$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: hEz82mipLTPPywc9aXqUFvu/WErkj/N3BZhDhem0nFk= Subject key identifier: E9:10:B9:63:DE:27:18:10:CD:C4:BA:EE:83:E6:EF:CE:08:CB:BC:C4 Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 017B Signing time: Fri 25 Apr 2025 03:00:24 +0000 Manifest this update: Fri 25 Apr 2025 03:00:23 +0000 Manifest next update: Fri 02 May 2025 03:00:23 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: dY5qw+i4pKwet5guiPxPZThUmjugJ6eeK38/9ix+Uzk=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: wIfWv8k11m2nJjvD9OZyvuvwJHOiHTaCFNkOK+76jZw=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 8Baf5eHeRnNrGmSSDb+55e+ExZ2m5tnzgHIxbW3wB58=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: /e5dKdsxY7i/S5RsJcqyRRAjOevxOXqA06J4ijaW9S8=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: 1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Apr 25 03:00:23 2025 GMT Not After : May 2 03:00:23 2025 GMT Subject: CN=680afac7-2f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:06:e0:04:1e:65:d8:b9:3e:a3:7d:90:bb: e5:97:88:ba:e6:8f:a6:ca:95:fb:32:1d:c2:bb:0c: 6f:65:cb:5b:16:48:0f:1f:0e:7d:b8:1a:eb:c3:bf: ac:ed:50:0f:82:87:66:38:3f:ae:5b:8e:bc:0a:78: 5f:d4:4e:03:94:29:7e:3b:8f:ce:42:c9:39:80:97: 3b:ed:b1:7a:fe:a5:f9:d1:8c:2c:1b:08:d7:ec:97: 9d:e1:e9:55:17:ec:f9:65:b2:24:f6:d3:6c:a9:b0: c8:0b:ca:bb:b8:80:32:76:04:a6:cb:03:b1:ec:c8: 82:75:86:91:9a:08:4a:f2:43:de:ce:bb:db:33:09: d3:15:9e:fe:9f:d1:99:0a:f5:cc:ee:fe:05:02:04: 1b:77:f5:36:8b:e0:99:70:dd:a3:83:4b:b6:b1:bc: f1:82:20:11:6a:6a:65:e0:9f:c8:35:09:5d:40:70: 86:c6:6f:e2:e7:18:ff:d1:a9:75:f2:07:bf:d2:aa: 6b:43:f4:3a:b3:09:15:c6:4c:f9:31:74:e4:af:54: 6a:e3:42:8d:7a:43:b4:aa:3a:8e:e0:28:24:7d:52: d5:4f:51:da:31:b4:93:d2:27:c9:a2:8a:81:4e:71: 55:a8:ca:10:a9:b0:90:07:fa:87:49:25:6c:61:f3: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:10:B9:63:DE:27:18:10:CD:C4:BA:EE:83:E6:EF:CE:08:CB:BC:C4 X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:87:28:9a:f7:e8:9c:3d:c2:6e:14:7e:30:36:f0:8b:ec:46: 20:b6:74:ff:d9:3a:99:3a:64:56:5b:31:e0:2b:34:17:b0:6a: a1:b1:a4:0f:50:5d:58:65:6f:5d:d7:92:6b:32:d3:d0:7a:0e: 20:f6:50:99:f8:ea:ac:a3:e7:c9:8c:99:f8:0a:5e:07:3f:f0: eb:6d:f6:fb:5f:3b:a8:ad:a6:c7:19:e6:9d:92:bb:8d:fc:15: 09:9b:7a:4f:66:b3:9e:92:df:a3:03:d9:08:8a:6c:54:18:72: 92:56:a1:6f:3e:5e:87:03:f6:10:7f:f5:98:66:0d:41:d6:52: 2e:f6:e1:b1:c0:94:f0:cf:3a:bc:0c:04:75:14:b0:72:ea:86: 8a:b0:ad:86:bc:ec:42:fa:b4:5c:76:48:d7:f3:1e:08:24:18: 81:7c:3f:d1:66:d4:a2:f3:19:36:12:b4:e1:53:0e:a1:13:ba: 11:51:a6:63:bd:44:ea:37:34:d7:54:be:64:ac:17:5c:92:b2: dd:b9:38:73:46:a5:7b:17:7c:94:9b:75:25:04:72:c3:7b:d9: 2a:c2:37:78:00:ea:d7:c2:0f:ea:34:fe:27:55:3b:f4:60:af: 98:45:f0:32:04:7d:a1:14:af:a3:be:a5:83:de:cc:fc:5b:04: 05:c9:69:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUwNDI1MDMwMDIzWhcNMjUwNTAyMDMwMDIzWjAYMRYwFAYD VQQDEw02ODBhZmFjNy0yZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwucG4AQeZdi5PqN9kLvll4i65o+mypX7Mh3CuwxvZctbFkgPHw59uBrrw7+s 7VAPgodmOD+uW468Cnhf1E4DlCl+O4/OQsk5gJc77bF6/qX50YwsGwjX7Jed4elV F+z5ZbIk9tNsqbDIC8q7uIAydgSmywOx7MiCdYaRmghK8kPezrvbMwnTFZ7+n9GZ CvXM7v4FAgQbd/U2i+CZcN2jg0u2sbzxgiARampl4J/INQldQHCGxm/i5xj/0al1 8ge/0qprQ/Q6swkVxkz5MXTkr1Rq40KNekO0qjqO4CgkfVLVT1HaMbST0ifJooqB TnFVqMoQqbCQB/qHSSVsYfOczwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkQuWPe JxgQzcS67oPm784Iy7zEMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCihyia9+icPcJuFH4wNvCL7EYgtnT/2TqZOmRWWzHgKzQXsGqhsaQP UF1YZW9d15JrMtPQeg4g9lCZ+Oqso+fJjJn4Cl4HP/Drbfb7XzuorabHGeadkruN /BUJm3pPZrOekt+jA9kIimxUGHKSVqFvPl6HA/YQf/WYZg1B1lIu9uGxwJTwzzq8 DAR1FLBy6oaKsK2GvOxC+rRcdkjX8x4IJBiBfD/RZtSi8xk2ErThUw6hE7oRUaZj vUTqNzTXVL5krBdckrLduThzRqV7F3yUm3UlBHLDe9kqwjd4AOrXwg/qNP4nVTv0 YK+YRfAyBH2hFK+jvqWD3sz8WwQFyWm4 -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:53 2025 by rpki-client