$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: Qy2iyDsaIpQhzqr6Tz+UY/hD1Jd0+CNbRcqc9C4psn8= Subject key identifier: 7C:09:FE:EF:D3:34:35:37:37:32:4D:64:81:65:34:E0:07:C3:5B:BD Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 048A Signing time: Thu 15 May 2025 00:05:28 +0000 Manifest this update: Thu 15 May 2025 00:05:27 +0000 Manifest next update: Thu 22 May 2025 00:05:27 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: PXwpqJf6aOocJeAIYsdXn/wlQ3Mb/yC19AscuU8MxVE=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: 1u/YihTpZBD48C04Bkhp0KnNLv39w8b5ndCsUiPxGys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: May 15 00:05:27 2025 GMT Not After : May 22 00:05:27 2025 GMT Subject: CN=68252fc8-a5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:c4:01:69:b6:79:6e:88:d5:19:07:24:b1: 98:e1:71:8e:22:f3:bd:f6:6f:3e:9a:d9:24:89:7c: 05:13:c7:2c:8c:c9:92:e2:f7:5a:23:6d:2e:17:86: 76:5b:01:47:bd:c7:70:aa:89:55:84:ca:77:5a:7c: d5:90:cf:ad:33:85:9e:82:35:df:ff:01:ac:ed:02: 8f:93:dc:7a:a4:a7:07:bf:d0:81:e4:4c:67:0e:8e: 73:db:cb:a6:df:0d:70:fd:a7:a3:f6:ab:15:59:cc: df:f8:12:47:bc:eb:09:ba:60:93:13:0e:aa:06:0b: ef:13:39:ac:81:dd:bb:72:03:52:2a:73:13:c6:fe: ff:75:90:c4:96:87:14:44:21:4f:eb:9d:37:44:29: 50:40:f9:5c:74:2e:09:88:24:99:58:10:2a:db:cb: 77:cf:05:2d:10:36:d7:b7:e8:84:9b:5d:6f:bf:47: 85:bd:1d:40:bd:d9:f9:6f:5a:40:ae:c2:f0:90:50: e0:62:7e:84:c4:dc:c9:2d:0a:50:03:ef:a0:2b:0e: 56:89:f9:42:c4:7c:8f:31:0a:79:61:b2:d0:20:08: 0c:6f:38:ed:c9:a0:3c:89:3c:ae:9d:ed:7e:a0:ba: 5b:fc:52:fa:86:93:99:a6:ba:3e:7d:3a:5b:c8:5d: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:09:FE:EF:D3:34:35:37:37:32:4D:64:81:65:34:E0:07:C3:5B:BD X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:02:d3:0c:43:2a:eb:1d:3a:ab:49:9b:2c:8d:a6:0f:8a:7c: b0:57:6a:6a:0b:5a:b6:04:be:82:8f:d1:57:27:49:e0:bc:e9: 9e:69:3d:8a:3d:5e:10:12:e2:6d:98:03:0c:b0:5e:14:d3:04: 0c:68:db:bf:9a:15:b9:25:dd:a8:7f:5c:83:c9:8f:3c:dc:23: 2a:15:dd:7c:69:fa:ad:4b:fd:3c:16:0c:5f:2d:10:64:03:41: 2e:e0:90:83:cb:a3:dc:6e:5a:74:73:42:22:a4:e9:79:32:c0: ae:ae:43:97:88:d5:97:e7:08:42:f6:8b:03:61:32:45:38:6a: 7d:a0:91:24:78:03:2b:37:aa:28:35:4c:bc:d2:f7:d9:41:b1: 72:31:1c:08:a3:d6:42:1f:2b:86:a5:5e:1f:81:2e:44:b7:07: d5:d2:e2:ce:32:72:34:5c:92:15:2c:81:33:0a:64:0c:e3:16: 07:b0:d0:28:c8:44:a7:5c:ac:ea:37:3e:c7:00:a0:e4:db:28: 6b:61:dc:7a:11:de:1b:b5:52:a1:f6:e2:fc:74:65:7d:e0:03: 12:c6:8c:e9:65:41:42:19:a7:57:0f:e7:2c:6a:13:74:61:d4: b1:b3:37:c4:33:5e:f1:9b:65:be:9d:2f:4f:72:90:47:af:ea: b1:38:ca:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUwNTE1MDAwNTI3WhcNMjUwNTIyMDAwNTI3WjAYMRYwFAYD VQQDEw02ODI1MmZjOC1hNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLLEAWm2eW6I1RkHJLGY4XGOIvO99m8+mtkkiXwFE8csjMmS4vdaI20uF4Z2 WwFHvcdwqolVhMp3WnzVkM+tM4WegjXf/wGs7QKPk9x6pKcHv9CB5ExnDo5z28um 3w1w/aej9qsVWczf+BJHvOsJumCTEw6qBgvvEzmsgd27cgNSKnMTxv7/dZDElocU RCFP6503RClQQPlcdC4JiCSZWBAq28t3zwUtEDbXt+iEm11vv0eFvR1Avdn5b1pA rsLwkFDgYn6ExNzJLQpQA++gKw5WiflCxHyPMQp5YbLQIAgMbzjtyaA8iTyune1+ oLpb/FL6hpOZpro+fTpbyF1ANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwJ/u/T NDU3NzJNZIFlNOAHw1u9MB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFAtMMQyrrHTqrSZssjaYPinywV2pqC1q2BL6Cj9FXJ0ngvOmeaT2K PV4QEuJtmAMMsF4U0wQMaNu/mhW5Jd2of1yDyY883CMqFd18afqtS/08FgxfLRBk A0Eu4JCDy6Pcblp0c0IipOl5MsCurkOXiNWX5whC9osDYTJFOGp9oJEkeAMrN6oo NUy80vfZQbFyMRwIo9ZCHyuGpV4fgS5EtwfV0uLOMnI0XJIVLIEzCmQM4xYHsNAo yESnXKzqNz7HAKDk2yhrYdx6Ed4btVKh9uL8dGV94AMSxozpZUFCGadXD+csahN0 YdSxszfEM17xm2W+nS9PcpBHr+qxOMoX -----END CERTIFICATE-----Generated at Fri May 16 19:05:21 2025 by rpki-client