$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: BX1lGtDbIpLBf5HrhF/t89QBNaLmbzs0iFI/GewJAkw= Subject key identifier: E4:BE:2E:D7:5C:93:66:AC:8F:9F:44:ED:44:CA:08:E2:25:87:06:E7 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:08:15 +0000 Manifest this update: Fri 25 Apr 2025 04:08:15 +0000 Manifest next update: Fri 02 May 2025 04:08:15 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: 5uCiSyGJwQ+Ybw+J9/tuXnSBd7PYvtjqswMsp8BWkGk=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Apr 25 04:08:15 2025 GMT Not After : May 2 04:08:15 2025 GMT Subject: CN=680b0aaf-d4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:ba:9a:49:b4:bc:84:69:32:74:83:b9:2d: f1:d5:47:60:0b:73:58:29:07:2c:d4:f2:c1:7f:03: 5c:92:5a:26:53:eb:d9:80:8f:dc:cc:b1:1c:a0:ac: 6f:30:df:2a:2c:e1:5a:ad:1b:37:6c:cf:ac:4e:54: 2c:45:a2:d8:72:df:e5:4f:44:eb:ba:38:b9:26:12: 3d:6c:1b:88:cf:92:cb:fc:bb:5b:03:ec:6c:0b:18: b7:50:71:31:fe:f5:6c:b4:8f:7e:be:69:8e:8d:8c: de:a2:fb:bc:6e:41:0e:0d:4d:a5:67:62:f0:d4:0e: f4:c5:03:ab:fa:65:f2:c4:51:dd:a7:21:0a:25:a3: 9a:ca:9b:06:0d:1f:ca:2a:2c:64:77:2b:7b:8e:f5: 88:59:e4:a7:50:c8:aa:fd:1c:d8:c4:df:d6:d1:81: 93:0a:66:fb:9d:29:b7:a5:c6:1f:b5:1b:5a:26:fc: ac:be:de:0e:29:0e:e9:11:5f:82:52:78:18:ad:c7: 3b:0d:a9:4b:7b:66:0d:a6:b5:8d:10:e6:bd:82:cc: 0a:30:4c:6c:62:d9:aa:3c:a0:5f:6d:49:0e:9e:34: fb:b7:f9:83:6a:cb:a5:76:81:fa:e9:c3:2d:7f:c6: 0b:52:53:e4:56:00:a0:9f:d5:87:8d:ca:c6:3b:60: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BE:2E:D7:5C:93:66:AC:8F:9F:44:ED:44:CA:08:E2:25:87:06:E7 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d6:76:99:32:2e:36:2f:b7:ab:4e:f6:08:c0:36:eb:62:04: 49:7d:04:8b:0a:8e:12:53:a9:e1:85:e9:e5:94:4f:4e:0c:30: f2:27:83:3d:fb:76:65:4a:bf:52:e9:d5:cf:94:37:f9:5c:33: aa:c8:51:b2:7c:d4:0d:a3:2d:bc:b0:96:74:74:fd:7d:18:b4: 7d:1d:76:0b:ec:bc:91:58:89:32:e5:6d:c9:82:b3:14:f2:3f: c0:f3:ee:d9:33:e0:da:12:79:bd:e5:8a:35:19:68:be:01:9c: f4:ad:cc:65:1e:d8:cd:cf:af:36:9b:53:dc:9d:b4:20:58:1e: dc:5e:a6:ff:ab:4d:5e:b6:c0:61:fc:d1:e8:a7:9c:f4:3e:bf: 99:a5:ec:e3:0d:bb:42:f9:8c:2b:b6:35:cd:22:55:e8:79:f6: ec:15:1c:45:87:fe:9d:90:8c:d9:f0:02:72:f4:61:7d:8f:7e: 44:3f:a5:ff:7e:e0:77:ff:b5:19:09:fa:0e:4f:9c:15:e7:6f: d4:41:55:5a:9c:86:e8:28:83:08:72:ed:c3:c8:66:98:7a:e5: 9a:e3:4c:ef:4e:1e:be:6e:4a:98:d4:5e:e5:f9:ef:8e:aa:f5: 3e:ae:64:bc:6a:1c:14:cf:ef:02:9f:f3:3d:b3:d3:1f:19:78: f9:ff:99:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUwNDI1MDQwODE1WhcNMjUwNTAyMDQwODE1WjAYMRYwFAYD VQQDEw02ODBiMGFhZi1kNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOq6mkm0vIRpMnSDuS3x1UdgC3NYKQcs1PLBfwNcklomU+vZgI/czLEcoKxv MN8qLOFarRs3bM+sTlQsRaLYct/lT0Truji5JhI9bBuIz5LL/LtbA+xsCxi3UHEx /vVstI9+vmmOjYzeovu8bkEODU2lZ2Lw1A70xQOr+mXyxFHdpyEKJaOaypsGDR/K Kixkdyt7jvWIWeSnUMiq/RzYxN/W0YGTCmb7nSm3pcYftRtaJvysvt4OKQ7pEV+C UngYrcc7DalLe2YNprWNEOa9gswKMExsYtmqPKBfbUkOnjT7t/mDasuldoH66cMt f8YLUlPkVgCgn9WHjcrGO2CO/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS+Ltdc k2asj59E7UTKCOIlhwbnMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk1naZMi42L7erTvYIwDbrYgRJfQSLCo4SU6nhhenllE9ODDDyJ4M9 +3ZlSr9S6dXPlDf5XDOqyFGyfNQNoy28sJZ0dP19GLR9HXYL7LyRWIky5W3JgrMU 8j/A8+7ZM+DaEnm95Yo1GWi+AZz0rcxlHtjNz682m1PcnbQgWB7cXqb/q01etsBh /NHop5z0Pr+ZpezjDbtC+YwrtjXNIlXoefbsFRxFh/6dkIzZ8AJy9GF9j35EP6X/ fuB3/7UZCfoOT5wV52/UQVVanIboKIMIcu3DyGaYeuWa40zvTh6+bkqY1F7l+e+O qvU+rmS8ahwUz+8Cn/M9s9MfGXj5/5ks -----END CERTIFICATE-----Generated at Sat Apr 26 15:17:51 2025 by rpki-client