$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json) Hash identifier: 9jlFlwrteb2Bi7NGSY0DhGJmb1x3bEGR4gxe6PzRuXs= Subject key identifier: DE:09:18:D6:CA:E8:E9:C1:A6:9F:B7:0C:2B:3D:2A:68:F4:0E:E3:D1 Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft Manifest number: 77 Signing time: Fri 25 Apr 2025 05:56:26 +0000 Manifest this update: Fri 25 Apr 2025 05:56:25 +0000 Manifest next update: Fri 02 May 2025 05:56:25 +0000 Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: 4xu4OssW+odY16vKa0ybFTdcYEXbSSw7ertWx34mL/A=) 2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: gTljkeOtiLUXIev71WvDZsUroRxts5KzF3IxcDIZHnk=) 3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: rP5j4C0CGZJsw2gJYjo66ntxudPoLAvM82b5Jln8ZuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Validity Not Before: Apr 25 05:56:25 2025 GMT Not After : May 2 05:56:25 2025 GMT Subject: CN=680b2409-1a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:01:b4:5d:ed:ea:f7:55:d2:ef:29:57:f1:14: f9:83:6d:6c:5b:05:82:de:c2:9a:94:8e:a4:b1:5e: f6:c2:fc:cf:e4:fd:2e:b6:2f:20:bc:f2:e2:bc:a7: d4:a9:0f:fc:7a:62:4e:9a:de:47:05:df:3c:bd:63: 93:80:cc:5f:85:e2:96:27:ca:65:54:06:c3:2a:81: c2:90:de:3d:9c:cd:15:16:14:24:02:af:38:35:c9: 9e:85:ae:39:81:0a:3d:4b:23:c3:38:b2:8b:c9:71: e1:d8:51:e9:46:56:8e:90:d6:89:0d:65:6f:8a:7a: e6:37:54:50:59:a2:fd:0e:52:dd:f8:a6:d4:3a:a2: a3:cc:05:3c:e4:59:28:e7:18:5b:94:c9:1f:88:54: 71:e0:ef:cb:8d:9b:28:15:7c:71:79:51:8e:38:b1: a1:9d:a2:e3:09:41:ec:78:71:51:72:f5:b7:9f:9e: 78:8e:0e:24:ce:f9:6f:7c:55:d8:7e:0d:05:31:a1: da:4d:db:08:9d:13:76:4b:14:46:da:5d:33:7c:53: 1a:54:48:6a:f2:20:b0:6c:91:b3:31:29:7a:60:19: 4d:b4:d8:c2:3a:87:97:fa:44:6c:2b:ed:6f:d4:cc: 9c:ba:60:bc:89:79:77:a7:ec:c1:b2:67:de:9d:63: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:09:18:D6:CA:E8:E9:C1:A6:9F:B7:0C:2B:3D:2A:68:F4:0E:E3:D1 X509v3 Authority Key Identifier: keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d6:8f:69:e8:4c:2c:8a:6c:07:17:37:89:1e:5d:e8:4b:d0: d9:4f:dd:4c:12:a6:70:34:df:6d:5b:24:80:95:ee:f7:ea:39: 81:70:6f:c3:c1:fc:d0:ea:38:ab:13:f7:33:84:58:f8:b6:cf: 86:a2:8d:8e:81:87:f7:4e:5a:b6:d5:9e:8d:bc:d9:63:50:42: 59:d8:25:a9:68:b9:fa:db:f7:c9:b7:b6:1c:8c:4b:a6:55:d4: a9:e6:47:bc:2e:fe:69:2c:4d:0d:e8:eb:51:51:56:82:1f:46: a1:41:42:75:a2:35:ea:91:9a:3b:ed:ef:34:38:69:41:5c:10: 6c:90:5a:3e:79:35:13:4c:43:1e:12:38:4a:41:75:52:da:7c: 0e:15:df:b6:3c:c2:db:0e:14:b9:b4:46:51:0f:d7:53:aa:30: 8d:99:c8:5d:b0:82:6d:cc:ce:68:04:66:31:3b:12:ce:54:2b: 5b:2f:68:91:89:27:15:ac:d8:3f:11:e6:78:1a:c1:98:2b:76: d6:b3:b4:91:0b:8b:4b:83:97:01:92:5e:af:64:5c:bc:49:62: 7e:44:8e:76:65:bf:83:c2:7e:75:3f:b1:cf:d7:bd:f5:18:28: 0e:3a:4c:5d:f9:e5:f0:06:73:5c:6a:3f:86:2f:61:38:ef:91: 2f:e2:65:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE RDNCMzhCRjIwHhcNMjUwNDI1MDU1NjI1WhcNMjUwNTAyMDU1NjI1WjAYMRYwFAYD VQQDEw02ODBiMjQwOS0xYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QG0Xe3q91XS7ylX8RT5g21sWwWC3sKalI6ksV72wvzP5P0uti8gvPLivKfU qQ/8emJOmt5HBd88vWOTgMxfheKWJ8plVAbDKoHCkN49nM0VFhQkAq84Ncmeha45 gQo9SyPDOLKLyXHh2FHpRlaOkNaJDWVvinrmN1RQWaL9DlLd+KbUOqKjzAU85Fko 5xhblMkfiFRx4O/LjZsoFXxxeVGOOLGhnaLjCUHseHFRcvW3n554jg4kzvlvfFXY fg0FMaHaTdsInRN2SxRG2l0zfFMaVEhq8iCwbJGzMSl6YBlNtNjCOoeX+kRsK+1v 1MycumC8iXl3p+zBsmfenWPnbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4JGNbK 6OnBpp+3DCs9Kmj0DuPRMB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2 QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB NUhmdVIwMXNsVW5kT3ppX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX1o9p6EwsimwHFzeJHl3oS9DZT91MEqZwNN9tWySAle736jmBcG/D wfzQ6jirE/czhFj4ts+Goo2OgYf3Tlq21Z6NvNljUEJZ2CWpaLn62/fJt7YcjEum VdSp5ke8Lv5pLE0N6OtRUVaCH0ahQUJ1ojXqkZo77e80OGlBXBBskFo+eTUTTEMe EjhKQXVS2nwOFd+2PMLbDhS5tEZRD9dTqjCNmchdsIJtzM5oBGYxOxLOVCtbL2iR iScVrNg/EeZ4GsGYK3bWs7SRC4tLg5cBkl6vZFy8SWJ+RI52Zb+Dwn51P7HP1731 GCgOOkxd+eXwBnNcaj+GL2E475Ev4mXU -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:58 2025 by rpki-client