$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: X9zYbLj37wMbegC6Onz2qLvczhE4j1/p2wA7UGX5x0Q= Subject key identifier: 5D:33:1B:4F:1C:33:F6:FB:3C:ED:43:13:E2:18:79:47:DB:00:64:32 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 53 Signing time: Tue 13 May 2025 06:27:18 +0000 Manifest this update: Tue 13 May 2025 06:27:18 +0000 Manifest next update: Tue 20 May 2025 06:27:18 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: MM2bjw50bpMf1fb41eMrbcAxBQ2sAFipqJhxBhqFxv4=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: May 13 06:27:18 2025 GMT Not After : May 20 06:27:18 2025 GMT Subject: CN=6822e646-2a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:42:e9:63:43:95:cd:03:a7:27:fd:4e:a5: 15:b0:3a:6d:31:30:b2:88:fa:2e:f3:42:a4:e7:c2: 72:c6:b2:2b:f3:ec:d8:22:77:09:0f:f9:6e:10:ef: 1f:60:89:52:cf:42:6b:bc:78:d3:f8:70:18:a7:3d: a3:94:90:17:54:57:06:c2:16:65:51:1e:dc:ed:28: 0b:71:e8:68:32:1b:0e:8d:27:90:01:dd:98:54:c6: 7e:e5:a6:10:81:08:cc:ca:ea:24:4d:95:8e:d0:1d: 56:79:fc:5a:4f:de:f6:20:a3:3b:50:e8:19:47:d1: e8:ca:e1:5b:e7:ac:1e:18:ae:ff:e5:e8:8d:89:fc: 87:0a:aa:c5:ac:d4:b9:2d:a6:f5:20:77:ae:fe:33: 6a:44:0f:29:46:71:41:7b:bc:11:b2:b0:70:c2:02: df:88:3e:f0:1e:c2:05:60:16:bd:96:c4:31:cb:ec: 6f:f1:17:1f:3d:e7:91:56:70:ab:78:ac:85:a7:d0: 5d:64:86:be:4f:25:fe:88:28:62:64:36:f0:be:b8: 76:53:a0:38:5b:8f:c4:3f:13:c9:82:77:4f:00:d6: e2:d9:60:36:23:a0:ea:72:92:02:0f:13:59:f7:97: da:1d:51:9b:a9:03:84:d5:0b:b0:3b:77:bc:50:e1: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:33:1B:4F:1C:33:F6:FB:3C:ED:43:13:E2:18:79:47:DB:00:64:32 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:bc:a5:86:52:ae:d7:d9:4c:6d:3f:61:eb:37:3e:71:3c:0b: ea:a1:fb:47:05:ac:0e:50:09:be:24:89:b5:db:a5:76:19:0a: 6f:83:a7:cd:9a:90:f6:f0:7b:42:ab:77:43:74:30:0e:fb:44: 45:54:4d:52:96:bf:b2:ce:5a:27:62:59:3b:9e:31:53:e0:79: ce:5b:7a:94:11:36:99:55:c6:9c:2c:9c:ce:e0:57:49:70:c8: 1a:58:3e:6a:ab:01:a0:a3:2c:25:a4:ed:01:5c:cc:c7:37:da: 02:38:53:b5:3c:10:c5:91:dd:69:db:26:25:95:b9:80:b2:7f: 4d:3f:5a:bc:f9:92:f3:5c:1f:0a:d1:27:c4:21:82:00:12:f6: 3a:31:a9:de:a5:72:b5:63:c8:f8:3b:00:b9:0c:c3:fe:e5:77: ed:18:1d:1b:9c:43:88:51:dd:d7:69:76:d6:71:ca:f5:9a:af: 77:10:68:3b:9a:0c:a7:20:1d:1c:8a:63:24:d8:b2:16:cc:e0: e3:65:9d:3d:8d:05:df:23:d0:af:8a:8b:51:04:77:31:b5:87: fd:45:98:50:53:b6:f0:3a:7d:b3:72:60:83:60:2f:74:6f:ad: 4d:c0:f2:1d:2b:61:7c:a5:d0:e3:90:83:6f:fd:9f:14:0e:c3: 0a:59:3f:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNTA1MTMwNjI3MThaFw0yNTA1MjAwNjI3MThaMBgxFjAUBgNV BAMTDTY4MjJlNjQ2LTJhMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNRULpY0OVzQOnJ/1OpRWwOm0xMLKI+i7zQqTnwnLGsivz7NgidwkP+W4Q7x9g iVLPQmu8eNP4cBinPaOUkBdUVwbCFmVRHtztKAtx6GgyGw6NJ5AB3ZhUxn7lphCB CMzK6iRNlY7QHVZ5/FpP3vYgoztQ6BlH0ejK4VvnrB4Yrv/l6I2J/IcKqsWs1Lkt pvUgd67+M2pEDylGcUF7vBGysHDCAt+IPvAewgVgFr2WxDHL7G/xFx8955FWcKt4 rIWn0F1khr5PJf6IKGJkNvC+uHZToDhbj8Q/E8mCd08A1uLZYDYjoOpykgIPE1n3 l9odUZupA4TVC7A7d7xQ4YnlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXTMbTxwz 9vs87UMT4hh5R9sAZDIwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMW8pYZSrtfZTG0/Yes3PnE8C+qh+0cFrA5QCb4kibXbpXYZCm+Dp82a kPbwe0Krd0N0MA77REVUTVKWv7LOWidiWTueMVPgec5bepQRNplVxpwsnM7gV0lw yBpYPmqrAaCjLCWk7QFczMc32gI4U7U8EMWR3WnbJiWVuYCyf00/Wrz5kvNcHwrR J8QhggAS9joxqd6lcrVjyPg7ALkMw/7ld+0YHRucQ4hR3ddpdtZxyvWar3cQaDua DKcgHRyKYyTYshbM4ONlnT2NBd8j0K+Ki1EEdzG1h/1FmFBTtvA6fbNyYINgL3Rv rU3A8h0rYXyl0OOQg2/9nxQOwwpZP/M= -----END CERTIFICATE-----Generated at Tue May 13 20:49:29 2025 by rpki-client