$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: Kioc0PVwk/ln9+XLtBD38ab6ePchwZCxEvozQU/h6xY= Subject key identifier: B9:52:6A:F3:FE:11:F8:55:76:AB:65:6E:C7:36:4D:DE:3A:76:48:ED Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0C5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0C4D Signing time: Mon 12 May 2025 18:13:36 +0000 Manifest this update: Mon 12 May 2025 18:13:36 +0000 Manifest next update: Mon 19 May 2025 18:13:36 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: NihxMsMmJOne8twmX6kBhkcf818BFfSJWN29Y1uy29E=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: ZJYTa6/4Mo2ZhGCzzSDSUlHgf//iLKJXvM086ZIoSG4=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: y1Ah/sCRnzTCZTtDJj4VAK1Ak4axz54qZlJpOkCDzUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: May 12 18:13:36 2025 GMT Not After : May 19 18:13:36 2025 GMT Subject: CN=68223a50-f149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:08:7c:6e:23:bd:6f:83:68:07:22:fa:2a: 04:90:3b:24:d3:e6:64:40:cc:29:14:9f:58:99:0d: 08:3c:00:0c:26:57:4d:1e:ac:9c:e0:4b:07:66:1a: 27:dd:34:37:13:39:0b:e7:f3:2a:0d:87:2d:8d:00: b2:76:68:fd:be:c0:19:f3:90:f5:86:7d:64:aa:2e: ce:6d:02:69:d8:35:a2:6c:a9:f2:5c:38:55:3b:ed: 65:55:4c:20:3f:ff:6d:2d:37:84:ac:ec:c6:e6:1f: 78:e6:32:60:c8:68:b0:58:e1:fb:72:61:df:2f:6c: 56:b1:ae:73:be:8b:13:b7:09:29:86:d2:23:0c:19: 53:a9:35:76:e1:6f:8a:c1:e0:45:b7:d4:8a:08:da: 70:16:b1:a7:7c:d7:12:e1:56:d5:a9:0a:f3:1e:ad: 81:dc:c4:17:4c:23:10:2c:78:a9:87:08:02:b8:3f: 1f:69:ed:0b:80:44:56:5d:da:fd:75:76:f8:2b:08: 60:7f:50:79:1c:b8:12:88:57:a2:a4:68:f8:d6:66: cb:4a:1c:a4:61:b6:cb:da:8b:ce:5b:ce:a1:7e:62: a8:82:dc:b6:ca:55:b4:f6:e8:8c:b4:12:5c:d1:9f: 94:74:82:3b:99:45:5c:01:65:ca:02:07:eb:6a:f9: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:6A:F3:FE:11:F8:55:76:AB:65:6E:C7:36:4D:DE:3A:76:48:ED X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:bf:55:e1:05:62:3e:48:db:3d:99:d1:ea:a1:dd:66:79:3e: 44:cb:f8:c0:f6:91:88:fe:1c:2e:7a:af:5f:e3:a9:6e:25:ee: 46:55:48:b3:64:0d:43:97:17:89:95:f6:59:31:b8:80:44:89: 01:e1:00:2d:a3:b4:b1:bb:1c:06:12:92:e0:c6:23:f4:77:58: 34:92:88:dc:99:7d:a4:b3:89:aa:9b:55:1b:bc:92:50:dc:b4: 96:ba:08:c4:fb:3c:d4:49:ed:59:44:da:d5:a8:af:14:f9:86: 15:2d:eb:6e:f9:d1:b5:ad:b7:59:67:43:1b:29:85:3c:47:34: c9:b6:4f:4a:8a:e3:66:34:49:60:4b:f5:20:7f:91:ab:01:a6: ad:99:34:62:41:74:d6:01:ca:b5:d7:b4:69:55:f3:d2:26:9b: d8:f2:05:80:d8:e7:13:7b:2c:17:1b:1a:46:9c:48:bd:73:c1: ab:55:c0:e1:dd:f3:3f:3f:82:47:c3:8a:97:c7:30:d1:cd:1a: b8:85:06:79:e8:fa:91:06:15:45:9b:ce:05:16:4a:56:26:62: 46:b8:8f:e5:5f:4a:ac:ac:ea:70:7e:34:f8:1e:ff:3e:63:ad: 2b:36:ba:53:e5:51:7b:19:b6:78:ca:f0:c3:af:d6:da:47:1b: 49:7e:f4:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjUwNTEyMTgxMzM2WhcNMjUwNTE5MTgxMzM2WjAYMRYwFAYD VQQDEw02ODIyM2E1MC1mMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCwIfG4jvW+DaAci+ioEkDsk0+ZkQMwpFJ9YmQ0IPAAMJldNHqyc4EsHZhon 3TQ3EzkL5/MqDYctjQCydmj9vsAZ85D1hn1kqi7ObQJp2DWibKnyXDhVO+1lVUwg P/9tLTeErOzG5h945jJgyGiwWOH7cmHfL2xWsa5zvosTtwkphtIjDBlTqTV24W+K weBFt9SKCNpwFrGnfNcS4VbVqQrzHq2B3MQXTCMQLHiphwgCuD8fae0LgERWXdr9 dXb4Kwhgf1B5HLgSiFeipGj41mbLShykYbbL2ovOW86hfmKogty2ylW09uiMtBJc 0Z+UdII7mUVcAWXKAgfravmPowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlSavP+ EfhVdqtlbsc2Td46dkjtMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgv1XhBWI+SNs9mdHqod1meT5Ey/jA9pGI/hwueq9f46luJe5GVUiz ZA1DlxeJlfZZMbiARIkB4QAto7SxuxwGEpLgxiP0d1g0kojcmX2ks4mqm1UbvJJQ 3LSWugjE+zzUSe1ZRNrVqK8U+YYVLetu+dG1rbdZZ0MbKYU8RzTJtk9KiuNmNElg S/Ugf5GrAaatmTRiQXTWAcq117RpVfPSJpvY8gWA2OcTeywXGxpGnEi9c8GrVcDh 3fM/P4JHw4qXxzDRzRq4hQZ56PqRBhVFm84FFkpWJmJGuI/lX0qsrOpwfjT4Hv8+ Y60rNrpT5VF7GbZ4yvDDr9baRxtJfvS2 -----END CERTIFICATE-----Generated at Tue May 13 19:51:16 2025 by rpki-client