$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: zkbfBFPsAoWDoJZUAc8HxoTXf28W0PKQeXZjlmOeaj4= Subject key identifier: B6:AC:56:05:A1:98:D0:E8:A2:22:2A:F9:DE:92:54:F5:A9:CC:BE:F0 Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 08E0 Signing time: Thu 24 Apr 2025 20:18:15 +0000 Manifest this update: Thu 24 Apr 2025 20:18:14 +0000 Manifest next update: Thu 01 May 2025 20:18:14 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: a1q2ZXjZUO+fwmTSFZwdCVe4q3/JHQNAjnrsMxT5gMM=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Apr 24 20:18:14 2025 GMT Not After : May 1 20:18:14 2025 GMT Subject: CN=680a9c86-dcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:62:2f:ad:cc:e4:5e:12:b0:3b:1f:d7:05: ae:b2:d4:62:af:78:f7:9c:1a:12:86:01:b9:a4:1f: 46:ec:90:98:ee:fa:bf:27:d2:93:6b:4d:0d:84:d1: 11:de:b1:f5:a9:ca:f6:b5:62:bf:f4:43:65:56:7d: bc:46:3a:05:f1:57:83:d3:96:97:22:7c:09:8a:61: 46:28:65:2f:7c:1f:40:ec:e9:49:17:c8:d2:cb:e8: a4:4f:11:be:87:fc:a2:16:d5:e8:0e:68:e7:b9:bc: b9:fc:df:a6:b7:1d:a7:a4:c8:b5:81:4b:3b:17:be: 56:a8:09:f9:51:a4:c3:d9:7a:8c:74:7a:54:d7:0f: 93:fc:00:a1:cc:f2:0c:e6:dc:aa:d5:1b:db:3e:5c: 0e:e1:1c:56:87:69:22:c9:4a:35:c3:0f:00:98:9c: 2a:ec:d9:42:40:b3:25:dd:4b:54:fe:df:f7:a9:71: 63:c9:be:f5:99:0b:85:66:93:ad:01:3e:61:e5:9f: fc:5f:b2:1f:80:8a:ab:86:23:97:09:8a:78:e5:6c: 44:38:c9:5e:e7:af:c5:d7:1d:b6:10:7e:de:36:12: d0:48:ef:0c:26:73:dc:99:49:5c:e9:04:a8:a4:81: e8:a2:62:10:f0:e6:14:b7:39:0b:e7:df:83:2c:ec: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AC:56:05:A1:98:D0:E8:A2:22:2A:F9:DE:92:54:F5:A9:CC:BE:F0 X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:27:e4:af:ab:73:ef:0f:c3:4a:38:8a:47:31:14:e0:93:87: bb:ff:1f:a6:52:3e:cb:33:a2:ef:3a:fa:bf:f2:ec:95:c6:2f: 09:1a:ef:fc:6f:e4:59:ce:cd:3c:f6:94:d1:6c:25:02:52:74: 30:ab:6c:77:a1:aa:04:53:b6:08:fc:4b:ce:2d:e8:a5:cb:31: 0c:77:e7:a5:5c:39:0a:fe:8d:dc:01:ce:e0:89:b8:7b:42:3f: 65:d7:70:6b:b9:73:e3:a1:6d:b0:1f:ea:6a:25:55:09:5c:bb: aa:1d:81:7c:01:04:52:0e:4f:81:b4:cb:eb:9a:ea:15:14:df: 03:98:d4:a8:4f:11:2f:b2:f4:8a:7a:5d:4a:d3:9b:d5:53:58: e6:52:0c:c8:eb:21:6f:2a:a6:45:69:54:25:d4:cd:ae:c4:63: cb:80:77:a2:4a:96:f6:5d:e2:de:f3:5c:65:48:02:53:15:7f: 54:e4:be:16:98:0d:7c:ee:ea:03:84:1f:28:36:76:0f:90:a5: 60:2a:f1:31:ad:b4:bd:dd:88:b4:6f:43:2a:34:15:86:97:43: 3f:84:9e:9f:2a:7f:40:7e:1b:98:ec:35:43:11:e4:f1:11:ac: 13:aa:01:46:d3:71:ad:a7:00:c9:a1:24:ae:eb:ff:51:13:88: 5c:c0:59:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUwNDI0MjAxODE0WhcNMjUwNTAxMjAxODE0WjAYMRYwFAYD VQQDEw02ODBhOWM4Ni1kY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XtiL63M5F4SsDsf1wWustRir3j3nBoShgG5pB9G7JCY7vq/J9KTa00NhNER 3rH1qcr2tWK/9ENlVn28RjoF8VeD05aXInwJimFGKGUvfB9A7OlJF8jSy+ikTxG+ h/yiFtXoDmjnuby5/N+mtx2npMi1gUs7F75WqAn5UaTD2XqMdHpU1w+T/AChzPIM 5tyq1RvbPlwO4RxWh2kiyUo1ww8AmJwq7NlCQLMl3UtU/t/3qXFjyb71mQuFZpOt AT5h5Z/8X7IfgIqrhiOXCYp45WxEOMle56/F1x22EH7eNhLQSO8MJnPcmUlc6QSo pIHoomIQ8OYUtzkL59+DLOxRMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLasVgWh mNDooiIq+d6SVPWpzL7wMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3J+Svq3PvD8NKOIpHMRTgk4e7/x+mUj7LM6LvOvq/8uyVxi8JGu/8 b+RZzs089pTRbCUCUnQwq2x3oaoEU7YI/EvOLeilyzEMd+elXDkK/o3cAc7gibh7 Qj9l13BruXPjoW2wH+pqJVUJXLuqHYF8AQRSDk+BtMvrmuoVFN8DmNSoTxEvsvSK el1K05vVU1jmUgzI6yFvKqZFaVQl1M2uxGPLgHeiSpb2XeLe81xlSAJTFX9U5L4W mA187uoDhB8oNnYPkKVgKvExrbS93Yi0b0MqNBWGl0M/hJ6fKn9AfhuY7DVDEeTx EawTqgFG03GtpwDJoSSu6/9RE4hcwFmq -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:54 2025 by rpki-client