$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: 7EfGZkL213zfWq+pK/Eq63C2YA2CKd16fLAzPG6kUD8= Subject key identifier: 5A:7E:FD:F4:01:81:C6:54:BD:AD:83:FA:48:DB:D5:D3:CF:4D:68:86 Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: DD Signing time: Fri 25 Apr 2025 04:35:28 +0000 Manifest this update: Fri 25 Apr 2025 04:35:27 +0000 Manifest next update: Fri 02 May 2025 04:35:27 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: RoGQzUUDtHxpgvSc5gvfuwJHP2SKLAzJvOBNfjFDl8A=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: Apr 25 04:35:27 2025 GMT Not After : May 2 04:35:27 2025 GMT Subject: CN=680b1110-c285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:89:a1:54:5a:3b:a5:4f:28:48:0c:cb:db: 8a:48:56:0c:bc:bf:07:75:2f:f9:c2:48:cd:51:1a: 9a:1d:bc:b3:0c:3f:9e:f8:bc:5d:23:10:00:14:04: 90:7e:1b:dc:d9:a9:fd:0a:2a:6b:dc:a4:8e:2b:2b: f3:a8:70:20:2b:bb:13:2f:77:99:a2:bd:a5:47:16: 12:22:b5:92:44:68:fc:eb:8b:42:a5:2c:e4:dc:62: 80:15:be:6c:bd:9f:7a:14:63:e3:95:97:55:6b:36: d4:fc:05:ff:34:5d:ae:71:66:ac:b7:be:99:0d:bc: 52:52:62:ca:5c:c2:5f:6e:52:df:a4:31:b0:d6:ca: b8:54:d1:2c:88:4b:a2:01:98:da:1a:04:a9:9b:47: bc:e3:79:89:ac:00:52:b7:a4:fa:de:57:8d:7e:cd: b7:f8:19:43:33:fe:1e:01:7a:de:de:31:dd:a7:f3: 86:d2:b4:19:68:b6:80:9b:a3:2d:2e:95:25:75:ca: ed:35:2f:bc:a4:1d:ab:33:31:a1:10:4c:61:e8:01: e2:ae:9a:6a:28:17:a0:8c:5c:95:1b:60:8a:7d:06: 89:9e:b0:48:e7:0f:dc:ac:47:fc:78:e4:74:78:f8: 8c:80:91:87:f0:9f:23:48:b7:81:95:9c:45:0c:bc: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7E:FD:F4:01:81:C6:54:BD:AD:83:FA:48:DB:D5:D3:CF:4D:68:86 X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:18:72:e5:5c:14:2b:17:eb:de:5e:18:a4:40:45:21:4a: 86:e9:dd:4f:7a:d0:9a:0c:25:f3:47:30:55:5b:de:24:e7:cc: 66:1b:43:00:26:e9:0a:1a:74:c3:4d:d0:2e:02:50:fe:25:48: 1f:5c:64:32:0c:59:80:56:41:e4:6e:45:cc:16:a9:d9:c7:dc: 91:fd:c1:a9:6e:59:86:b9:93:9f:95:cd:e8:7f:73:cb:81:b8: c2:8d:f5:4e:7b:38:c7:8e:69:ba:e8:62:ef:cb:c9:b8:ad:73: 46:e3:44:8a:15:b9:42:7d:64:ef:e7:7d:40:d4:97:45:f1:76: b5:b2:38:23:a9:76:09:cf:29:9e:a2:2b:4f:99:3d:01:03:c7: f3:9c:c9:71:c1:88:e2:a1:9c:a0:7b:13:54:dd:d1:8b:e1:69: 10:c7:38:2b:45:07:e9:f3:3b:d7:4e:af:9e:43:ce:13:a9:ab: 65:c7:b1:3a:d2:64:99:0b:f6:5a:db:d2:08:41:99:85:57:cd: b4:a9:9b:61:9c:64:05:c4:3b:06:8f:c7:19:d9:aa:9d:79:37: 25:77:96:3c:fe:75:78:68:7e:9c:86:6a:f8:6f:69:df:99:60: 10:db:08:70:13:bd:4f:95:a2:c3:f2:1e:6b:4a:f7:d9:b2:1a: d2:26:3f:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1MEYxMTAvBgNVBAUTKDY2M0Y0RDVGQzgyNzBBNDQyMEZFMUU2MUY5MUFERkE4 MzdGRjFFRTQwHhcNMjUwNDI1MDQzNTI3WhcNMjUwNTAyMDQzNTI3WjAYMRYwFAYD VQQDEw02ODBiMTExMC1jMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5CJoVRaO6VPKEgMy9uKSFYMvL8HdS/5wkjNURqaHbyzDD+e+LxdIxAAFASQ fhvc2an9Cipr3KSOKyvzqHAgK7sTL3eZor2lRxYSIrWSRGj864tCpSzk3GKAFb5s vZ96FGPjlZdVazbU/AX/NF2ucWast76ZDbxSUmLKXMJfblLfpDGw1sq4VNEsiEui AZjaGgSpm0e843mJrABSt6T63leNfs23+BlDM/4eAXre3jHdp/OG0rQZaLaAm6Mt LpUldcrtNS+8pB2rMzGhEExh6AHirppqKBegjFyVG2CKfQaJnrBI5w/crEf8eOR0 ePiMgJGH8J8jSLeBlZxFDLweKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp+/fQB gcZUva2D+kjb1dPPTWiGMB8GA1UdIwQYMBaAFGY/TV/IJwpEIP4eYfka36g3/x7k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTUwRi81NzcxOTg1NEQx MzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNrUWdfaDVoLVJyZnFEZl9I dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTUwRi81NzcxOTg1NEQxMzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNr UWdfaDVoLVJyZnFEZl9IdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6Rhy5VwUKxfr3l4YpEBFIUqG6d1PetCaDCXzRzBVW94k58xmG0MA JukKGnTDTdAuAlD+JUgfXGQyDFmAVkHkbkXMFqnZx9yR/cGpblmGuZOflc3of3PL gbjCjfVOezjHjmm66GLvy8m4rXNG40SKFblCfWTv531A1JdF8Xa1sjgjqXYJzyme oitPmT0BA8fznMlxwYjioZygexNU3dGL4WkQxzgrRQfp8zvXTq+eQ84Tqatlx7E6 0mSZC/Za29IIQZmFV820qZthnGQFxDsGj8cZ2aqdeTcld5Y8/nV4aH6chmr4b2nf mWAQ2whwE71PlaLD8h5rSvfZshrSJj8V -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:06 2025 by rpki-client