$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: yxXkaicveCuh/15dSrsnI/sl2pOP8WzqFq/pB//j6H8= Subject key identifier: 72:23:CE:60:32:70:7D:DB:A9:0D:4E:6D:4E:25:EA:0B:3E:59:D7:06 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: 78 Signing time: Tue 13 May 2025 05:55:11 +0000 Manifest this update: Tue 13 May 2025 05:55:11 +0000 Manifest next update: Tue 20 May 2025 05:55:11 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: 9xWMIqSkthJwws9TzZ/KfJVs7J7d3XbFqrTwykk/qGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: May 13 05:55:11 2025 GMT Not After : May 20 05:55:11 2025 GMT Subject: CN=6822debf-7bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:fe:85:b7:23:86:8e:cc:04:3a:ca:81:b6: 0c:a6:6c:f1:7f:25:58:71:de:6e:10:bc:d9:7f:50: 0c:a0:18:40:67:5a:a7:c1:12:fc:5a:7d:29:f7:ca: 6f:76:5b:ca:95:d3:69:c8:e2:af:9f:31:c9:49:07: 77:8f:5c:d4:b2:12:2e:34:8f:62:80:22:11:0a:8e: a0:d3:64:f0:bc:6a:90:f2:06:14:4d:bb:d9:ed:80: c9:e9:f6:ec:41:ac:a6:6d:88:06:95:e1:31:55:c2: 9d:56:5f:c3:0f:1b:75:54:7e:0d:dc:00:a6:80:93: 9f:c6:91:e8:91:56:49:b2:69:d1:f5:23:f8:9f:2c: 8a:12:2c:f1:83:03:65:f8:43:83:3e:4f:86:e6:d7: 17:01:41:66:8f:07:b2:d6:7b:96:f1:43:d5:81:29: f1:bf:11:11:29:f2:d0:d5:69:89:eb:65:9a:ad:58: 84:b9:14:e9:0c:3f:d8:68:16:4c:1a:69:b5:a7:0a: 2d:41:21:d5:29:17:0d:fa:39:38:8f:ab:8c:51:64: 00:24:64:67:37:bd:fe:00:34:fd:c7:6d:9d:b6:af: 1b:9f:f9:d6:d0:3b:e2:c1:7d:7a:f2:f9:e1:48:56: a9:c9:6f:38:b2:3f:d5:ca:5d:f5:c1:22:28:12:59: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:23:CE:60:32:70:7D:DB:A9:0D:4E:6D:4E:25:EA:0B:3E:59:D7:06 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:24:c9:99:4c:a3:48:34:37:31:dc:ca:e4:50:51:e9:16:9f: d3:5d:e9:97:a9:f2:4d:00:8e:35:9f:ae:d3:62:bd:78:dd:83: b8:ff:76:2e:26:a1:91:1e:c1:10:5e:56:c2:49:2c:0b:94:b1: 66:c2:8c:ac:8b:fc:89:58:9b:5c:4e:5d:2c:2c:81:10:8f:07: 18:80:c1:a0:64:a7:77:5e:aa:2c:32:ed:2f:30:67:4b:ae:10: 55:bb:c2:dc:b3:28:f9:49:e2:02:e6:cb:42:4f:af:27:37:3b: e5:67:19:38:91:7b:a5:0d:0c:9c:f8:63:df:9c:3e:41:7d:44: fd:7c:37:23:fe:46:d4:fe:a7:ee:9f:60:2f:58:75:38:d4:05: d9:b2:46:08:d0:2d:72:4b:aa:9d:fe:3d:62:8e:0c:56:4c:3f: 79:8a:4d:b1:16:54:e8:71:8a:47:9c:3c:c1:24:dc:8d:9a:a6: 49:70:82:5e:e2:44:fc:0f:d9:ff:89:3a:7e:36:3c:36:63:63: 1a:70:33:e7:cc:67:08:a4:3c:c6:00:d6:7e:73:cc:3c:78:f6: ef:11:11:df:14:b2:93:82:20:a1:59:f8:ae:0b:f8:e8:47:bd: 96:a6:f5:a5:c5:08:a7:3d:6e:bc:b8:4c:58:67:79:14:4f:3e: 7e:ad:c4:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoNjQzMTk1NjUyQjIyMERDQjIyREE5MUQwN0ZENjNEQTY5 RUI4MTRENTAeFw0yNTA1MTMwNTU1MTFaFw0yNTA1MjAwNTU1MTFaMBgxFjAUBgNV BAMTDTY4MjJkZWJmLTdiZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUgP6FtyOGjswEOsqBtgymbPF/JVhx3m4QvNl/UAygGEBnWqfBEvxafSn3ym92 W8qV02nI4q+fMclJB3ePXNSyEi40j2KAIhEKjqDTZPC8apDyBhRNu9ntgMnp9uxB rKZtiAaV4TFVwp1WX8MPG3VUfg3cAKaAk5/GkeiRVkmyadH1I/ifLIoSLPGDA2X4 Q4M+T4bm1xcBQWaPB7LWe5bxQ9WBKfG/EREp8tDVaYnrZZqtWIS5FOkMP9hoFkwa abWnCi1BIdUpFw36OTiPq4xRZAAkZGc3vf4ANP3HbZ22rxuf+dbQO+LBfXry+eFI VqnJbziyP9XKXfXBIigSWdl3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUciPOYDJw fdupDU5tTiXqCz5Z1wYwHwYDVR0jBBgwFoAUZDGVZSsiDcsi2pHQf9Y9pp64FNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzU1NUIwNDBBNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRHVlpTc2lEY3NpMnBIUWY5WTlwcDY0Rk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzU1NUIwNDBBNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNz aTJwSFFmOVk5cHA2NEZOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIkyZlMo0g0NzHcyuRQUekWn9Nd6Zep8k0AjjWfrtNivXjdg7j/di4m oZEewRBeVsJJLAuUsWbCjKyL/IlYm1xOXSwsgRCPBxiAwaBkp3deqiwy7S8wZ0uu EFW7wtyzKPlJ4gLmy0JPryc3O+VnGTiRe6UNDJz4Y9+cPkF9RP18NyP+RtT+p+6f YC9YdTjUBdmyRgjQLXJLqp3+PWKODFZMP3mKTbEWVOhxikecPMEk3I2apklwgl7i RPwP2f+JOn42PDZjYxpwM+fMZwikPMYA1n5zzDx49u8REd8UspOCIKFZ+K4L+OhH vZam9aXFCKc9bry4TFhneRRPPn6txAg= -----END CERTIFICATE-----Generated at Tue May 13 16:03:47 2025 by rpki-client