$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft File: zFYVfHLcxpczY2dD21AIdZMtpB8.mft (raw, json) Hash identifier: 5xLMIYm+UA6Dxkj+f9Smz48OIsLkAXfgXnKcZ7AA47w= Subject key identifier: CC:C7:47:A4:B8:F1:21:CD:6D:F7:67:62:AF:48:DC:14:F5:DD:6E:E4 Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F Certificate issuer: /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft Manifest number: 0616 Signing time: Sat 10 May 2025 22:24:38 +0000 Manifest this update: Sat 10 May 2025 22:24:38 +0000 Manifest next update: Sat 17 May 2025 22:24:38 +0000 Files and hashes: 1: zFYVfHLcxpczY2dD21AIdZMtpB8.crl (hash: M9zjnrPnCcMJv2IlrFw9fUE+eMjbLe9lPGOkeWIZbZc=) 2: A210E7309CAB11EBAB87D43AC4F9AE02.roa (hash: G4Iff29ujs2wSeu37iPDIUnNuvGFMJft5LK0116SXEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6CD6, serialNumber=CC56157C72DCC69733636743DB500875932DA41F Validity Not Before: May 10 22:24:38 2025 GMT Not After : May 17 22:24:38 2025 GMT Subject: CN=681fd226-c86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:62:04:d1:c7:85:4c:13:ac:39:ea:b1:5c: cc:49:89:18:cf:24:cc:18:0b:6d:8a:e8:52:40:66: 8f:57:a0:ac:a1:f7:91:8d:0f:cc:5a:51:a4:01:26: 53:1c:8f:f2:e1:fa:ba:0e:d2:47:29:c4:e0:ca:7e: 04:ee:ce:b1:8a:6a:62:a3:10:4c:98:f9:19:07:86: 7c:df:87:d7:6c:f5:13:b0:72:20:c5:41:da:23:23: ff:1b:c2:09:65:74:d8:c9:ac:a6:5c:b5:12:be:14: a2:35:5a:82:c0:21:fd:cb:a5:94:fb:f8:38:51:fa: 76:80:d7:00:3c:11:36:48:e3:28:ae:be:4a:45:16: 24:8e:fb:71:14:3e:00:e3:b2:f7:4a:41:6c:81:8a: 5f:1b:e1:77:7c:c6:a0:59:0e:d2:6f:56:50:a8:21: b5:af:96:b6:a8:d6:a7:65:d3:5c:53:b6:20:1c:e8: 49:1e:e5:1b:e6:eb:bc:51:0a:fc:39:23:51:9e:aa: 52:14:5d:63:f0:c7:c3:1f:0d:f8:57:53:c1:4d:33: b0:b0:55:cf:d4:81:81:ca:9e:13:c4:d3:4b:e7:89: 28:87:97:af:39:f3:22:15:9a:20:08:09:34:f6:55: f2:ed:88:c6:fc:1b:8a:75:ae:88:8c:cf:9c:2a:a3: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C7:47:A4:B8:F1:21:CD:6D:F7:67:62:AF:48:DC:14:F5:DD:6E:E4 X509v3 Authority Key Identifier: keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:76:01:23:64:9b:7b:23:c3:25:f6:50:36:83:33:22:71:2e: 2b:d5:b0:88:ff:e3:19:2c:fc:99:24:96:4d:5c:41:ac:af:a0: 69:13:00:36:a8:67:c3:b6:34:a2:d6:73:54:e9:99:99:ac:7a: a2:8f:75:2f:a6:4a:49:b1:36:38:2a:24:d9:8b:2d:b5:1b:9f: 3d:67:71:fd:f6:3c:f4:78:c0:33:5f:4f:e1:1e:c1:04:d9:72: cd:b9:15:a8:41:70:dc:d2:06:ba:83:ae:dc:e4:c5:c9:95:7b: 4a:0f:a7:af:65:77:12:3b:83:07:80:cd:a3:1e:bc:cd:3e:1b: 0b:60:e5:40:8f:e5:98:3c:d3:21:4a:18:3d:be:f9:9a:42:52: 0a:8e:83:a2:81:7e:8f:49:d5:dd:d3:62:a5:b8:94:51:12:f8: 7c:fe:15:d2:b9:b8:40:c9:4a:43:05:98:2c:c2:69:41:4c:ba: 0c:98:64:aa:8c:78:c3:07:f3:78:99:19:71:0c:7d:46:68:a9: ed:54:3e:95:c8:74:d5:7c:f5:17:50:b8:16:e2:bb:80:ec:1a: f1:fd:9b:7e:79:12:28:98:35:77:6f:a6:d1:4e:46:46:c7:2a: 6e:3b:da:b2:b4:13:72:17:13:22:a1:2e:11:2f:dc:7d:49:4f: 45:cf:61:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZDRDYxMTAvBgNVBAUTKENDNTYxNTdDNzJEQ0M2OTczMzYzNjc0M0RCNTAwODc1 OTMyREE0MUYwHhcNMjUwNTEwMjIyNDM4WhcNMjUwNTE3MjIyNDM4WjAYMRYwFAYD VQQDEw02ODFmZDIyNi1jODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9diBNHHhUwTrDnqsVzMSYkYzyTMGAttiuhSQGaPV6CsofeRjQ/MWlGkASZT HI/y4fq6DtJHKcTgyn4E7s6ximpioxBMmPkZB4Z834fXbPUTsHIgxUHaIyP/G8IJ ZXTYyaymXLUSvhSiNVqCwCH9y6WU+/g4Ufp2gNcAPBE2SOMorr5KRRYkjvtxFD4A 47L3SkFsgYpfG+F3fMagWQ7Sb1ZQqCG1r5a2qNanZdNcU7YgHOhJHuUb5uu8UQr8 OSNRnqpSFF1j8MfDHw34V1PBTTOwsFXP1IGByp4TxNNL54koh5evOfMiFZogCAk0 9lXy7YjG/BuKda6IjM+cKqMaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzHR6S4 8SHNbfdnYq9I3BT13W7kMB8GA1UdIwQYMBaAFMxWFXxy3MaXM2NnQ9tQCHWTLaQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkNENi82NUU2REJENjlD QTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hwY3pZMmREMjFBSWRaTXRw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWVZmSExjeHBjelkyZEQyMUFJZFpNdHBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkNENi82NUU2REJENjlDQTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hw Y3pZMmREMjFBSWRaTXRwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBdgEjZJt7I8Ml9lA2gzMicS4r1bCI/+MZLPyZJJZNXEGsr6BpEwA2 qGfDtjSi1nNU6ZmZrHqij3UvpkpJsTY4KiTZiy21G589Z3H99jz0eMAzX0/hHsEE 2XLNuRWoQXDc0ga6g67c5MXJlXtKD6evZXcSO4MHgM2jHrzNPhsLYOVAj+WYPNMh Shg9vvmaQlIKjoOigX6PSdXd02KluJRREvh8/hXSubhAyUpDBZgswmlBTLoMmGSq jHjDB/N4mRlxDH1GaKntVD6VyHTVfPUXULgW4ruA7Brx/Zt+eRIomDV3b6bRTkZG xypuO9qytBNyFxMioS4RL9x9SU9Fz2HQ -----END CERTIFICATE-----Generated at Mon May 12 12:52:25 2025 by rpki-client