$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: Mcqx/oAvuMpNnVBXwLWY8J9xXnK83E0JMvhlCrS2Yhc= Subject key identifier: C7:1C:FD:2B:53:77:2C:6D:33:15:55:25:DD:2C:5A:D5:29:15:86:F0 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 1715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 170B Signing time: Fri 16 May 2025 16:51:10 +0000 Manifest this update: Fri 16 May 2025 16:51:09 +0000 Manifest next update: Fri 23 May 2025 16:51:09 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: Mq9hY5dpj9a1ZT2Ahc09yCsEF2H+HnD7FyumRDS5z8U=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5909 (0x1715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: May 16 16:51:09 2025 GMT Not After : May 23 16:51:09 2025 GMT Subject: CN=68276cfd-fb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:af:69:74:39:2c:cd:d4:5e:44:42:11:6d: 08:5a:74:18:f9:03:f4:ed:b8:dd:5c:e3:d6:34:42: 61:99:c2:5f:47:85:fd:7e:db:6e:e7:e2:1e:3c:37: f9:90:34:99:50:4a:34:1c:8a:bb:c5:58:28:ef:a5: c4:9c:79:ea:99:d0:66:3b:63:03:71:9f:62:78:b4: a4:f4:aa:92:56:fb:19:c2:19:d5:5e:66:b1:75:9c: 9f:d5:84:e3:e4:15:5a:26:1d:12:c5:98:b8:df:c5: 52:99:d8:f6:3f:95:ce:7b:3e:5b:72:80:92:93:41: 33:88:23:af:e7:bd:5e:17:10:d0:47:79:38:69:bf: c3:aa:3c:00:a0:aa:63:ef:0f:e9:73:2e:9e:55:b1: 3e:bc:29:13:e9:b0:a7:e9:6c:1a:8f:d2:d3:b7:f8: d6:23:fd:23:10:cd:f2:3f:59:10:51:78:62:02:99: 3b:6c:f4:77:bc:c4:d9:b3:7a:5e:30:c4:7f:cb:a9: 92:db:28:4d:1d:d2:ac:6a:89:cd:53:2a:5e:87:f8: 99:06:15:7b:ff:83:96:0c:0b:b6:c8:f1:7f:0e:77: 6a:06:c5:9e:ef:ae:fd:2a:5a:aa:11:64:cc:50:f3: 61:64:ef:50:ee:30:80:8c:18:23:05:3f:e3:d6:aa: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1C:FD:2B:53:77:2C:6D:33:15:55:25:DD:2C:5A:D5:29:15:86:F0 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:bf:ba:29:6b:c5:22:23:77:7b:d6:6e:51:f8:1e:07:99:01: 03:75:46:b3:a0:de:c7:4f:06:f6:6a:75:3b:ee:7f:d0:8e:27: fa:e7:5f:b5:b4:a5:10:41:1f:dc:9d:dd:a2:f6:9c:02:d1:85: a5:f2:b8:ca:a4:bb:26:e4:0b:85:64:b7:a6:5e:6f:c6:87:42: 2e:12:4b:08:40:51:13:05:34:7c:19:2f:68:73:f6:c2:0d:01: 9d:63:24:5d:46:3a:3a:0f:66:bd:6f:b3:4d:f7:a2:cc:8d:b4: b6:51:eb:b1:12:7d:1a:03:d3:36:9b:4b:66:b5:85:a3:28:ed: 1a:a0:09:45:5e:7b:61:de:7d:d6:6c:85:f9:a0:4c:7d:fc:79: 25:d7:4b:ad:6f:4f:17:bb:8f:f9:ee:31:36:9e:91:34:22:04: 13:31:ca:1e:b7:a6:cf:e3:7e:cf:08:0c:eb:51:ed:5f:c5:93: d5:ea:d7:9b:0d:ae:9c:26:f3:93:af:2d:3f:52:ed:16:5d:b3: 3e:e9:e1:5c:33:36:01:30:6b:7d:90:d6:c1:5e:95:c5:02:82: 7a:b6:9d:94:6b:60:af:ca:a0:b0:e5:c8:93:3e:00:90:a3:25: e3:1b:d4:22:9c:8f:00:18:1a:94:ba:a5:74:f2:10:0f:d9:3a: 46:b9:ca:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjUwNTE2MTY1MTA5WhcNMjUwNTIzMTY1MTA5WjAYMRYwFAYD VQQDEw02ODI3NmNmZC1mYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CKvaXQ5LM3UXkRCEW0IWnQY+QP07bjdXOPWNEJhmcJfR4X9fttu5+IePDf5 kDSZUEo0HIq7xVgo76XEnHnqmdBmO2MDcZ9ieLSk9KqSVvsZwhnVXmaxdZyf1YTj 5BVaJh0SxZi438VSmdj2P5XOez5bcoCSk0EziCOv571eFxDQR3k4ab/DqjwAoKpj 7w/pcy6eVbE+vCkT6bCn6Wwaj9LTt/jWI/0jEM3yP1kQUXhiApk7bPR3vMTZs3pe MMR/y6mS2yhNHdKsaonNUypeh/iZBhV7/4OWDAu2yPF/DndqBsWe7679KlqqEWTM UPNhZO9Q7jCAjBgjBT/j1qrsiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcc/StT dyxtMxVVJd0sWtUpFYbwMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOv7opa8UiI3d71m5R+B4HmQEDdUazoN7HTwb2anU77n/Qjif651+1 tKUQQR/cnd2i9pwC0YWl8rjKpLsm5AuFZLemXm/Gh0IuEksIQFETBTR8GS9oc/bC DQGdYyRdRjo6D2a9b7NN96LMjbS2UeuxEn0aA9M2m0tmtYWjKO0aoAlFXnth3n3W bIX5oEx9/Hkl10utb08Xu4/57jE2npE0IgQTMcoet6bP437PCAzrUe1fxZPV6teb Da6cJvOTry0/Uu0WXbM+6eFcMzYBMGt9kNbBXpXFAoJ6tp2Ua2CvyqCw5ciTPgCQ oyXjG9QinI8AGBqUuqV08hAP2TpGucrO -----END CERTIFICATE-----Generated at Fri May 16 23:35:48 2025 by rpki-client