$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: Uae+bNDSOiYkyXkB+CN8nH3CK8WMX9v/i6Pktn0R6k0= Subject key identifier: 1E:88:D1:17:F1:BA:F8:98:DA:A9:36:13:69:C0:0C:0E:32:EA:EE:7B Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 0100 Signing time: Mon 05 May 2025 04:07:18 +0000 Manifest this update: Mon 05 May 2025 04:07:18 +0000 Manifest next update: Mon 12 May 2025 04:07:18 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: 00ULgLFW9M9Hmy/QOr0URrp/jTW5kIXQAcIJX8pZSeo=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oOShpLLwZ53WfwV7OnNp44ZUZdSDR6asOa981HQ2+Vc=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: 007pZaHi7dzfk1B80jPKtGC0xcoQZrmeiL6AHZuwDA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: May 5 04:07:18 2025 GMT Not After : May 12 04:07:18 2025 GMT Subject: CN=68183976-8ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:f3:0d:d5:8f:13:ed:79:a5:b6:07:2e:65: 1a:10:89:e8:13:20:4f:dd:8f:4d:13:cc:45:3d:d1: 1f:c0:c4:75:d4:e6:d9:ca:16:91:b2:8a:61:5e:f2: 53:77:48:3f:b9:7c:38:ad:a2:8a:09:2d:9b:93:17: 2d:8e:df:d0:16:0d:91:4d:36:96:35:d7:5a:45:53: 92:70:e8:6e:0b:a8:d3:4f:c7:98:82:74:14:63:a8: f6:f7:0d:82:53:63:ad:09:c0:d7:d0:1a:81:6f:99: be:c9:e7:dd:4f:8a:df:68:8b:50:ff:c3:d1:bf:59: 97:3a:45:a7:8f:58:ca:e7:4b:cd:59:72:b5:ff:17: d5:db:9a:33:ca:fe:ce:e2:cb:5d:c9:a9:3a:c8:9d: 2b:c3:dc:1d:1c:8e:63:a2:5a:e7:1d:a1:7e:26:74: 8f:d5:bc:c2:6a:52:4e:29:89:b2:8d:cc:2d:15:de: e9:a5:8f:eb:37:e9:ef:db:68:6d:12:bd:9d:96:00: fb:d6:79:2c:d9:13:18:3a:74:4c:93:f5:1e:8c:bc: 0e:44:93:2f:4e:b1:d6:81:3e:16:6a:47:4a:78:20: 02:60:8d:b1:92:aa:ec:f9:29:d3:8d:c4:40:d1:82: 27:6a:76:2e:f0:2d:33:5a:73:41:c9:c9:d1:f4:2d: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:88:D1:17:F1:BA:F8:98:DA:A9:36:13:69:C0:0C:0E:32:EA:EE:7B X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8b:d1:4a:02:6f:4a:28:79:0c:1f:80:0b:ca:cf:d5:7d:2e: 6c:c3:f3:28:64:2c:50:69:a6:b0:9b:54:00:f2:95:c8:e9:f1: 27:3e:d0:b6:14:b8:8f:b3:36:36:6e:6f:7e:89:6c:8a:90:4a: 54:d1:49:72:16:f4:1c:32:bf:a2:a4:b7:4d:85:21:cd:58:62: 1a:42:b7:78:b0:76:90:16:cb:0f:d9:3f:ff:f1:e6:bb:28:38: 85:c6:1f:ef:5e:da:af:90:9e:be:1c:88:51:7a:d7:7e:36:62: 89:5d:ed:b3:89:80:c9:96:50:ed:09:74:5e:0e:f9:bb:cb:63: d0:ce:6e:be:9f:6a:e0:76:b1:d3:b9:43:1c:29:55:4f:c5:12: 7c:bb:25:8f:dd:f3:dc:26:a0:f6:90:7f:a8:93:08:2c:73:a8: f9:af:f9:0f:8c:be:42:d2:bc:3b:9f:b3:c1:a1:c5:8d:66:4c: 24:32:8c:1a:85:35:f9:45:f2:08:08:ee:65:53:89:64:6d:70: 29:b6:8f:5a:69:25:58:a9:cf:0d:97:a3:aa:39:f1:64:09:ba: bc:62:4c:f4:26:95:78:76:f6:4c:4d:a2:2a:0a:eb:32:0c:71: ca:de:9a:04:7b:85:c3:5f:ee:e1:ee:20:b8:d5:bc:52:65:db: 1f:36:85:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUwNTA1MDQwNzE4WhcNMjUwNTEyMDQwNzE4WjAYMRYwFAYD VQQDEw02ODE4Mzk3Ni04ZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWfzDdWPE+15pbYHLmUaEInoEyBP3Y9NE8xFPdEfwMR11ObZyhaRsophXvJT d0g/uXw4raKKCS2bkxctjt/QFg2RTTaWNddaRVOScOhuC6jTT8eYgnQUY6j29w2C U2OtCcDX0BqBb5m+yefdT4rfaItQ/8PRv1mXOkWnj1jK50vNWXK1/xfV25ozyv7O 4stdyak6yJ0rw9wdHI5jolrnHaF+JnSP1bzCalJOKYmyjcwtFd7ppY/rN+nv22ht Er2dlgD71nks2RMYOnRMk/UejLwORJMvTrHWgT4WakdKeCACYI2xkqrs+SnTjcRA 0YInanYu8C0zWnNBycnR9C1BCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6I0Rfx uviY2qk2E2nADA4y6u57MB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCci9FKAm9KKHkMH4ALys/VfS5sw/MoZCxQaaawm1QA8pXI6fEnPtC2 FLiPszY2bm9+iWyKkEpU0UlyFvQcMr+ipLdNhSHNWGIaQrd4sHaQFssP2T//8ea7 KDiFxh/vXtqvkJ6+HIhRetd+NmKJXe2ziYDJllDtCXReDvm7y2PQzm6+n2rgdrHT uUMcKVVPxRJ8uyWP3fPcJqD2kH+okwgsc6j5r/kPjL5C0rw7n7PBocWNZkwkMowa hTX5RfIICO5lU4lkbXApto9aaSVYqc8Nl6OqOfFkCbq8Ykz0JpV4dvZMTaIqCusy DHHK3poEe4XDX+7h7iC41bxSZdsfNoXZ -----END CERTIFICATE-----Generated at Mon May 5 07:33:51 2025 by rpki-client