$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft File: ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft (raw, json) Hash identifier: 3CpOA1NuEupoSHyD8fVlxHClT0tOolhW2b19o7sP+as= Subject key identifier: 8A:4E:8F:FE:FB:8C:FB:EC:77:D5:57:B5:9D:E2:AC:9B:00:73:8E:10 Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft Manifest number: 030A Signing time: Fri 25 Apr 2025 00:58:48 +0000 Manifest this update: Fri 25 Apr 2025 00:58:47 +0000 Manifest next update: Fri 02 May 2025 00:58:47 +0000 Files and hashes: 1: ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl (hash: uX8IyFNqYIyH5+fgh+9NiwkD/kRvzYfJU+y78JW3lJo=) 2: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (hash: LnATtYItJoGzNqDT/OfESDCcildtpDcQj0Gi0SQtIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913791D, serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Validity Not Before: Apr 25 00:58:47 2025 GMT Not After : May 2 00:58:47 2025 GMT Subject: CN=680ade47-22fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:3c:9e:2a:4c:d7:bd:fd:be:e1:66:d0:ac: 21:46:9d:54:34:9d:cf:5a:ad:99:61:44:50:d4:07: e3:be:0e:4e:a0:71:25:d3:aa:98:1f:74:0d:c8:ca: a2:bc:21:5e:af:a4:6d:f6:de:29:eb:e8:cb:8a:5a: 9f:0e:83:03:7a:14:90:82:58:48:74:8e:ee:84:ef: 80:29:be:57:78:61:ee:b5:3a:cf:8d:99:ac:45:f2: 8b:c0:b5:fb:fb:fc:bd:b2:aa:19:06:f5:54:be:9b: 50:a1:c8:da:79:db:01:8f:ca:e7:d7:d4:33:c0:6f: d6:4b:9e:d6:ca:48:5a:84:00:1c:c3:23:1f:14:f9: 83:8e:9a:b4:df:e2:21:05:50:b6:13:97:b3:0e:d3: 3d:a4:81:9d:4b:5a:f8:1e:52:3f:62:61:76:92:42: 95:01:ca:93:0f:b3:f3:86:f1:40:b7:c9:61:53:16: ce:21:b8:59:a1:34:05:41:29:09:0a:e2:d0:f7:ee: 19:eb:d0:ea:50:d2:6a:ab:3c:1e:55:f6:4a:b7:df: 32:70:b7:4f:39:f1:44:0c:d1:31:88:a3:3d:63:41: b1:00:c0:ee:d5:13:b8:a0:fc:e9:c5:96:d3:55:c5: bf:df:9e:69:16:13:ef:50:99:e2:08:63:b5:9e:98: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4E:8F:FE:FB:8C:FB:EC:77:D5:57:B5:9D:E2:AC:9B:00:73:8E:10 X509v3 Authority Key Identifier: keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2d:52:b3:f9:5c:40:93:54:bc:fd:5a:d9:10:87:27:a2:71: 07:6d:7e:f1:e7:38:63:ce:23:33:29:cd:9b:df:74:5f:d1:2a: 3b:3e:dd:1f:92:1b:5b:e7:f2:74:34:c0:a6:8d:d8:58:d0:d6: e9:04:d9:f6:d7:4d:80:55:21:9b:15:cf:dc:d6:1e:d5:27:7a: 05:30:76:c1:dd:de:cf:8a:e0:1c:7f:91:89:97:1d:32:eb:e0: cd:24:5e:a4:12:8b:9c:7f:77:3c:0c:a3:45:52:1a:19:94:5e: 17:ca:3d:b9:02:32:54:17:14:1e:3a:55:85:09:90:4c:f8:44: c1:f1:8b:74:c8:e4:2e:4a:71:02:6b:81:61:93:7c:81:f4:d9: f4:e5:10:c7:68:54:09:34:94:b5:32:34:30:05:13:32:32:5f: 88:9d:06:fb:74:73:69:83:26:5f:16:11:97:63:8d:a4:79:86: 53:8a:f9:91:15:42:4b:1b:a0:19:09:2a:88:32:c4:c5:d8:19: e4:e9:2d:8c:36:46:7e:ad:2f:75:90:1a:34:0c:86:0b:11:f2: ef:b0:2a:5a:a2:b1:2d:9d:14:94:2a:27:8d:ec:e8:bb:ea:03: ad:be:ff:d3:58:2d:63:d6:81:9e:13:da:a9:57:53:5f:f6:ab: 8a:26:39:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5MUQxMTAvBgNVBAUTKDY1NUI2NTYyNDYzNkM4MDAzNDE1MzczMzUzNUI0QUE4 QjNBMDAxQjcwHhcNMjUwNDI1MDA1ODQ3WhcNMjUwNTAyMDA1ODQ3WjAYMRYwFAYD VQQDEw02ODBhZGU0Ny0yMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA48nipM1739vuFm0KwhRp1UNJ3PWq2ZYURQ1Afjvg5OoHEl06qYH3QNyMqi vCFer6Rt9t4p6+jLilqfDoMDehSQglhIdI7uhO+AKb5XeGHutTrPjZmsRfKLwLX7 +/y9sqoZBvVUvptQocjaedsBj8rn19QzwG/WS57WykhahAAcwyMfFPmDjpq03+Ih BVC2E5ezDtM9pIGdS1r4HlI/YmF2kkKVAcqTD7PzhvFAt8lhUxbOIbhZoTQFQSkJ CuLQ9+4Z69DqUNJqqzweVfZKt98ycLdPOfFEDNExiKM9Y0GxAMDu1RO4oPzpxZbT VcW/355pFhPvUJniCGO1npiniQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpOj/77 jPvsd9VXtZ3irJsAc44QMB8GA1UdIwQYMBaAFGVbZWJGNsgANBU3M1NbSqizoAG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxRC9DNkI2MTJCMkNE MDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlBQTBGVGN6VTF0S3FMT2dB YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWdGxZa1kyeUFBMEZUY3pVMXRLcUxPZ0FiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzkxRC9DNkI2MTJCMkNEMDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlB QTBGVGN6VTF0S3FMT2dBYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATLVKz+VxAk1S8/VrZEIcnonEHbX7x5zhjziMzKc2b33Rf0So7Pt0f khtb5/J0NMCmjdhY0NbpBNn2102AVSGbFc/c1h7VJ3oFMHbB3d7PiuAcf5GJlx0y 6+DNJF6kEoucf3c8DKNFUhoZlF4Xyj25AjJUFxQeOlWFCZBM+ETB8Yt0yOQuSnEC a4Fhk3yB9Nn05RDHaFQJNJS1MjQwBRMyMl+InQb7dHNpgyZfFhGXY42keYZTivmR FUJLG6AZCSqIMsTF2Bnk6S2MNkZ+rS91kBo0DIYLEfLvsCpaorEtnRSUKieN7Oi7 6gOtvv/TWC1j1oGeE9qpV1Nf9quKJjn0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:36 2025 by rpki-client