$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: UJPfYq5D9KAsaqungJlwd1At33fm+iAe0ZYD/A1lrh0= Subject key identifier: 57:CC:58:0E:45:C5:03:61:0C:BE:D1:E1:96:DF:EF:EF:59:29:B4:1F Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 0260 Signing time: Fri 25 Apr 2025 01:32:18 +0000 Manifest this update: Fri 25 Apr 2025 01:32:17 +0000 Manifest next update: Fri 02 May 2025 01:32:17 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: Lq7kUVvZ2dn7cxUUCEGmu5j+QHoXia6Dm3sn5aWY6y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Apr 25 01:32:17 2025 GMT Not After : May 2 01:32:17 2025 GMT Subject: CN=680ae622-dac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:22:f2:46:57:56:85:6f:3a:1e:b2:01:17: c9:94:30:3f:61:d6:29:a5:5f:d8:6e:38:95:b6:53: e1:b0:61:82:6c:e6:70:6c:20:28:ec:68:ea:84:1f: fe:f9:95:9a:76:55:4d:25:a4:65:aa:be:8d:ce:d9: b3:03:5a:d8:1e:b3:96:8d:d8:bf:8f:cf:a8:fc:9e: b1:2d:18:5f:48:4b:22:2f:cd:eb:b0:69:36:5f:4c: e8:e8:0e:a2:cb:8c:71:51:88:a2:b1:14:a9:3c:37: 64:46:55:91:c3:37:74:75:83:7d:3b:8d:7c:62:e6: 9b:be:27:83:b2:3f:ec:60:b5:08:a8:18:ee:ae:95: c0:1f:39:c7:04:6f:7d:ba:89:62:d9:e4:6d:f7:0c: 8e:44:af:90:5a:0b:4c:c0:56:49:ef:94:90:40:3a: 0f:86:31:91:31:3c:32:cc:4f:3f:b9:09:cc:fe:42: 5d:48:bd:56:ef:99:8e:33:7b:52:28:bc:42:18:dd: 4a:2f:6b:81:d2:af:d6:cb:3a:c0:56:f2:70:1d:da: 7c:81:27:ae:42:44:d6:20:72:a5:e2:3f:a8:3d:6c: c3:d0:e5:30:8a:97:a0:3b:84:11:9d:41:93:6f:b3: e9:00:4a:59:2e:6f:e5:2a:45:5b:35:64:35:73:74: 4a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CC:58:0E:45:C5:03:61:0C:BE:D1:E1:96:DF:EF:EF:59:29:B4:1F X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7f:dc:aa:66:82:d6:1d:06:76:17:f2:b4:b9:d3:ec:71:f8: 9f:27:57:c5:1f:36:5d:fa:a0:67:52:4b:af:16:82:6d:53:6c: 44:41:92:f6:3c:a8:1a:c1:ab:5f:14:71:37:04:79:0d:70:21: 89:ed:06:49:90:46:2f:a1:f0:a7:c0:24:2a:3b:44:59:d8:e2: 06:e0:5b:7a:6e:a1:2b:f4:0e:9e:af:d9:8d:3b:08:89:8f:d6: 51:9b:de:f0:73:5a:ff:5a:c6:0b:0d:60:15:84:35:09:3e:db: 9e:2d:8e:7b:f6:7c:70:bf:5e:21:53:38:fa:00:1c:ee:61:2f: 3c:e3:64:cb:d9:b2:a8:57:0c:3a:38:a8:d0:40:35:82:c5:d7: c8:46:3e:7b:0d:b4:67:f9:90:6d:cb:af:53:32:f2:4b:34:53: c2:46:1c:ab:20:68:5e:ed:68:94:7e:72:96:cb:49:d9:91:5c: 86:f5:5d:4f:d4:b4:f8:06:fc:b0:f0:b4:d6:83:54:54:67:16: d9:1b:d2:95:98:43:50:f6:bd:7f:bb:1d:22:46:cc:0c:a1:36: e7:0e:9c:1b:4f:77:de:84:0f:eb:18:c5:13:ad:f6:6b:76:9f: b4:1f:46:af:46:7d:12:b3:32:4b:2a:55:00:42:db:ec:8a:eb: 54:42:79:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUwNDI1MDEzMjE3WhcNMjUwNTAyMDEzMjE3WjAYMRYwFAYD VQQDEw02ODBhZTYyMi1kYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8wi8kZXVoVvOh6yARfJlDA/YdYppV/YbjiVtlPhsGGCbOZwbCAo7GjqhB/+ +ZWadlVNJaRlqr6NztmzA1rYHrOWjdi/j8+o/J6xLRhfSEsiL83rsGk2X0zo6A6i y4xxUYiisRSpPDdkRlWRwzd0dYN9O418YuabvieDsj/sYLUIqBjurpXAHznHBG99 uoli2eRt9wyORK+QWgtMwFZJ75SQQDoPhjGRMTwyzE8/uQnM/kJdSL1W75mOM3tS KLxCGN1KL2uB0q/WyzrAVvJwHdp8gSeuQkTWIHKl4j+oPWzD0OUwipegO4QRnUGT b7PpAEpZLm/lKkVbNWQ1c3RKmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfMWA5F xQNhDL7R4Zbf7+9ZKbQfMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYf9yqZoLWHQZ2F/K0udPscfifJ1fFHzZd+qBnUkuvFoJtU2xEQZL2 PKgawatfFHE3BHkNcCGJ7QZJkEYvofCnwCQqO0RZ2OIG4Ft6bqEr9A6er9mNOwiJ j9ZRm97wc1r/WsYLDWAVhDUJPtueLY579nxwv14hUzj6ABzuYS8842TL2bKoVww6 OKjQQDWCxdfIRj57DbRn+ZBty69TMvJLNFPCRhyrIGhe7WiUfnKWy0nZkVyG9V1P 1LT4Bvyw8LTWg1RUZxbZG9KVmENQ9r1/ux0iRswMoTbnDpwbT3fehA/rGMUTrfZr dp+0H0avRn0SszJLKlUAQtvsiutUQnmg -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:55 2025 by rpki-client