$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: tfFDQ3/Xm8qVaGFYcBpgIWVzZFZEej20eh08qeiGUT0= Subject key identifier: C3:CB:94:F3:D6:BB:F2:AC:D2:33:CE:A2:CC:53:C5:54:94:75:20:C8 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: FF Signing time: Sun 11 May 2025 04:12:21 +0000 Manifest this update: Sun 11 May 2025 04:12:20 +0000 Manifest next update: Sun 18 May 2025 04:12:20 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: yNNh4+HTAsArXNczIsple8Vlhm0/XLvDr7kPjeSpPw4=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: May 11 04:12:20 2025 GMT Not After : May 18 04:12:20 2025 GMT Subject: CN=682023a4-83a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:35:5f:9e:24:95:76:df:3c:c1:0e:b0:74: 4a:6e:08:07:91:5c:bd:41:f1:7d:68:e2:ba:ec:6c: 0f:f2:35:8c:5e:47:9a:3a:e9:d1:68:c6:de:fd:56: 88:18:1f:20:a9:f4:f6:fa:e9:23:71:89:5e:85:04: 27:4a:20:b5:e4:f2:4a:97:2b:d8:8e:e4:f6:33:c2: 8e:52:24:88:29:d6:aa:87:8e:0a:f2:de:a0:d2:59: c0:6d:35:5a:b6:6c:ea:22:81:71:19:1c:3a:ec:69: f9:8c:05:ec:02:53:3a:fd:ff:f6:af:91:00:48:74: 34:0a:bb:d7:49:48:8a:ff:21:18:2e:c9:23:ab:36: e9:06:b3:42:d2:42:43:58:4a:18:2f:6c:58:d9:ba: 2a:52:28:0c:16:4a:84:43:73:7d:f9:7a:c4:0b:e8: 48:95:50:49:cf:96:de:de:96:11:b0:ee:e7:ef:1b: c8:3e:68:f3:1c:00:12:d5:7b:fc:e1:8e:5c:3c:fb: c1:3a:8d:d9:1c:c4:b1:16:e0:cb:b8:c2:28:06:d8: c3:42:2d:a0:3b:63:be:39:f4:64:a6:27:3c:61:17: 8c:c5:9c:22:70:4a:6a:08:6a:98:8a:3d:9d:52:61: d2:63:03:89:ea:dd:0f:ff:02:48:fd:1e:82:b1:2d: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:94:F3:D6:BB:F2:AC:D2:33:CE:A2:CC:53:C5:54:94:75:20:C8 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ee:3c:3e:9a:bc:a5:6a:9d:25:06:5b:43:90:53:a0:62:3b: 4b:d2:27:7d:17:d9:c0:5e:e0:8b:e2:60:13:7d:2d:af:33:dc: 39:2e:eb:d4:ba:c6:dc:bd:57:84:a3:d8:42:53:67:e5:03:7b: f8:20:9c:3a:1a:2c:78:aa:03:83:46:a1:92:12:68:db:67:c7: 4a:02:8b:0b:3a:58:d9:33:c1:30:d6:f8:bf:66:f5:5a:2b:7a: 73:86:e5:82:9e:eb:c4:48:35:e8:dc:1e:3b:84:84:dc:3e:c9: 8f:ce:12:07:2a:2a:f0:8b:88:96:07:b9:9f:d0:f5:04:3f:0b: ef:31:5f:64:c1:a1:7e:f5:84:67:78:37:54:c2:53:e2:2b:8d: 0a:a8:e8:54:53:e2:55:4f:01:12:17:df:b3:d8:24:b7:8d:16: 34:85:5b:6c:d2:c6:59:a9:67:7e:36:6b:c5:e1:1e:39:5f:b0: 89:b2:35:eb:c5:be:ce:9a:93:4b:40:b7:81:b1:c4:4a:14:c0: f5:27:ad:e6:63:6b:a6:05:2c:be:6d:f1:11:34:03:70:ee:1f: 41:cd:85:a1:b8:f3:bb:2d:3c:4c:8d:28:3e:91:39:33:62:d7: 94:a9:4b:df:bf:7f:2a:72:cd:88:05:c0:81:86:77:1f:c6:38: fa:38:20:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUwNTExMDQxMjIwWhcNMjUwNTE4MDQxMjIwWjAYMRYwFAYD VQQDEw02ODIwMjNhNC04M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VY1X54klXbfPMEOsHRKbggHkVy9QfF9aOK67GwP8jWMXkeaOunRaMbe/VaI GB8gqfT2+ukjcYlehQQnSiC15PJKlyvYjuT2M8KOUiSIKdaqh44K8t6g0lnAbTVa tmzqIoFxGRw67Gn5jAXsAlM6/f/2r5EASHQ0CrvXSUiK/yEYLskjqzbpBrNC0kJD WEoYL2xY2boqUigMFkqEQ3N9+XrEC+hIlVBJz5be3pYRsO7n7xvIPmjzHAAS1Xv8 4Y5cPPvBOo3ZHMSxFuDLuMIoBtjDQi2gO2O+OfRkpic8YReMxZwicEpqCGqYij2d UmHSYwOJ6t0P/wJI/R6CsS2EGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPLlPPW u/Ks0jPOosxTxVSUdSDIMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA87jw+mrylap0lBltDkFOgYjtL0id9F9nAXuCL4mATfS2vM9w5LuvU usbcvVeEo9hCU2flA3v4IJw6Gix4qgODRqGSEmjbZ8dKAosLOljZM8Ew1vi/ZvVa K3pzhuWCnuvESDXo3B47hITcPsmPzhIHKirwi4iWB7mf0PUEPwvvMV9kwaF+9YRn eDdUwlPiK40KqOhUU+JVTwESF9+z2CS3jRY0hVts0sZZqWd+NmvF4R45X7CJsjXr xb7OmpNLQLeBscRKFMD1J63mY2umBSy+bfERNANw7h9BzYWhuPO7LTxMjSg+kTkz YteUqUvfv38qcs2IBcCBhncfxjj6OCCi -----END CERTIFICATE-----Generated at Sun May 11 15:31:04 2025 by rpki-client