$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: ti27UT9mK3gMp/bZbioXhAesQr/Ktn18sg0HxcCkNfk= Subject key identifier: DB:B9:29:F7:D1:19:C1:9B:BB:90:78:FB:8F:ED:1C:C9:EE:7D:A7:70 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06B6 Signing time: Wed 14 May 2025 22:36:26 +0000 Manifest this update: Wed 14 May 2025 22:36:26 +0000 Manifest next update: Wed 21 May 2025 22:36:26 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: 0dasJSX4JdrujLI7n2V2yn6BONpeJOgH3Zz7XI1dOsY=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: May 14 22:36:26 2025 GMT Not After : May 21 22:36:26 2025 GMT Subject: CN=68251aea-dfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:7a:23:a8:8e:a6:3d:7a:e5:fd:8f:29:70: 1f:7e:f2:28:48:d6:45:56:35:dc:bd:7d:2c:0f:e0: 1e:46:76:08:08:da:74:b4:87:a9:a9:47:41:66:a2: 59:e0:52:15:81:ba:af:7d:74:2d:f3:03:e9:ff:fe: 80:37:22:cd:dc:79:19:b8:c3:68:32:14:bc:3f:57: 14:2c:1d:69:c4:19:12:9e:c9:cc:a7:83:75:cd:75: 68:6d:13:fc:db:84:70:0b:d4:0f:98:a2:f7:2d:76: 1c:ae:db:6e:7b:11:b0:56:90:ae:ef:13:5e:f0:38: b8:4f:76:78:b5:dd:a8:63:a6:46:bd:88:9f:24:21: 1a:0d:db:d1:28:38:aa:b5:f6:8b:e5:dc:16:9c:b7: 93:77:7a:59:0a:c7:15:e0:ce:8c:88:5a:03:79:c3: 01:11:5a:de:16:48:91:27:31:6d:8c:a2:b5:1a:de: fe:07:7a:10:0e:6f:d1:b0:0f:35:91:ba:af:90:7d: 2a:9f:d5:54:ab:9c:ad:de:37:90:43:82:f4:f8:3f: e0:19:f5:9d:77:18:fc:c4:7f:91:d0:bb:d4:ea:48: da:93:5e:2b:9e:78:f6:87:2c:af:38:e2:99:51:9c: 56:ca:35:f5:75:c8:85:83:7a:be:ff:24:19:9c:97: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B9:29:F7:D1:19:C1:9B:BB:90:78:FB:8F:ED:1C:C9:EE:7D:A7:70 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c5:fd:31:64:bc:db:b3:78:be:4e:70:bc:be:c9:bb:04:21: 7a:2d:97:3c:b6:87:9a:b4:65:09:46:ee:9e:19:6a:a9:51:36: 0d:a0:e8:69:f8:74:20:f9:8b:03:10:ab:16:e7:4b:8c:88:c8: ea:b7:29:5d:d9:74:d9:bd:24:61:dd:af:21:0f:2b:f5:3a:6b: 1e:c4:e8:20:0a:b4:53:58:e6:63:68:7e:b9:7c:b8:50:5f:da: d7:a5:0e:1d:56:75:e1:83:d8:35:15:dd:04:cd:c6:25:5b:47: 08:6b:f2:bf:95:6b:ad:a0:c1:68:e0:cb:1e:99:70:b7:88:99: 68:39:b6:6d:d2:b4:cf:11:e5:bf:a9:b7:e4:3d:13:92:18:e5: a0:f6:ed:22:b6:fb:fe:21:00:99:c8:05:08:a8:3d:58:a8:6b: dc:e4:7f:04:48:60:e5:d6:97:9d:0d:ed:01:27:27:36:19:0f: e1:0e:88:92:34:3e:72:6d:81:74:27:1c:9b:6f:ba:44:ea:02: 99:66:ce:38:a7:48:84:2e:fe:67:0e:c1:07:9e:57:86:97:be: 3b:5c:52:bd:32:46:fc:cd:ab:6c:42:69:c2:ef:36:9f:1f:6f: 58:db:05:81:44:83:04:c5:f0:a4:fa:9f:fc:76:65:65:d6:d4: bf:fc:e9:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwNTE0MjIzNjI2WhcNMjUwNTIxMjIzNjI2WjAYMRYwFAYD VQQDEw02ODI1MWFlYS1kZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUJ6I6iOpj165f2PKXAffvIoSNZFVjXcvX0sD+AeRnYICNp0tIepqUdBZqJZ 4FIVgbqvfXQt8wPp//6ANyLN3HkZuMNoMhS8P1cULB1pxBkSnsnMp4N1zXVobRP8 24RwC9QPmKL3LXYcrttuexGwVpCu7xNe8Di4T3Z4td2oY6ZGvYifJCEaDdvRKDiq tfaL5dwWnLeTd3pZCscV4M6MiFoDecMBEVreFkiRJzFtjKK1Gt7+B3oQDm/RsA81 kbqvkH0qn9VUq5yt3jeQQ4L0+D/gGfWddxj8xH+R0LvU6kjak14rnnj2hyyvOOKZ UZxWyjX1dciFg3q+/yQZnJdKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu5KffR GcGbu5B4+4/tHMnufadwMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCxf0xZLzbs3i+TnC8vsm7BCF6LZc8toeatGUJRu6eGWqpUTYNoOhp +HQg+YsDEKsW50uMiMjqtyld2XTZvSRh3a8hDyv1OmsexOggCrRTWOZjaH65fLhQ X9rXpQ4dVnXhg9g1Fd0EzcYlW0cIa/K/lWutoMFo4MsemXC3iJloObZt0rTPEeW/ qbfkPROSGOWg9u0itvv+IQCZyAUIqD1YqGvc5H8ESGDl1pedDe0BJyc2GQ/hDoiS ND5ybYF0Jxybb7pE6gKZZs44p0iELv5nDsEHnleGl747XFK9Mkb8zatsQmnC7zaf H29Y2wWBRIMExfCk+p/8dmVl1tS//Oks -----END CERTIFICATE-----Generated at Fri May 16 07:07:06 2025 by rpki-client