$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: T13hR0cSruMColv/dQxC654r0F7Nx4yal0spH378rwY= Subject key identifier: F8:0B:56:B2:E0:1E:44:1C:BE:E7:62:D2:FE:1A:F3:D1:94:17:03:12 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 0679 Signing time: Thu 24 Apr 2025 23:03:23 +0000 Manifest this update: Thu 24 Apr 2025 23:03:22 +0000 Manifest next update: Thu 01 May 2025 23:03:22 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: d9bvxPVK7yCnYew2DoH34AqovBMKU1vaiNkYPWZCFAY=) 2: A37112BA16ED11F0B635C562C4F9AE02.roa (hash: rZFiavbY0PAbr2H7+gTs3U67Eq+r4u4v2zqFhLKgsN8=) 3: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: +qzxrrbDAbjm5oGRWL2M9bgOfHEjl4iskK+N/J81qak=) 4: 7145DE8C69CE11EF9C04450AC4F9AE02.roa (hash: hSCKbETyEcrfwdR62qLCMoskeNw2yhn+vArByqXZY/4=) 5: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: JtKKxCXridSwy6SJ7Mx9WW/156HamhanSTK24tMN9c0=) 6: 9CDF55D87D6A11EEA59E8C3FC4F9AE02.roa (hash: mDnMAOX1D7nrgDR/qLwtv3995W8fLU9iXorAjw/Tyy8=) 7: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 5LHlWW/HIHhEuVs7lyfpyvCjCxzDLd5MFI+tQXgroXY=) 8: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: jbI9nyIyGvuuwD7R5pJI5zo/f8yqDWKnyeAgYYtwurY=) 9: 2294C59616EE11F09E906E12C4F9AE02.roa (hash: TAFLRnpDkPX0/1thH6OXxUqfDFzb/4YZ/ueijGni7sU=) 10: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: /zYRYz7hw59PN1H99rZM8/IUYjLUkVgpuVofdR3Vzlc=) 11: 32774EE811D111EF9084EB51C4F9AE02.roa (hash: xP6a2Fm0PA5GcUsRivI8UKiG6GftNlKvei6R3Wuqt8Q=) 12: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: VNTbmafGr2Ck68du6AOcxR3XdT37BiEBd7yF9e6N088=) 13: 2C928134155711F099BFE331C4F9AE02.roa (hash: 47lhJb8uhRs8ieTedrS6V4SnBxu8DNcKDZI2uXa5ZQU=) 14: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: S4VX1CO0OF3+Ep6xnyvx/Uv1NHR9lS+F0nBxbNUE0l8=) 15: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 4PiyophquWuYIG0+K5ceNOm7ogfnJHTsjtfCsP+bCrw=) 16: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: wzpW0H2xl9IMiS2MU8LoO/Pkm6/TTCP+V9WTTRyG49s=) 17: DC5ECE1816EE11F097A64F85C4F9AE02.roa (hash: 3I5NuV8UPYvfsF04ShxS5VeyRR5Sv1yc4MFcSv253Dw=) 18: 9EB8A27A675C11EE81835581C4F9AE02.roa (hash: OEqTkDyc1rPh8C5CXLgkDLbM+SU7rHYFTB3EDRvvg8I=) 19: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: WvwQUH+4dWCkhf9AYHECGHhhbwO1gaxV2Z7Th1HDWV0=) 20: 48BA598A180611EF8A144756C4F9AE02.roa (hash: v5rCwgyqRx5u8KidQnrhF0Q+fjIuGy77dHFgS6yCLVM=) 21: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4=) 22: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: B3UEiEYw2WKPOdrQO2wqkgon16D3Efz81MuIIEKCBB8=) 23: 222E2FAC16EE11F09E906E12C4F9AE02.roa (hash: DoFm6RaZkUNcJGWZuZ/N3Vw0x/Ki25o4uY7ZTpQ6Svw=) 24: 8FC3656CCE6B11EF90AD9413C4F9AE02.roa (hash: gZtWAKAUMwr/x0EQVymUoJL6ChkEmm3s+W09M5NLn7E=) 25: 3DC39FDAE82D11EF86C76B75C4F9AE02.roa (hash: CB42rPIllKFi14OnASR8kG8ELcV0c2sBojJ+pQ7hSCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Apr 24 23:03:22 2025 GMT Not After : May 1 23:03:22 2025 GMT Subject: CN=680ac33a-bc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:ef:3e:cf:d2:d3:a1:ad:1c:4b:bc:e9:4d: 61:05:0c:aa:4a:6b:c2:1a:22:db:06:91:b5:32:93: 17:79:01:3e:1c:9c:7e:ef:68:42:b3:09:5e:df:cc: 1f:39:a3:cd:52:ba:dd:9c:b8:5d:70:1d:08:0a:c2: 4f:93:c1:01:68:e0:8a:03:fa:67:8e:b1:e1:83:8d: 24:a5:ca:b9:40:7a:73:71:65:60:a3:a4:01:b0:47: 2c:3d:52:f0:25:6f:22:9f:2e:bc:c4:98:d6:93:7c: 48:44:69:d2:78:93:b2:9f:f1:e1:23:86:c5:9c:fd: f8:32:48:82:fc:aa:50:28:17:74:6e:d6:c2:ed:4d: 13:88:81:a1:54:a0:6a:3f:9a:65:c6:eb:d6:e4:75: 3e:a0:1d:f6:7a:28:b2:30:eb:e9:45:65:6a:bd:b8: 52:f8:b7:bf:0e:c7:64:c0:6c:c6:09:17:53:d7:ce: d4:70:06:ad:c0:5c:91:d8:40:b9:58:40:e9:bd:b9: 58:73:55:ea:9a:01:1a:cf:ac:22:75:0e:88:19:c6: b6:fc:fb:b0:0f:4b:60:9b:0b:d7:3f:f5:5d:a4:17: b0:6a:e7:d4:2e:63:56:f0:07:78:c8:9b:e1:07:e3: 34:5d:02:2d:79:c1:dd:0d:cc:68:46:47:52:06:a1: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:56:B2:E0:1E:44:1C:BE:E7:62:D2:FE:1A:F3:D1:94:17:03:12 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f7:5c:fa:0c:aa:9c:21:21:79:85:3f:48:1c:6f:cb:7b:db: 8f:5e:94:23:0a:9d:15:4e:be:81:ab:d4:6a:e0:22:d4:28:65: 2a:64:1c:f8:1c:4c:9b:fb:26:0a:0d:42:db:42:de:a3:7c:d6: 4f:84:3d:5a:ec:4a:2d:50:66:ef:87:59:d9:85:a8:b3:60:c0: fc:fa:4d:f9:58:f0:7d:1f:83:74:7c:fb:8a:fb:b2:5c:74:66: 26:b6:9c:1e:e9:e4:af:c5:94:e8:a5:84:21:e3:a3:52:25:fa: 19:f9:c2:f2:de:0b:13:ec:84:f7:06:14:32:9c:b3:c2:58:cd: f8:89:d1:16:7e:0d:b3:0e:af:5e:01:06:da:b4:35:ae:2d:f7: df:9d:67:bd:9c:6d:31:69:b7:cf:33:76:d6:75:21:0a:68:51: 69:53:1d:a6:18:9d:dc:a5:a6:7e:ed:82:55:a2:81:da:a8:f0: a7:b4:99:99:2a:be:d8:a3:10:95:c9:6a:0e:6b:87:5e:29:16: 19:b2:4f:3a:b4:19:11:35:bb:e3:e1:1a:23:34:72:e6:5c:5b: ba:4d:83:f3:22:00:6c:49:ce:93:ea:01:16:0c:d0:36:3d:df: 4e:33:a0:23:2d:45:c8:1e:4a:ce:8c:32:3a:b6:58:cd:81:c9: 68:21:80:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNDI0MjMwMzIyWhcNMjUwNTAxMjMwMzIyWjAYMRYwFAYD VQQDEw02ODBhYzMzYS1iYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydTvPs/S06GtHEu86U1hBQyqSmvCGiLbBpG1MpMXeQE+HJx+72hCswle38wf OaPNUrrdnLhdcB0ICsJPk8EBaOCKA/pnjrHhg40kpcq5QHpzcWVgo6QBsEcsPVLw JW8iny68xJjWk3xIRGnSeJOyn/HhI4bFnP34MkiC/KpQKBd0btbC7U0TiIGhVKBq P5plxuvW5HU+oB32eiiyMOvpRWVqvbhS+Le/DsdkwGzGCRdT187UcAatwFyR2EC5 WEDpvblYc1XqmgEaz6widQ6IGca2/PuwD0tgmwvXP/VdpBewaufULmNW8Ad4yJvh B+M0XQItecHdDcxoRkdSBqFHLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgLVrLg HkQcvudi0v4a89GUFwMSMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV91z6DKqcISF5hT9IHG/Le9uPXpQjCp0VTr6Bq9Rq4CLUKGUqZBz4 HEyb+yYKDULbQt6jfNZPhD1a7EotUGbvh1nZhaizYMD8+k35WPB9H4N0fPuK+7Jc dGYmtpwe6eSvxZTopYQh46NSJfoZ+cLy3gsT7IT3BhQynLPCWM34idEWfg2zDq9e AQbatDWuLfffnWe9nG0xabfPM3bWdSEKaFFpUx2mGJ3cpaZ+7YJVooHaqPCntJmZ Kr7YoxCVyWoOa4deKRYZsk86tBkRNbvj4RojNHLmXFu6TYPzIgBsSc6T6gEWDNA2 Pd9OM6AjLUXIHkrOjDI6tljNgcloIYDM -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:30 2025 by rpki-client