$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: UJkcPYhpB8ElfeRQamZxurKF/226qKSSCdwFQhlN4XY= Subject key identifier: FD:8E:FA:39:6C:19:3C:D0:67:8B:8E:9B:3D:A3:BC:1F:37:A4:3B:F8 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E1D Signing time: Mon 12 May 2025 17:42:06 +0000 Manifest this update: Mon 12 May 2025 17:42:06 +0000 Manifest next update: Mon 19 May 2025 17:42:06 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: +Y5VGi0K8DBFTJUegS5BCVvQ/vcwNeRqbfq75clzIq4=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: Wqabe9w2Uqip6TelVZ+NxYToXtXUdZ2r3Jhmi1abvwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3626 (0xe2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: May 12 17:42:06 2025 GMT Not After : May 19 17:42:06 2025 GMT Subject: CN=682232ee-4f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:fc:43:cd:ac:48:0d:bf:62:09:6e:80:43: d8:a6:79:21:f2:e4:63:5a:9a:ca:a4:4d:6d:86:91: 06:4b:f9:5d:c9:e1:42:83:29:93:5b:a9:65:8f:59: 92:39:ca:2d:a3:d7:c5:fe:23:a8:d0:41:a3:56:07: 4e:ed:37:96:6f:d4:dd:3a:69:6a:50:47:5b:8b:24: d3:7a:e8:87:29:13:eb:5e:f5:ff:42:4e:8c:69:a8: b4:7b:0e:4e:41:e5:a2:e4:a4:05:f6:c8:d8:a9:3f: 9f:8d:56:f9:23:a7:86:d5:bd:c0:53:f4:44:33:c3: c2:72:c9:2e:23:13:80:5d:eb:f4:db:35:60:91:29: ef:39:24:39:48:d2:23:52:09:f4:a8:66:3f:cb:fb: 3a:a2:57:41:ac:1c:10:fc:2b:e2:83:a0:69:1e:cf: 2b:ec:7d:21:90:bb:b0:96:11:fa:f3:b1:47:b1:cd: c1:18:0f:29:33:91:98:6e:ca:c3:7e:c7:25:b8:34: b3:36:a6:04:70:6e:80:db:30:b8:81:6b:c9:95:6d: a6:2f:a4:2a:8b:59:8c:d2:3e:3b:d1:c8:94:56:f7: be:39:ee:4d:c4:f4:71:10:37:64:67:c5:4d:13:40: f2:d8:d1:8c:2d:d6:11:3f:8e:7c:97:86:5a:d7:92: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8E:FA:39:6C:19:3C:D0:67:8B:8E:9B:3D:A3:BC:1F:37:A4:3B:F8 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:45:12:ff:19:2d:c9:8d:de:e5:9e:58:d1:1c:be:87:86:9c: 1f:8c:6d:2b:3d:ca:69:3b:0c:89:34:0e:90:b5:81:3a:e0:c0: 0b:0d:ef:da:07:7e:58:fe:c6:db:95:41:78:d9:c6:17:b5:5c: 8f:57:d8:c3:62:c2:82:70:a8:1c:dc:db:1f:df:d2:ee:8b:02: ae:84:de:82:08:5c:e6:f9:0f:f6:0e:32:9c:fc:88:b6:79:05: 31:73:7f:09:84:e2:ee:33:ef:2e:21:5f:77:a4:9a:ba:b9:30: 5c:c7:3b:bf:59:d6:42:dc:79:b1:18:73:86:2a:ea:8b:12:55: df:52:71:ca:79:ed:af:e3:65:d5:85:96:55:14:07:af:a4:41: 40:20:42:94:dd:8a:5c:e7:8d:e3:c9:6c:ed:68:b0:3d:19:b0: 83:1c:e4:fe:37:28:53:12:2c:f1:9b:4d:db:7a:86:e9:62:1e: a3:c3:50:72:e9:b0:7f:f7:dc:dd:4f:17:a0:5a:0b:72:2b:96: 70:a3:31:cc:8e:ca:17:18:46:62:47:de:21:c5:3e:88:ca:71: 56:bb:72:20:c1:8d:ea:4d:e0:71:00:a7:1a:83:af:42:fd:5d: 31:48:da:d4:79:49:c2:1f:b8:92:f8:87:85:44:e0:64:67:d4: 39:18:d7:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUwNTEyMTc0MjA2WhcNMjUwNTE5MTc0MjA2WjAYMRYwFAYD VQQDEw02ODIyMzJlZS00ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbL8Q82sSA2/YglugEPYpnkh8uRjWprKpE1thpEGS/ldyeFCgymTW6llj1mS Ocoto9fF/iOo0EGjVgdO7TeWb9TdOmlqUEdbiyTTeuiHKRPrXvX/Qk6Maai0ew5O QeWi5KQF9sjYqT+fjVb5I6eG1b3AU/REM8PCcskuIxOAXev02zVgkSnvOSQ5SNIj Ugn0qGY/y/s6oldBrBwQ/Cvig6BpHs8r7H0hkLuwlhH687FHsc3BGA8pM5GYbsrD fscluDSzNqYEcG6A2zC4gWvJlW2mL6Qqi1mM0j470ciUVve+Oe5NxPRxEDdkZ8VN E0Dy2NGMLdYRP458l4Za15KSQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2O+jls GTzQZ4uOmz2jvB83pDv4MB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNRRL/GS3Jjd7lnljRHL6HhpwfjG0rPcppOwyJNA6QtYE64MALDe/a B35Y/sbblUF42cYXtVyPV9jDYsKCcKgc3Nsf39LuiwKuhN6CCFzm+Q/2DjKc/Ii2 eQUxc38JhOLuM+8uIV93pJq6uTBcxzu/WdZC3HmxGHOGKuqLElXfUnHKee2v42XV hZZVFAevpEFAIEKU3Ypc543jyWztaLA9GbCDHOT+NyhTEizxm03beobpYh6jw1By 6bB/99zdTxegWgtyK5ZwozHMjsoXGEZiR94hxT6IynFWu3IgwY3qTeBxAKcag69C /V0xSNrUeUnCH7iS+IeFROBkZ9Q5GNf1 -----END CERTIFICATE-----Generated at Tue May 13 19:06:47 2025 by rpki-client