$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: /djh8nwD7nTHckBcFBslMLBZYTSYNMvVt+I4jtF81xQ= Subject key identifier: D4:80:F6:CB:30:35:F1:A3:F0:69:89:56:99:2C:76:53:E5:E6:0A:12 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 25 Signing time: Fri 25 Apr 2025 06:48:34 +0000 Manifest this update: Fri 25 Apr 2025 06:48:33 +0000 Manifest next update: Fri 02 May 2025 06:48:33 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: HH488JUPEWZE8cgrtnNKJN3mrprLypEgIAyEtfM/6A4=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Apr 25 06:48:33 2025 GMT Not After : May 2 06:48:33 2025 GMT Subject: CN=680b3042-6dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:76:17:66:0b:ee:cd:ae:d4:79:17:2e:cd: 86:e1:31:68:4f:07:02:c5:fa:89:e7:ce:4d:6e:42: b1:8a:e4:af:a1:53:c5:f2:e6:61:a2:dc:d8:c8:07: e0:47:24:9c:17:45:74:38:5e:ca:6c:d6:20:c8:b4: 7c:16:bd:a1:93:2a:32:7d:ad:cf:3a:80:63:29:3d: 9d:5c:79:54:1f:8e:d2:70:c5:f4:4c:bc:a2:aa:12: cd:1a:74:49:67:3e:55:aa:4d:e0:19:45:18:24:63: 2c:83:78:90:6e:45:4a:be:f3:fe:70:32:75:84:8a: 9b:06:e9:87:8b:67:e0:40:f7:48:66:3c:ee:06:b2: 34:bf:31:b5:eb:7c:86:69:a0:c6:3c:96:16:e4:5d: 19:1b:38:47:9d:74:3b:90:61:67:d3:89:eb:68:2e: ed:a4:b5:f1:99:23:f1:dc:d8:79:9b:49:2b:f5:4e: e7:a7:ca:b6:fe:36:a4:c9:cb:9e:78:1b:e4:ad:89: 87:3d:f6:ac:8c:41:d1:41:7c:a6:f9:8a:43:c0:c1: bb:b2:c7:de:57:64:d5:00:66:d1:9f:44:df:17:68: f5:00:bb:1d:c3:49:c0:1d:b9:e3:84:04:26:4f:c6: 0e:e4:1e:89:61:c0:58:92:86:8c:c6:48:99:c4:67: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:F6:CB:30:35:F1:A3:F0:69:89:56:99:2C:76:53:E5:E6:0A:12 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b9:f8:3e:da:e9:a8:35:31:d3:73:9d:d6:97:b2:33:f6:e1: ba:2a:be:b0:1e:01:be:07:77:63:5d:68:5e:b8:ff:32:6b:c1: e5:fd:7a:c1:89:87:ff:a6:c5:99:47:3d:66:9c:37:f4:52:6d: 43:e3:f5:34:01:38:74:a4:02:d9:72:d4:b8:0e:19:7d:ac:c4: dc:aa:57:63:c4:20:7b:85:6d:13:a2:12:6d:5c:d7:99:38:42: c5:4a:fc:24:27:46:6b:55:7e:47:33:e8:82:1e:2d:15:1e:37: 21:ab:60:47:13:43:0e:38:30:ad:4a:19:30:4c:57:5b:2e:af: 5d:87:a7:87:a8:40:9d:49:29:59:53:9b:18:8b:b2:e2:74:f8: b2:c3:ee:2d:91:d5:57:b9:12:cd:06:8d:95:a9:b1:3a:33:ca: fd:89:f6:02:9c:be:42:ef:a5:0f:6e:04:50:8b:cf:da:73:76: a4:e2:7f:6a:62:91:49:6a:e8:58:36:97:73:43:8a:e6:d6:3d: bb:50:27:16:e6:a7:14:fb:a3:24:01:b0:da:b7:b6:b0:3e:24: b3:48:2f:f1:3f:63:e0:76:6b:54:1a:73:30:50:ae:3a:c4:18: 30:c6:32:7b:52:86:2b:fd:c1:7e:1a:d6:70:1e:bb:95:0f:26: 7f:91:7d:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA0MjUwNjQ4MzNaFw0yNTA1MDIwNjQ4MzNaMBgxFjAUBgNV BAMTDTY4MGIzMDQyLTZkZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcSnYXZgvuza7UeRcuzYbhMWhPBwLF+onnzk1uQrGK5K+hU8Xy5mGi3NjIB+BH JJwXRXQ4Xsps1iDItHwWvaGTKjJ9rc86gGMpPZ1ceVQfjtJwxfRMvKKqEs0adEln PlWqTeAZRRgkYyyDeJBuRUq+8/5wMnWEipsG6YeLZ+BA90hmPO4GsjS/MbXrfIZp oMY8lhbkXRkbOEeddDuQYWfTietoLu2ktfGZI/Hc2HmbSSv1Tuenyrb+NqTJy554 G+StiYc99qyMQdFBfKb5ikPAwbuyx95XZNUAZtGfRN8XaPUAux3DScAdueOEBCZP xg7kHolhwFiShozGSJnEZ/GRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1ID2yzA1 8aPwaYlWmSx2U+XmChIwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL65+D7a6ag1MdNzndaXsjP24boqvrAeAb4Hd2NdaF64/zJrweX9esGJ h/+mxZlHPWacN/RSbUPj9TQBOHSkAtly1LgOGX2sxNyqV2PEIHuFbROiEm1c15k4 QsVK/CQnRmtVfkcz6IIeLRUeNyGrYEcTQw44MK1KGTBMV1sur12Hp4eoQJ1JKVlT mxiLsuJ0+LLD7i2R1Ve5Es0GjZWpsTozyv2J9gKcvkLvpQ9uBFCLz9pzdqTif2pi kUlq6Fg2l3NDiubWPbtQJxbmpxT7oyQBsNq3trA+JLNIL/E/Y+B2a1QaczBQrjrE GDDGMntShiv9wX4a1nAeu5UPJn+Rfak= -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:59 2025 by rpki-client