$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: 1P2ayHM6x69nmfxsVhVFqBGQ8HCCK0kTSr1CiPn4ryU= Subject key identifier: AF:BB:48:F3:85:38:7D:91:A8:67:69:99:31:B1:36:D1:0A:87:8C:09 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 084A Signing time: Sat 10 May 2025 20:27:57 +0000 Manifest this update: Sat 10 May 2025 20:27:56 +0000 Manifest next update: Sat 17 May 2025 20:27:56 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: yh/YgC+yQIX07TZM93gAW71hE8dtp9ac+p98L2jQLh0=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: f9tQPToB76p1pPXGROGF6QphrQQvfLBw4Gw3PGjwt1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: May 10 20:27:56 2025 GMT Not After : May 17 20:27:56 2025 GMT Subject: CN=681fb6cd-14b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:63:4d:36:5b:58:0f:63:d5:06:2d:fd:52:7e: cd:2b:0c:24:6e:5b:ad:81:88:10:5f:15:3c:7b:2d: b1:a4:1c:ce:3b:e9:d6:fd:c6:a6:40:4e:38:cc:5d: 1e:a8:62:2e:7c:62:24:18:a8:12:6a:b3:59:86:af: c9:bd:06:48:6b:f9:9b:0f:22:0a:4b:9b:29:f1:d2: c0:00:e6:05:4e:a0:a1:95:50:46:46:ce:85:25:14: a6:e2:b5:2a:b8:c0:ad:b8:63:29:85:68:11:65:07: 6d:99:f5:7b:fe:cf:3b:7c:22:21:9c:56:4c:70:35: cf:a1:bf:9d:8f:d1:0b:52:d7:ab:85:c1:7a:7c:6f: a1:83:37:00:60:93:10:c1:a2:88:af:d5:09:13:8d: 43:7c:82:52:40:6d:87:6a:74:c3:80:8b:a2:58:bd: 59:e9:59:d2:c2:97:ae:85:47:1f:d8:62:1d:70:46: 8a:d1:1d:ab:70:4e:c0:73:7b:a4:df:7d:24:ea:a9: 1e:65:43:84:52:54:38:e9:55:cf:06:38:c6:00:98: 39:87:a4:d3:72:a4:a1:25:cb:77:1a:a0:17:67:01: b7:6d:ff:34:c8:a5:a9:b0:10:dc:55:b5:73:4a:d7: ca:66:8e:03:07:ed:9a:b4:1b:ec:2f:9f:51:9d:53: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BB:48:F3:85:38:7D:91:A8:67:69:99:31:B1:36:D1:0A:87:8C:09 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:7f:b1:2c:8c:95:55:66:f4:c0:9e:90:ff:6c:38:44:8a:ca: 32:21:c6:43:00:d7:3d:f3:06:29:d9:27:a8:5e:27:e0:52:77: e6:4f:3c:13:0a:0f:21:76:a8:ae:15:6e:5e:3e:8f:9e:78:65: a0:6f:03:9a:55:7f:0a:a2:5d:52:dd:36:34:2b:c0:32:10:aa: 40:aa:38:0a:c4:b5:8d:fc:e4:af:36:d1:9e:4e:2c:65:05:6d: 5a:14:66:05:f4:2b:1d:e4:8d:15:2d:ad:64:0e:a0:19:96:25: eb:25:4c:ec:a7:56:c5:a6:99:8c:af:a2:fa:b2:2f:39:cf:46: 53:8a:52:7f:c2:16:49:46:e7:ea:f2:17:b3:fe:98:48:92:1a: 4b:9f:5d:02:a9:86:f8:3d:d7:5f:20:a0:40:c2:24:75:02:7b: af:32:86:8c:6d:27:de:98:80:34:03:20:c8:20:bf:a5:91:e7: dc:d2:8b:d7:a1:33:7c:84:2e:2e:37:b2:76:1a:3c:54:4f:7d: 43:6d:dd:28:15:ca:4f:41:5f:21:e2:c6:e3:39:23:b3:cb:50: b1:c4:42:9b:44:6f:bd:51:12:5f:36:cf:e4:94:ff:c9:d2:c9: 16:68:ea:f2:d3:d4:ea:a0:1e:c4:b8:a2:c5:90:f0:93:ba:16: 73:23:d2:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUwNTEwMjAyNzU2WhcNMjUwNTE3MjAyNzU2WjAYMRYwFAYD VQQDEw02ODFmYjZjZC0xNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GNNNltYD2PVBi39Un7NKwwkblutgYgQXxU8ey2xpBzOO+nW/camQE44zF0e qGIufGIkGKgSarNZhq/JvQZIa/mbDyIKS5sp8dLAAOYFTqChlVBGRs6FJRSm4rUq uMCtuGMphWgRZQdtmfV7/s87fCIhnFZMcDXPob+dj9ELUterhcF6fG+hgzcAYJMQ waKIr9UJE41DfIJSQG2HanTDgIuiWL1Z6VnSwpeuhUcf2GIdcEaK0R2rcE7Ac3uk 330k6qkeZUOEUlQ46VXPBjjGAJg5h6TTcqShJct3GqAXZwG3bf80yKWpsBDcVbVz StfKZo4DB+2atBvsL59RnVNuTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+7SPOF OH2RqGdpmTGxNtEKh4wJMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5f7EsjJVVZvTAnpD/bDhEisoyIcZDANc98wYp2SeoXifgUnfmTzwT Cg8hdqiuFW5ePo+eeGWgbwOaVX8Kol1S3TY0K8AyEKpAqjgKxLWN/OSvNtGeTixl BW1aFGYF9Csd5I0VLa1kDqAZliXrJUzsp1bFppmMr6L6si85z0ZTilJ/whZJRufq 8hez/phIkhpLn10CqYb4PddfIKBAwiR1AnuvMoaMbSfemIA0AyDIIL+lkefc0ovX oTN8hC4uN7J2GjxUT31Dbd0oFcpPQV8h4sbjOSOzy1CxxEKbRG+9URJfNs/klP/J 0skWaOry09TqoB7EuKLFkPCTuhZzI9LT -----END CERTIFICATE-----Generated at Mon May 12 00:18:15 2025 by rpki-client