$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json) Hash identifier: ZQwZZCzRRYkmMV+BdMTr39NdVA5MdqGpgBXjb/eHBZQ= Subject key identifier: DE:CA:E2:E3:D1:24:B7:55:49:C5:51:89:80:9F:70:44:99:52:1C:5B Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Certificate serial: 182F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft Manifest number: 1818 Signing time: Thu 24 Apr 2025 16:33:29 +0000 Manifest this update: Thu 24 Apr 2025 16:33:28 +0000 Manifest next update: Thu 01 May 2025 16:33:28 +0000 Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: cs6eqCCrub7tu+q415e/J00siE5w/Xb4gO5CYMGt0os=) 2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: 8IxMRzh5qaWGfk62iyhaPPZa1vR76AhV579NwWq7910=) 3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: we20c5hV82a760VbWZeMcxrJkqzrZ+m6YkUxwCa2cqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6191 (0x182f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Validity Not Before: Apr 24 16:33:28 2025 GMT Not After : May 1 16:33:28 2025 GMT Subject: CN=680a67d9-5032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:48:a2:15:9d:93:64:f0:64:80:f9:5a:bc: 21:88:66:5f:74:d4:6a:e7:9b:73:b7:29:69:15:44: e2:22:b4:e3:26:f7:be:f9:6f:66:44:66:9b:06:05: 50:7f:53:8f:c0:06:5b:1f:52:69:46:11:b7:be:11: 05:7c:76:32:99:6a:1a:20:e4:ce:5f:1a:bb:28:53: 0d:ce:0f:2a:61:00:ac:69:2d:8c:62:0e:ab:10:22: 06:5c:37:af:d1:ea:91:75:0e:01:58:74:1c:e2:fc: 15:d9:ca:18:93:07:f7:da:0e:ad:fd:d4:a3:66:06: 11:89:f3:e4:25:1a:78:13:b0:86:84:41:7b:b9:0c: c1:07:a4:52:3a:e9:46:fc:0d:c5:ca:38:c9:6b:67: 1d:60:e2:a9:c0:1e:66:13:fb:05:4e:5e:b2:36:13: 2b:5d:4f:10:63:45:34:e3:59:91:07:8b:24:c8:7b: 8e:f0:39:ed:4c:59:ec:22:23:6a:1a:4a:58:ca:e9: 29:ce:69:d6:13:b7:6f:1c:f0:8c:eb:24:75:1e:c0: 44:ca:a1:26:32:c8:90:83:1d:94:72:b8:fc:12:82: 8f:96:51:ae:8f:32:7b:ad:62:ba:fb:8e:d8:71:44: 9a:21:40:9d:4a:e8:03:ea:69:bf:9c:c4:96:a0:da: 61:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:E2:E3:D1:24:B7:55:49:C5:51:89:80:9F:70:44:99:52:1C:5B X509v3 Authority Key Identifier: keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ff:d1:b1:ff:4b:11:ee:8c:4a:94:0b:71:30:5b:8a:c1:80: 03:e3:8e:81:47:c3:3a:e0:dd:56:0f:04:c2:87:0d:84:f9:3d: c6:98:25:41:03:fa:50:2b:dc:f0:5b:0b:de:d0:6f:eb:6a:e7: 36:73:46:7c:40:83:b2:d2:8f:93:e4:31:f6:48:68:27:a6:88: d5:ab:27:78:8e:9e:ed:95:6a:b0:dd:3f:71:19:1a:b7:40:29: 04:a7:bb:d4:b8:1f:19:ca:73:05:38:72:ec:40:d4:78:76:0c: 86:13:d5:cb:4c:20:2b:fc:ad:e0:66:2f:e6:8c:ba:11:1b:e4: b9:11:90:c4:21:1a:d6:2d:b1:d2:67:d6:b4:4d:b1:27:52:c7: a2:14:ed:d9:16:92:17:fa:fa:99:d0:67:58:ec:90:f1:e0:f0: 49:bf:5a:28:a3:ba:aa:48:b1:1b:7e:95:de:c8:b5:fa:3e:39: fe:8e:0e:3d:7b:9b:b1:75:49:8a:59:df:ae:65:a9:af:52:0d: cc:52:c2:21:e3:bf:75:ac:ac:f1:91:5a:40:86:50:a4:0e:6c: f4:77:c2:6e:b3:be:0d:73:10:a0:35:9a:0a:87:9c:35:5a:78: 92:5c:66:b5:a4:8c:8e:c8:8e:b0:de:95:0e:b9:0d:7e:c2:5c: 5a:c7:7d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw MTgwMkE5NUMwHhcNMjUwNDI0MTYzMzI4WhcNMjUwNTAxMTYzMzI4WjAYMRYwFAYD VQQDEw02ODBhNjdkOS01MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/9IohWdk2TwZID5WrwhiGZfdNRq55tztylpFUTiIrTjJve++W9mRGabBgVQ f1OPwAZbH1JpRhG3vhEFfHYymWoaIOTOXxq7KFMNzg8qYQCsaS2MYg6rECIGXDev 0eqRdQ4BWHQc4vwV2coYkwf32g6t/dSjZgYRifPkJRp4E7CGhEF7uQzBB6RSOulG /A3FyjjJa2cdYOKpwB5mE/sFTl6yNhMrXU8QY0U041mRB4skyHuO8DntTFnsIiNq GkpYyukpzmnWE7dvHPCM6yR1HsBEyqEmMsiQgx2Ucrj8EoKPllGujzJ7rWK6+47Y cUSaIUCdSugD6mm/nMSWoNphbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7K4uPR JLdVScVRiYCfcESZUhxbMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVENC9CRUM5QUM4MkIwQkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4 Tk8wUnRHcVFyaklCZ0NxVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq/9Gx/0sR7oxKlAtxMFuKwYAD446BR8M64N1WDwTChw2E+T3GmCVB A/pQK9zwWwve0G/rauc2c0Z8QIOy0o+T5DH2SGgnpojVqyd4jp7tlWqw3T9xGRq3 QCkEp7vUuB8ZynMFOHLsQNR4dgyGE9XLTCAr/K3gZi/mjLoRG+S5EZDEIRrWLbHS Z9a0TbEnUseiFO3ZFpIX+vqZ0GdY7JDx4PBJv1ooo7qqSLEbfpXeyLX6Pjn+jg49 e5uxdUmKWd+uZamvUg3MUsIh4791rKzxkVpAhlCkDmz0d8Jus74NcxCgNZoKh5w1 WniSXGa1pIyOyI6w3pUOuQ1+wlxax325 -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:11 2025 by rpki-client