$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: FZ0L8Ij+St1tR9Lv0XAgmhCgIhApztnWF+5Ot+TUA8s= Subject key identifier: 3C:D9:A2:0B:A1:8D:30:BE:BB:8F:C7:5D:F0:C5:3D:02:47:F5:05:04 Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 08B7 Signing time: Fri 16 May 2025 20:47:45 +0000 Manifest this update: Fri 16 May 2025 20:47:44 +0000 Manifest next update: Fri 23 May 2025 20:47:44 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: yIwcGeLnigHXZQyhB0dO8NxlNDsYddtBtrP4ZRzSylk=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 7qPOEKIxNomgCIWc/yHC1zpaUnhuR5qP+cJAyuTEkQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: May 16 20:47:44 2025 GMT Not After : May 23 20:47:44 2025 GMT Subject: CN=6827a470-5e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:c3:a4:f1:b7:98:c4:23:26:2d:4f:9a:4a: f2:0c:e6:2b:42:38:40:83:92:f0:11:25:36:c4:4b: 6f:f5:3e:7c:e5:6f:17:68:83:ec:b2:ae:f7:e1:e3: cb:13:64:86:f2:eb:f9:b2:21:f9:ca:73:0f:7b:56: 7f:d0:a4:d3:1c:d5:17:de:dc:50:a8:6e:1e:26:9e: fc:d3:37:b9:4c:4c:d8:83:49:44:ed:90:9b:c2:47: a5:4e:3d:1a:b1:f2:02:78:ee:d5:10:5c:e3:30:d1: 6c:6a:bc:97:63:57:52:f6:81:17:26:17:52:c9:f1: 8f:ed:b0:82:8e:c6:de:03:53:64:c9:6a:be:88:e7: 58:9f:8c:cf:a7:98:87:39:65:da:33:93:d3:5a:01: a3:09:96:48:b4:a9:76:17:63:8f:57:05:05:a9:92: 44:a6:8d:c6:8d:41:52:fe:b7:64:57:1b:9b:41:f1: 79:b6:37:3c:2e:50:c4:5c:53:60:37:46:52:bb:3f: 19:bd:30:37:32:a2:49:41:1d:cd:7c:9d:7d:f4:47: 83:ca:b2:1e:ba:57:ff:85:82:12:81:29:37:2b:85: 95:bc:0d:64:7e:92:b3:19:60:6b:8b:65:10:40:cb: cd:78:50:91:fa:6b:2e:c6:e4:73:3b:28:cf:82:dc: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D9:A2:0B:A1:8D:30:BE:BB:8F:C7:5D:F0:C5:3D:02:47:F5:05:04 X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:8a:3e:12:f2:91:41:d2:93:56:b8:ed:11:84:52:69:0a:a7: a5:d2:d3:d8:cd:db:d7:56:d6:9c:4e:2c:50:ec:96:a9:91:d0: 2d:0f:6e:65:6e:7d:e8:96:6c:6d:57:92:f8:04:06:19:c9:88: f9:19:41:1e:3d:8b:eb:fb:9e:17:69:5f:2b:43:ec:bd:0d:53: dd:79:a9:e6:4e:54:89:d6:27:28:0c:98:5e:c8:5a:e3:35:69: 50:d9:0c:0a:b4:fb:89:41:34:20:39:72:d9:97:a3:bb:8b:88: e6:45:51:98:3b:25:34:c0:44:b5:63:3f:9a:e3:69:60:2f:7c: 5c:f5:fb:ab:54:22:71:61:bf:88:6a:5e:2c:e3:14:b9:4e:c9: 4e:2f:96:88:ff:df:7f:fa:05:86:bb:f3:01:60:ee:e4:f8:c8: 19:a7:22:9b:46:03:65:52:e3:81:92:e4:a4:10:29:56:c3:9d: ce:f7:2c:2a:1b:29:43:56:61:41:21:80:6a:41:f4:b5:5c:e4: da:da:33:47:da:f8:b3:6b:14:bc:52:ad:17:2a:3a:41:a1:d6: 43:60:37:23:79:3d:9a:4b:9f:3e:e1:70:76:8e:1a:c0:06:ca: 12:e1:09:4a:c4:37:0e:c0:31:5e:11:ed:9f:83:08:87:d0:2c: 9d:48:ba:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjUwNTE2MjA0NzQ0WhcNMjUwNTIzMjA0NzQ0WjAYMRYwFAYD VQQDEw02ODI3YTQ3MC01ZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47LDpPG3mMQjJi1PmkryDOYrQjhAg5LwESU2xEtv9T585W8XaIPssq734ePL E2SG8uv5siH5ynMPe1Z/0KTTHNUX3txQqG4eJp780ze5TEzYg0lE7ZCbwkelTj0a sfICeO7VEFzjMNFsaryXY1dS9oEXJhdSyfGP7bCCjsbeA1NkyWq+iOdYn4zPp5iH OWXaM5PTWgGjCZZItKl2F2OPVwUFqZJEpo3GjUFS/rdkVxubQfF5tjc8LlDEXFNg N0ZSuz8ZvTA3MqJJQR3NfJ199EeDyrIeulf/hYISgSk3K4WVvA1kfpKzGWBri2UQ QMvNeFCR+msuxuRzOyjPgtxk/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzZoguh jTC+u4/HXfDFPQJH9QUEMB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBij4S8pFB0pNWuO0RhFJpCqel0tPYzdvXVtacTixQ7JapkdAtD25l bn3olmxtV5L4BAYZyYj5GUEePYvr+54XaV8rQ+y9DVPdeanmTlSJ1icoDJheyFrj NWlQ2QwKtPuJQTQgOXLZl6O7i4jmRVGYOyU0wES1Yz+a42lgL3xc9furVCJxYb+I al4s4xS5TslOL5aI/99/+gWGu/MBYO7k+MgZpyKbRgNlUuOBkuSkEClWw53O9ywq GylDVmFBIYBqQfS1XOTa2jNH2vizaxS8Uq0XKjpBodZDYDcjeT2aS58+4XB2jhrA BsoS4QlKxDcOwDFeEe2fgwiH0CydSLqj -----END CERTIFICATE-----Generated at Sat May 17 16:50:42 2025 by rpki-client