$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: kQMm4clSHuBOCq6zbZF+44uBrl97k56AdzMM9rnvxjE= Subject key identifier: 83:DD:DF:AF:C5:07:99:1A:76:66:25:5A:0B:76:16:2A:65:8B:97:1D Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D04 Signing time: Sun 18 May 2025 16:05:12 +0000 Manifest this update: Sun 18 May 2025 16:05:12 +0000 Manifest next update: Sun 25 May 2025 16:05:12 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: jnsKIkn0AuQobtB8rAEfBkS8twyDTZW1q+ozUd9FdI8=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 16:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7441 (0x1d11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: May 18 16:05:12 2025 GMT Not After : May 25 16:05:12 2025 GMT Subject: CN=682a0538-5d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:21:3b:2c:86:67:17:f2:3f:d0:27:c4:79: b6:f6:61:be:33:37:de:e3:6b:e6:0a:8d:b8:2a:9f: 54:49:06:88:f3:b6:48:34:c7:d8:bc:be:9c:cc:26: 56:ec:6d:fc:6b:5a:d3:5b:d1:d8:59:a9:40:06:80: e7:6c:64:d3:f9:d5:91:f4:29:1b:2d:22:d6:12:40: 88:24:86:9a:cd:24:da:49:51:6d:a4:d4:59:91:48: ce:55:16:22:ab:4e:38:82:8c:89:78:97:2f:a6:bb: a5:20:bf:e2:63:df:e4:61:9a:c7:3b:be:a1:86:f0: bc:a2:8b:95:3a:42:84:ae:4d:7b:67:20:32:4e:37: c6:c8:de:19:03:ef:78:41:4c:ec:ae:26:cd:00:ab: 2f:e4:72:f6:d0:a0:18:e4:8e:1e:1d:4a:d8:31:b6: 78:42:25:31:ba:b7:8b:e2:36:8b:4b:d3:69:d3:85: 7a:c2:8e:7e:10:17:4a:33:fa:5b:1c:84:46:03:a5: 63:2f:97:a5:01:9a:a2:72:c9:54:58:7a:9c:2f:8c: ed:37:df:5b:5c:3f:34:da:74:3f:fd:85:34:ec:4d: a8:8c:96:e9:a1:c5:04:b3:17:02:78:a0:be:0a:47: c1:72:29:c9:1e:59:f8:3e:3e:7c:56:42:b8:a9:ec: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:DF:AF:C5:07:99:1A:76:66:25:5A:0B:76:16:2A:65:8B:97:1D X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:de:09:2f:b1:fc:b7:a0:fe:b9:4b:1f:78:f9:c3:ad:16:93: 33:b0:22:ee:f6:ff:54:70:b2:87:99:98:f9:ee:a3:1b:b3:b7: 0a:78:db:b2:75:31:d2:a6:53:36:7c:22:0a:a9:97:e3:0d:6b: 86:56:86:d4:e4:36:0a:40:65:52:c5:fb:6b:dd:68:08:44:8d: 71:fe:32:fb:7d:af:8d:3d:b7:3d:96:3e:04:b2:10:59:61:e4: d2:3c:f9:06:f5:e9:53:07:10:68:4f:07:ee:cd:05:34:fb:57: fc:d5:b3:cb:bb:be:d5:76:7c:26:8b:be:aa:2a:c8:da:74:0e: 74:5f:00:a5:cf:ba:1d:fa:8c:63:10:33:ef:6e:83:2d:55:8f: 27:87:2d:53:16:77:3c:43:74:8d:11:00:69:84:df:4c:e8:54: 46:31:94:17:3a:31:ce:7e:a1:55:22:98:ce:fa:a6:34:ca:c2: 3f:dc:d6:9a:4e:22:dc:4e:c5:a9:a9:7a:ab:c3:ad:b6:6a:ee: cd:1b:6c:d5:ee:05:35:20:b4:ff:3e:27:cf:01:22:c3:f9:e8: 7b:b1:b2:9f:d2:5b:30:b0:a6:c9:cf:97:85:0f:7e:ed:2c:58: 69:16:53:de:dd:d2:7c:4b:be:4c:a8:51:b0:3a:19:2b:eb:10: e8:56:58:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwNTE4MTYwNTEyWhcNMjUwNTI1MTYwNTEyWjAYMRYwFAYD VQQDEw02ODJhMDUzOC01ZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjEhOyyGZxfyP9AnxHm29mG+Mzfe42vmCo24Kp9USQaI87ZINMfYvL6czCZW 7G38a1rTW9HYWalABoDnbGTT+dWR9CkbLSLWEkCIJIaazSTaSVFtpNRZkUjOVRYi q044goyJeJcvprulIL/iY9/kYZrHO76hhvC8oouVOkKErk17ZyAyTjfGyN4ZA+94 QUzsribNAKsv5HL20KAY5I4eHUrYMbZ4QiUxureL4jaLS9Np04V6wo5+EBdKM/pb HIRGA6VjL5elAZqicslUWHqcL4ztN99bXD802nQ//YU07E2ojJbpocUEsxcCeKC+ CkfBcinJHln4Pj58VkK4qezb7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPd36/F B5kadmYlWgt2Fipli5cdMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3gkvsfy3oP65Sx94+cOtFpMzsCLu9v9UcLKHmZj57qMbs7cKeNuy dTHSplM2fCIKqZfjDWuGVobU5DYKQGVSxftr3WgIRI1x/jL7fa+NPbc9lj4EshBZ YeTSPPkG9elTBxBoTwfuzQU0+1f81bPLu77Vdnwmi76qKsjadA50XwClz7od+oxj EDPvboMtVY8nhy1TFnc8Q3SNEQBphN9M6FRGMZQXOjHOfqFVIpjO+qY0ysI/3Naa TiLcTsWpqXqrw622au7NG2zV7gU1ILT/PifPASLD+eh7sbKf0lswsKbJz5eFD37t LFhpFlPe3dJ8S75MqFGwOhkr6xDoVljJ -----END CERTIFICATE-----Generated at Sun May 18 21:29:31 2025 by rpki-client