$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: AGaCz5KWpTBCbq6ibsEthFJEF6wDGLuArQNq2JBVZoo= Subject key identifier: 6B:4A:D8:DB:16:6D:A3:55:49:4F:3A:03:05:CA:C7:48:93:A1:CA:3B Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 03F2 Signing time: Fri 25 Apr 2025 00:38:30 +0000 Manifest this update: Fri 25 Apr 2025 00:38:29 +0000 Manifest next update: Fri 02 May 2025 00:38:29 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: cfLnx+wdzKGgMpI1jWvE+We2JcgD+Oa4g7qNKZQ1VuA=) 2: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (hash: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI=) 3: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=) 4: 8ED9161EB08F11EF8E3C4F2FC4F9AE02.roa (hash: CH8GchMto/uPRqPYkKGBpICTR9Zi45Sn6IDLqaBYXYk=) 5: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=) 6: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=) 7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=) 8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=) 9: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=) 10: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (hash: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Apr 25 00:38:29 2025 GMT Not After : May 2 00:38:29 2025 GMT Subject: CN=680ad985-64a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:0d:b6:60:e4:44:65:01:89:ff:07:52:4a: da:29:a7:0a:d4:10:42:b4:d6:9e:db:94:e4:6b:f4: 5a:db:57:43:3a:3a:b4:d6:03:08:31:63:55:b7:dc: 01:6a:33:9c:8a:ba:cd:ba:bc:ce:a0:a3:8d:56:40: 0b:c3:9f:d2:c9:33:d4:57:b2:5a:63:86:ce:e2:4e: e0:b4:64:db:92:12:0b:7d:90:1b:6f:94:0d:76:aa: 0d:27:d7:9f:3b:15:47:7a:c8:ae:97:35:02:6d:50: 2c:7b:c1:47:3a:88:6a:80:2b:d9:81:21:6a:29:26: 71:d0:e8:1b:40:55:60:27:9b:32:ba:ee:0c:33:38: 75:78:ff:e4:a3:4b:88:b6:54:80:fc:69:65:16:04: e5:ba:31:e6:7d:3d:fc:ef:82:7a:21:25:02:6f:69: 1f:8d:cc:06:91:10:ed:ae:51:a5:14:ea:e3:34:97: 64:89:d2:b6:15:7c:d5:95:7c:77:85:0f:89:90:e3: ca:52:12:11:fd:7e:dd:c6:19:be:b1:5d:43:31:e7: 49:98:8a:7f:25:16:3b:d2:d3:65:79:df:d9:1f:f8: 32:58:27:7a:9c:42:26:cc:14:6d:90:d2:5f:5c:3a: fb:20:1c:00:5e:f1:54:a5:41:8e:88:a2:20:8b:29: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:D8:DB:16:6D:A3:55:49:4F:3A:03:05:CA:C7:48:93:A1:CA:3B X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:bf:8e:54:1b:2d:ce:7b:b8:0b:f1:eb:46:9d:4f:02:3e:63: e7:a8:b0:32:d5:dd:d2:c5:87:71:38:82:be:bd:b5:ae:a2:a1: db:eb:20:e9:02:23:ad:0d:86:80:2b:85:b9:23:20:93:7d:02: 33:3b:49:2c:43:e3:4a:e1:e3:5a:35:ec:78:fd:f0:58:02:82: 7c:6d:1d:03:39:2b:b5:a6:6e:2a:72:e5:41:0c:d2:98:75:a8: 14:4a:df:1e:7a:44:a2:0b:c0:10:64:09:6e:9a:11:55:20:d9: ab:1d:5c:5b:79:9c:de:ec:6d:38:b3:89:bd:b7:fd:98:ab:1b: 6f:8e:bb:f9:c4:07:54:77:cc:fc:9f:b0:23:64:79:a8:20:2f: d2:ef:d4:a7:5e:4a:15:b9:41:e8:9e:34:2b:c2:56:2c:e7:cc: 62:ac:53:1e:8d:a0:e4:cb:03:aa:c6:42:04:69:9b:59:69:40: 74:34:83:7b:29:db:76:28:04:01:24:dd:ce:eb:f2:4a:8e:49: 60:e1:dd:f1:bd:9d:a6:18:b6:fd:d8:d8:78:0d:71:7a:bf:49: d9:2f:82:3e:78:b2:a9:31:5b:74:b8:8d:43:f1:3d:b4:01:54: d7:eb:57:85:a0:8e:50:df:74:5f:04:68:66:a4:36:ea:6f:6b: d2:e5:3c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwNDI1MDAzODI5WhcNMjUwNTAyMDAzODI5WjAYMRYwFAYD VQQDEw02ODBhZDk4NS02NGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9oNtmDkRGUBif8HUkraKacK1BBCtNae25Tka/Ra21dDOjq01gMIMWNVt9wB ajOcirrNurzOoKONVkALw5/SyTPUV7JaY4bO4k7gtGTbkhILfZAbb5QNdqoNJ9ef OxVHesiulzUCbVAse8FHOohqgCvZgSFqKSZx0OgbQFVgJ5syuu4MMzh1eP/ko0uI tlSA/GllFgTlujHmfT3874J6ISUCb2kfjcwGkRDtrlGlFOrjNJdkidK2FXzVlXx3 hQ+JkOPKUhIR/X7dxhm+sV1DMedJmIp/JRY70tNled/ZH/gyWCd6nEImzBRtkNJf XDr7IBwAXvFUpUGOiKIgiynZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtK2NsW baNVSU86AwXKx0iToco7MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7v45UGy3Oe7gL8etGnU8CPmPnqLAy1d3SxYdxOIK+vbWuoqHb6yDp AiOtDYaAK4W5IyCTfQIzO0ksQ+NK4eNaNex4/fBYAoJ8bR0DOSu1pm4qcuVBDNKY dagUSt8eekSiC8AQZAlumhFVINmrHVxbeZze7G04s4m9t/2Yqxtvjrv5xAdUd8z8 n7AjZHmoIC/S79SnXkoVuUHonjQrwlYs58xirFMejaDkywOqxkIEaZtZaUB0NIN7 Kdt2KAQBJN3O6/JKjklg4d3xvZ2mGLb92Nh4DXF6v0nZL4I+eLKpMVt0uI1D8T20 AVTX61eFoI5Q33RfBGhmpDbqb2vS5Txh -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:56 2025 by rpki-client