:FC:CD:E0 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:38:b0:fa:4b:a8:36:b4:a5:b1:8f:8e:83:7c:57:43:1e:9f: a6:12:22:59:9e:7b:d8:42:f1:29:72:5b:d3:1e:4a:4c:17:ac: be:e3:dd:39:09:ec:02:df:18:7b:a7:a9:58:e2:e6:21:9b:71: c0:f0:d6:4c:24:54:ee:6e:72:9e:82:0d:0c:bb:45:ec:47:fc: 89:64:fd:f7:34:28:3a:70:c6:49:f2:a4:10:7d:38:fe:2f:56: 4a:0e:a6:63:17:6d:0d:7c:5a:de:47:fa:cc:68:c6:68:fd:d9: c1:c7:c2:d8:48:20:d5:91:d5:10:5a:2a:d2:0f:d3:b2:d6:fb: 4e:73:3f:66:25:61:be:88:d9:29:3a:d8:4c:ba:c2:c0:bb:0d: d1:ed:83:eb:c5:b8:57:c5:35:3a:c8:de:0d:80:da:51:dd:7b: d8:09:ac:ec:01:a0:28:90:fa:7b:22:c4:05:10:fe:c4:fa:9f: bd:6c:43:2e:6f:4d:e3:4c:1f:c1:df:3c:91:16:42:64:88:64: ff:e0:ad:1d:f6:d3:c0:ab:d1:d3:91:1f:d1:16:5a:34:fc:33: 74:62:41:9e:b0:0f:e0:79:d1:38:d2:cb:ed:8a:ee:70:9f:dc: 79:c9:2f:f3:90:5f:35:de:62:0a:62:cf:ef:cd:06:fd:1c:15: 63:fb:a3:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjUwNTA5MDUxNTQ0WhcNMjUwNTE2MDUxNTQ0WjAYMRYwFAYD VQQDEw02ODFkOGY4MC01OTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRMOgFNg4KYoM/q7nLlShLZaa61BvrCZhirHS9xSBbYv0WaaCduDOkK5jHeR hnAQBOlmz/DdKf62F6GRk/w3CvLQ6E+G6R0/GhuOog+d4MBv8PfY5WkpEsj4HehL KR8vptnYjhXhoJS8UeVGAAnF+aJeJLbRF5kkZG394q3TvjH/WQsgaQw6Pe+SX5ns 9MMZKaxZ4eBirkSiVOfbH0OhHB+TQPagnL4L+E9f4VygUYcorsTEtxl+86c8T7vQ o2lQ/frRMJDLX4Gzhp3ldbPXmtOulnz1NUN13iT4RWxdpL20n600PWqyBoPOowg+ Qjlr+kBvzQVUmiEAP5A+9zYh8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM33r1Aa bcOylq4yGcmCPI5M/M3gMB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADOLD6S6g2tKWxj46DfFdDHp+mEiJZnnvYQvEpclvTHkpMF6y+4905 CewC3xh7p6lY4uYhm3HA8NZMJFTubnKegg0Mu0XsR/yJZP33NCg6cMZJ8qQQfTj+ L1ZKDqZjF20NfFreR/rMaMZo/dnBx8LYSCDVkdUQWirSD9Oy1vtOcz9mJWG+iNkp OthMusLAuw3R7YPrxbhXxTU6yN4NgNpR3XvYCazsAaAokPp7IsQFEP7E+p+9bEMu b03jTB/B3zyRFkJkiGT/4K0d9tPAq9HTkR/RFlo0/DN0YkGesA/gedE40svtiu5w n9x5yS/zkF813mIKYs/vzQb9HBVj+6PL -----END CERTIFICATE-----Generated at Sat May 10 09:52:04 2025 by rpki-client