$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: fzANEJuoH1euy4h0/2K8OKjLVF7NRaumIJcKZGWiRCE= Subject key identifier: 32:49:E5:C9:6E:39:F9:39:C6:7B:3D:52:DB:53:6A:BF:01:07:9F:63 Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0CF0 Signing time: Thu 24 Apr 2025 18:03:54 +0000 Manifest this update: Thu 24 Apr 2025 18:03:54 +0000 Manifest next update: Thu 01 May 2025 18:03:54 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: W+4sN2VH7MlT5kzkWOX9ZeoIDX9bdHIp59KM9gqLBB8=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: zkAhSZ57x5i2z1ecY4hViVs+riusX3XK2gSVsFUEBsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Apr 24 18:03:54 2025 GMT Not After : May 1 18:03:54 2025 GMT Subject: CN=680a7d0a-814c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:26:6c:3e:f2:37:ec:59:8e:69:92:ec:d6: 3f:2c:4a:d5:e9:2c:c6:c6:7d:cd:78:0b:2a:55:b8: 2b:2f:a7:a8:9b:51:a5:a7:47:43:e5:3d:c3:d5:83: e0:07:00:0e:25:b5:d7:5f:a4:b4:d7:28:9c:af:28: 0a:8c:62:4a:fb:8d:4e:f8:5c:e6:10:6f:e3:1d:9f: 24:73:dd:63:5e:44:1a:1e:cc:9d:ae:d6:24:93:c2: d5:cb:6f:32:1f:fd:98:b8:3a:7a:bd:49:46:d3:c4: 92:7f:9a:16:38:36:86:a5:a3:fa:cd:4f:c7:1c:03: e5:6b:72:96:3a:ae:e1:d2:aa:ee:db:1d:70:1d:41: 25:a1:fa:5f:11:70:51:3b:49:20:26:6a:ef:ca:9b: 83:90:a1:62:84:c9:de:34:86:53:d7:8f:30:1f:be: b9:eb:c9:ef:3e:f8:05:c2:d1:c7:06:08:c4:fa:e8: fc:33:8d:88:84:17:e4:b5:6a:eb:ea:b4:3f:9c:ee: 39:12:af:5c:44:de:76:17:15:85:fb:3f:46:25:d3: 1b:ef:14:b4:3d:27:15:e0:d9:d2:6a:9f:5f:16:8a: b4:bb:23:86:75:c9:98:7b:c1:da:d2:2f:28:72:7b: d8:29:f7:39:ee:0a:c2:3f:46:75:2c:14:74:4c:0e: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:49:E5:C9:6E:39:F9:39:C6:7B:3D:52:DB:53:6A:BF:01:07:9F:63 X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3b:12:22:e7:24:08:30:66:67:f1:ff:bd:84:99:0e:90:a1: 78:ce:56:9c:fd:8d:f3:78:ec:c6:03:23:d5:9b:5f:2b:64:8d: 6d:7a:95:2b:33:6b:63:9b:dd:ab:7d:b3:79:d4:19:04:89:0c: 2a:d7:9b:a7:7c:6f:e0:d6:86:de:d4:04:2f:ba:85:6e:da:fb: 0f:c7:8c:0e:d6:e7:9b:7e:d1:99:4e:c9:ac:77:1d:d7:b5:52: 4c:3d:e2:22:ce:6d:28:38:70:40:55:fc:30:f5:14:01:2a:50: 03:7f:3c:37:ce:81:96:53:b6:7c:00:83:aa:61:e8:ab:07:5e: 0b:2a:56:d7:75:3b:80:1e:c9:47:1f:fe:be:6b:d3:dc:35:74: 18:67:a2:15:ef:eb:bc:aa:79:ed:a9:c0:26:2d:35:8e:24:bf: f3:df:27:8d:a0:0d:c4:30:16:df:da:cc:b8:75:40:f0:fb:4f: 37:48:a2:67:3d:f9:2a:74:76:88:71:e2:69:03:a0:c8:99:89: 89:43:73:f9:0e:69:84:62:d4:fc:2e:ba:2a:ff:dc:26:cf:21: e3:14:d1:86:4f:7a:2f:80:81:66:39:f2:6b:9d:87:8e:4e:dc: c6:06:28:15:d6:f6:c7:93:4a:94:d5:85:2b:e6:b9:33:6d:a9: ae:2d:59:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjUwNDI0MTgwMzU0WhcNMjUwNTAxMTgwMzU0WjAYMRYwFAYD VQQDEw02ODBhN2QwYS04MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMEmbD7yN+xZjmmS7NY/LErV6SzGxn3NeAsqVbgrL6eom1Glp0dD5T3D1YPg BwAOJbXXX6S01yicrygKjGJK+41O+FzmEG/jHZ8kc91jXkQaHsydrtYkk8LVy28y H/2YuDp6vUlG08SSf5oWODaGpaP6zU/HHAPla3KWOq7h0qru2x1wHUElofpfEXBR O0kgJmrvypuDkKFihMneNIZT148wH76568nvPvgFwtHHBgjE+uj8M42IhBfktWrr 6rQ/nO45Eq9cRN52FxWF+z9GJdMb7xS0PScV4NnSap9fFoq0uyOGdcmYe8Ha0i8o cnvYKfc57grCP0Z1LBR0TA6h7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJJ5clu Ofk5xns9UttTar8BB59jMB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADOxIi5yQIMGZn8f+9hJkOkKF4zlac/Y3zeOzGAyPVm18rZI1tepUr M2tjm92rfbN51BkEiQwq15unfG/g1obe1AQvuoVu2vsPx4wO1uebftGZTsmsdx3X tVJMPeIizm0oOHBAVfww9RQBKlADfzw3zoGWU7Z8AIOqYeirB14LKlbXdTuAHslH H/6+a9PcNXQYZ6IV7+u8qnntqcAmLTWOJL/z3yeNoA3EMBbf2sy4dUDw+083SKJn PfkqdHaIceJpA6DImYmJQ3P5DmmEYtT8Lroq/9wmzyHjFNGGT3ovgIFmOfJrnYeO TtzGBigV1vbHk0qU1YUr5rkzbamuLVlp -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:52 2025 by rpki-client