$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: VxelPo+GwcrjrwagLi3UcrdjSu9vEffQwLWNjtjShVo= Subject key identifier: A9:CE:E1:7A:28:AE:1C:92:26:ED:E7:65:CA:A5:DA:4E:41:9D:FE:CF Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 042C Signing time: Fri 25 Apr 2025 00:10:00 +0000 Manifest this update: Fri 25 Apr 2025 00:09:59 +0000 Manifest next update: Fri 02 May 2025 00:09:59 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: cyHfhY8fgUTvenv3nBFFqQCmmMbhKbIxxfCiArx9stE=) 2: 5590E4766AD111EFB8AD551AC4F9AE02.roa (hash: u4534TN3FipMq5w+c3LILmi2ZS4NbdKmjDpYBOie5OM=) 3: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Apr 25 00:09:59 2025 GMT Not After : May 2 00:09:59 2025 GMT Subject: CN=680ad2d8-fd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:2b:bb:35:8d:46:5a:9e:e2:15:b7:a6:79: 28:08:d0:ca:c3:8b:d8:e5:2b:9e:22:88:f2:c5:e9: 3c:17:a6:16:06:3c:77:79:af:77:92:76:55:06:42: ea:fc:a1:cb:ae:4f:1c:ab:08:06:48:9e:d7:8f:3c: 27:80:03:a9:bd:28:0a:bb:49:0a:6e:87:05:2b:d5: 04:28:2b:3d:2e:ea:d6:47:e0:a7:7c:0a:37:11:1d: 9f:fa:be:1e:21:dc:ab:67:e4:ae:be:ab:e1:d6:72: 4b:dc:c8:d2:4b:a2:1b:2a:08:2d:c3:ef:92:5a:f1: c9:d8:8b:07:30:34:d6:4a:09:5d:de:44:6b:10:e4: a2:74:82:72:92:23:55:63:a8:2b:bc:26:26:09:cf: a1:cc:14:45:89:af:11:e5:63:3a:f4:c3:43:64:57: 51:1b:72:82:d2:c3:45:dc:57:7c:e9:c5:13:be:32: 18:03:ad:27:c7:f4:06:5f:9d:58:e2:70:f3:53:f6: 84:88:45:09:86:5a:02:34:84:ad:80:26:91:f7:cf: d6:b8:80:51:76:e1:64:6c:48:94:7b:05:39:be:4a: 6e:80:dd:1e:ce:ac:c9:eb:68:7c:21:15:88:f1:79: 07:39:80:ca:93:a1:60:dd:07:5e:f4:2d:35:49:0e: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CE:E1:7A:28:AE:1C:92:26:ED:E7:65:CA:A5:DA:4E:41:9D:FE:CF X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:85:44:ca:9c:92:00:cf:b1:d6:52:f5:76:fb:d8:c5:45:b9: 26:db:9d:1b:58:be:43:5c:33:9a:d4:7f:07:07:df:fd:f6:81: 60:ed:b1:50:d7:e8:b0:3f:ab:80:a7:59:a5:f3:be:a9:fc:4b: 34:a6:d3:d3:fe:0d:20:47:81:14:2d:a7:c4:f2:2b:6e:07:af: 3d:ce:42:32:02:a9:54:eb:38:5a:5c:dc:47:35:eb:30:93:c9: 31:b6:5c:0a:91:38:a5:1f:e7:d1:ab:cd:73:53:d7:d5:4e:bd: 79:9e:df:09:35:9c:0d:e3:ef:20:15:d5:76:49:17:a6:96:01: 2b:2c:93:63:37:3a:a9:ca:bb:43:bf:d9:a5:d8:ab:e5:70:b5: 7d:f3:db:db:51:8b:68:b8:96:d3:a0:02:e3:6f:a0:0b:2d:da: 81:9c:61:ef:fa:71:f1:6c:eb:fb:7e:4c:9b:36:aa:a6:cb:b7: 15:30:63:4c:74:3e:fa:f9:77:c0:46:52:64:ce:74:d8:a7:e4: 19:36:ac:ce:a9:29:ad:ef:7f:57:3f:2f:5f:e8:57:0c:99:19: 86:63:fd:33:f6:5e:a6:de:ed:d4:8f:b8:4a:44:cc:be:18:57: e2:c1:ee:68:11:4d:1d:00:02:a5:23:c8:d5:24:14:76:c6:e6: ad:0a:8c:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUwNDI1MDAwOTU5WhcNMjUwNTAyMDAwOTU5WjAYMRYwFAYD VQQDEw02ODBhZDJkOC1mZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JUruzWNRlqe4hW3pnkoCNDKw4vY5SueIojyxek8F6YWBjx3ea93knZVBkLq /KHLrk8cqwgGSJ7XjzwngAOpvSgKu0kKbocFK9UEKCs9LurWR+CnfAo3ER2f+r4e IdyrZ+Suvqvh1nJL3MjSS6IbKggtw++SWvHJ2IsHMDTWSgld3kRrEOSidIJykiNV Y6grvCYmCc+hzBRFia8R5WM69MNDZFdRG3KC0sNF3Fd86cUTvjIYA60nx/QGX51Y 4nDzU/aEiEUJhloCNIStgCaR98/WuIBRduFkbEiUewU5vkpugN0ezqzJ62h8IRWI 8XkHOYDKk6Fg3Qde9C01SQ6WvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnO4Xoo rhySJu3nZcql2k5Bnf7PMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOhUTKnJIAz7HWUvV2+9jFRbkm250bWL5DXDOa1H8HB9/99oFg7bFQ 1+iwP6uAp1ml876p/Es0ptPT/g0gR4EULafE8ituB689zkIyAqlU6zhaXNxHNesw k8kxtlwKkTilH+fRq81zU9fVTr15nt8JNZwN4+8gFdV2SRemlgErLJNjNzqpyrtD v9ml2KvlcLV989vbUYtouJbToALjb6ALLdqBnGHv+nHxbOv7fkybNqqmy7cVMGNM dD76+XfARlJkznTYp+QZNqzOqSmt739XPy9f6FcMmRmGY/0z9l6m3u3Uj7hKRMy+ GFfiwe5oEU0dAAKlI8jVJBR2xuatCozD -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:47 2025 by rpki-client