$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: +F8Jdq8rYtOPaAniHleRWXJlHutLgK9ZNJvhwfza1+Q= Subject key identifier: 3A:EA:05:1E:06:4E:D5:89:8D:77:7B:93:9B:00:35:E2:4C:5D:3C:25 Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: 78 Signing time: Fri 09 May 2025 05:46:06 +0000 Manifest this update: Fri 09 May 2025 05:46:06 +0000 Manifest next update: Fri 16 May 2025 05:46:06 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: BxiCiF8fh+n/FtpxA+gxGmCEuXMkp8HFt3EVK8Q0FkA=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: dzWi4sOLyrk+Z9rQ/p2wnjoYw1tNJYcoqxBuYKWjT/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: May 9 05:46:06 2025 GMT Not After : May 16 05:46:06 2025 GMT Subject: CN=681d969e-8daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:85:fd:85:a1:d5:c4:0b:10:74:7a:a4:0a: 5f:a8:dd:b0:6e:a4:e7:44:f1:7b:58:75:24:0f:22: cd:61:b2:ee:d6:c7:b0:ca:e1:34:17:15:15:e4:fb: 39:9f:58:49:44:0f:9f:13:5c:4f:91:b5:8c:71:cf: 31:83:e3:c4:d8:44:a7:4f:cc:95:f5:1f:8b:d5:60: d1:9d:78:71:59:54:9b:69:59:3f:12:fb:53:e7:46: e8:c8:c1:26:49:18:7d:53:10:fa:52:c0:a2:ca:67: 2a:0c:08:21:8d:a6:a8:ce:f3:b9:74:4c:88:ab:9f: 8b:68:7b:92:df:9f:57:ca:6f:4d:6b:6f:21:02:70: 22:1d:d7:46:25:e0:cd:8e:bc:9f:f7:11:1e:0e:27: 33:80:db:fa:35:e4:f0:c2:9c:9b:ea:44:4e:67:b1: 16:f0:ec:47:41:1e:e0:8d:af:7d:eb:a6:b4:d9:d8: 1c:e8:b4:8c:f4:88:43:56:43:91:3b:9e:43:7e:25: 30:1e:b1:b9:c2:b5:60:c4:cc:ff:be:cc:92:eb:53: 96:2c:97:1d:7b:11:27:73:6e:8d:dc:d1:9d:e1:12: 5f:26:8d:b8:e4:77:9a:e3:0e:0d:20:81:3c:d0:b0: d7:d3:28:13:b2:9d:33:7d:91:05:25:c3:e2:ba:d2: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:05:1E:06:4E:D5:89:8D:77:7B:93:9B:00:35:E2:4C:5D:3C:25 X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a5:72:c1:7d:45:f3:0a:02:e0:0c:53:7b:14:cb:3a:16:50: 58:8d:4b:b4:7a:cf:38:76:47:b1:22:9c:de:d7:59:f5:68:9a: 88:a2:17:af:e6:68:01:d4:32:f2:32:9e:e8:eb:02:db:9f:01: c3:46:5a:03:2a:cb:74:db:33:a1:1b:6b:3f:13:67:5c:45:b8: 7c:25:fb:55:79:19:64:62:d5:08:b3:54:d5:08:61:d9:50:66: a0:79:23:10:eb:48:bc:ce:03:0e:94:c0:b2:cb:df:f5:ed:86: d0:dc:50:fb:a4:f0:f9:82:54:89:21:47:5b:23:6d:a1:1d:b2: 8d:ad:d4:5f:f4:49:5a:e4:83:bb:f6:58:1c:e1:e2:fd:70:d0: 3a:ac:e9:5e:1d:14:8c:0e:09:6a:78:91:fb:84:42:7c:86:19: be:bd:76:c1:75:ac:d6:3b:f8:da:57:3d:7d:63:58:c2:0f:f1: 65:5f:81:0e:ee:62:77:6d:7d:82:3b:c4:21:d6:3e:9b:40:8f: ad:ad:d6:e4:74:db:f0:37:35:12:93:fe:44:28:14:be:98:9e: 6a:60:c4:2d:b1:63:49:d6:41:20:8f:2c:89:95:94:21:09:28: 5c:ab:fc:01:6f:88:21:ef:49:bb:22:8f:1b:c3:86:48:b1:85: 39:af:5b:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Rjc1OTExMC8GA1UEBRMoNjQxMEIzNUFEMUE4RTkxRkVCRDg1QjQ0Mzc2NjhDMkE2 OURBQTdEQTAeFw0yNTA1MDkwNTQ2MDZaFw0yNTA1MTYwNTQ2MDZaMBgxFjAUBgNV BAMTDTY4MWQ5NjllLThkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt/oX9haHVxAsQdHqkCl+o3bBupOdE8XtYdSQPIs1hsu7Wx7DK4TQXFRXk+zmf WElED58TXE+RtYxxzzGD48TYRKdPzJX1H4vVYNGdeHFZVJtpWT8S+1PnRujIwSZJ GH1TEPpSwKLKZyoMCCGNpqjO87l0TIirn4toe5Lfn1fKb01rbyECcCId10Yl4M2O vJ/3ER4OJzOA2/o15PDCnJvqRE5nsRbw7EdBHuCNr33rprTZ2BzotIz0iENWQ5E7 nkN+JTAesbnCtWDEzP++zJLrU5Yslx17ESdzbo3c0Z3hEl8mjbjkd5rjDg0ggTzQ sNfTKBOynTN9kQUlw+K60rB1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOuoFHgZO 1YmNd3uTmwA14kxdPCUwHwYDVR0jBBgwFoAUZBCzWtGo6R/r2FtEN2aMKmnap9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNzU5LzEwNkNGRDY0NzZE NzExRUZBODRBNDcxMkM0RjlBRTAyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkJDeld0R282Ul9yMkZ0RU4yYU1LbW5hcDlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG NzU5LzEwNkNGRDY0NzZENzExRUZBODRBNDcxMkM0RjlBRTAyL1pCQ3pXdEdvNlJf cjJGdEVOMmFNS21uYXA5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGlcsF9RfMKAuAMU3sUyzoWUFiNS7R6zzh2R7EinN7XWfVomoiiF6/m aAHUMvIynujrAtufAcNGWgMqy3TbM6Ebaz8TZ1xFuHwl+1V5GWRi1QizVNUIYdlQ ZqB5IxDrSLzOAw6UwLLL3/XthtDcUPuk8PmCVIkhR1sjbaEdso2t1F/0SVrkg7v2 WBzh4v1w0Dqs6V4dFIwOCWp4kfuEQnyGGb69dsF1rNY7+NpXPX1jWMIP8WVfgQ7u YndtfYI7xCHWPptAj62t1uR02/A3NRKT/kQoFL6YnmpgxC2xY0nWQSCPLImVlCEJ KFyr/AFviCHvSbsijxvDhkixhTmvW6k= -----END CERTIFICATE-----Generated at Fri May 9 07:57:47 2025 by rpki-client