$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: cv6bkOD8eocccwBDtGTUMdZFfGhjgBM0TKtCy94HZkQ= Subject key identifier: 32:45:B8:ED:DE:8E:2A:24:1D:F4:ED:0C:4F:55:81:93:A3:C3:23:F7 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1121 Signing time: Sat 10 May 2025 17:09:39 +0000 Manifest this update: Sat 10 May 2025 17:09:39 +0000 Manifest next update: Sat 17 May 2025 17:09:39 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: amfwJ1peggqlavXmN53bY7PyF5banX+QxbXoOFsqOTk=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: LI5814/1mo8RhGHDIyDmTnyAaT8jPK8eiZW8nnVoECM=) 3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: KE984DbFRTO0XDJnJvkUh9nTQI9OdADddfHh/b8sXns=) 4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: tG0xAoHX5Jrg4VXIV0PMgN27hGtGNiwPzNpPEMcc5ZU=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: NlRxG3SgenSihBb1Uz1mdp6In7PIY3SWzoat7OXr7O8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4416 (0x1140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: May 10 17:09:39 2025 GMT Not After : May 17 17:09:39 2025 GMT Subject: CN=681f8853-a070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ec:dc:cb:fb:4b:d7:cc:0e:de:68:35:c3:b8: a8:63:84:5d:74:4d:69:a2:86:58:52:99:44:6f:72: 9e:a9:c6:b2:62:f6:e5:c0:fe:ba:51:f7:e2:c6:e2: b0:e2:a0:87:67:e9:cf:67:4b:ad:56:1a:50:ec:60: 05:81:2c:4c:a3:e0:a5:0d:3e:52:51:b5:22:62:19: 15:31:86:f4:04:e4:d2:69:ce:d6:b6:f7:47:79:11: 5d:cb:e5:0f:4b:8c:8b:16:9c:40:14:92:a5:68:1d: c9:a7:2c:a9:18:c2:d3:d5:c1:1e:f9:83:cc:3d:bb: 51:87:42:ce:d0:e5:17:22:0b:69:a8:a5:b1:15:d3: 54:e3:99:26:9d:79:a8:80:fc:e3:15:85:f1:c3:8b: d2:82:cd:30:34:9d:43:a9:64:97:bc:e7:00:29:3f: ca:52:86:11:06:b7:b2:03:bf:ec:42:83:fd:25:4b: d5:aa:7b:8d:a6:44:92:57:28:45:15:ec:7f:08:05: 67:f6:ff:ec:5d:2f:39:0a:d8:95:1a:f2:6d:0b:24: 6c:79:df:75:2d:5a:42:0e:43:72:a4:4c:7c:bc:92: 87:a2:c6:70:f7:57:77:85:22:a8:f6:2e:92:ab:09: d2:f6:bd:e6:ee:7e:6a:8e:93:a4:89:e0:1e:fc:1b: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:45:B8:ED:DE:8E:2A:24:1D:F4:ED:0C:4F:55:81:93:A3:C3:23:F7 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:41:67:3b:c3:e2:d4:ed:5b:ce:7b:cb:28:69:b4:8e:94:71: 7e:2a:7c:1f:84:f9:7b:83:23:8c:83:8a:46:a4:0b:03:58:95: 85:1e:1e:ab:58:ef:e2:6c:39:97:d6:34:31:b4:c4:f2:3a:cf: 30:da:86:48:15:89:08:38:91:35:cc:36:08:7a:12:a5:c9:43: d3:b6:cf:fb:bc:c7:ea:0d:b3:f0:e4:81:05:37:de:ae:63:59: 00:57:5d:fe:a7:02:9e:66:f9:af:51:c2:08:3c:93:a6:8e:0e: c8:59:f7:53:1e:15:c6:ba:7a:d0:e5:47:2e:5a:ab:39:64:9c: ac:9a:3d:ab:3c:53:be:60:16:6b:d0:71:3e:c1:d9:00:3b:98: 45:38:ae:45:a0:49:60:25:0f:2b:7f:0f:9c:ce:39:dc:78:1c: 77:7c:ef:0f:67:83:7b:ec:89:c4:59:27:f9:fe:75:26:9e:d8: c7:31:0d:8f:f4:bc:26:94:e1:6f:f0:c0:0b:8d:82:12:7c:e6: dc:fe:1e:b6:e5:b9:8d:46:5c:b9:32:11:d0:ec:9c:52:f2:3f: 72:e3:0c:22:4b:39:39:e7:5c:c1:60:ff:3b:f4:01:e5:52:89: 52:44:2c:1b:28:11:8d:b7:5a:6f:f2:e0:7f:e0:b5:f8:2c:ec: a1:3f:99:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUwNTEwMTcwOTM5WhcNMjUwNTE3MTcwOTM5WjAYMRYwFAYD VQQDEw02ODFmODg1My1hMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ozcy/tL18wO3mg1w7ioY4RddE1pooZYUplEb3KeqcayYvblwP66UffixuKw 4qCHZ+nPZ0utVhpQ7GAFgSxMo+ClDT5SUbUiYhkVMYb0BOTSac7WtvdHeRFdy+UP S4yLFpxAFJKlaB3JpyypGMLT1cEe+YPMPbtRh0LO0OUXIgtpqKWxFdNU45kmnXmo gPzjFYXxw4vSgs0wNJ1DqWSXvOcAKT/KUoYRBreyA7/sQoP9JUvVqnuNpkSSVyhF Fex/CAVn9v/sXS85CtiVGvJtCyRsed91LVpCDkNypEx8vJKHosZw91d3hSKo9i6S qwnS9r3m7n5qjpOkieAe/BvdEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJFuO3e jiokHfTtDE9VgZOjwyP3MB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBQWc7w+LU7VvOe8soabSOlHF+KnwfhPl7gyOMg4pGpAsDWJWFHh6r WO/ibDmX1jQxtMTyOs8w2oZIFYkIOJE1zDYIehKlyUPTts/7vMfqDbPw5IEFN96u Y1kAV13+pwKeZvmvUcIIPJOmjg7IWfdTHhXGunrQ5UcuWqs5ZJysmj2rPFO+YBZr 0HE+wdkAO5hFOK5FoElgJQ8rfw+czjnceBx3fO8PZ4N77InEWSf5/nUmntjHMQ2P 9LwmlOFv8MALjYISfObc/h625bmNRly5MhHQ7JxS8j9y4wwiSzk551zBYP879AHl UolSRCwbKBGNt1pv8uB/4LX4LOyhP5my -----END CERTIFICATE-----Generated at Sun May 11 01:49:55 2025 by rpki-client