$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: qekoACvB0YYpoZZGDmGAb9Dhy3TM1YmMadq+MS0WCv0= Subject key identifier: 7C:BA:95:7E:B1:7C:07:49:BD:48:AA:B8:B4:96:25:8E:80:C4:C0:0E Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: E3 Signing time: Fri 25 Apr 2025 04:29:51 +0000 Manifest this update: Fri 25 Apr 2025 04:29:50 +0000 Manifest next update: Fri 02 May 2025 04:29:50 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: F+PKo6sgyRkLG5xNdsU8c+Q2ilcQwxWTQF/1e5DNq9g=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: Apr 25 04:29:50 2025 GMT Not After : May 2 04:29:50 2025 GMT Subject: CN=680b0fbe-7b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f7:ec:4e:49:75:2d:c7:32:97:87:9e:60:2f: e5:22:a1:06:4f:2e:7d:2f:63:17:b0:bf:98:ad:82: 06:0a:fb:98:68:65:a1:b1:da:c6:cd:8c:34:81:8e: f2:b1:7f:29:b0:a5:63:9a:92:56:81:7b:38:bf:e7: 63:25:5f:e4:02:17:68:81:32:3c:6a:df:f2:ea:28: 81:88:5f:d0:e1:76:91:d9:63:df:37:5e:4b:d9:0d: d9:09:1b:06:23:61:e2:62:c4:a3:5a:f8:f8:9d:ec: d8:4b:89:7f:6c:d2:89:7d:9f:35:7a:b9:a0:f2:d9: 19:48:7a:ad:25:89:05:69:c2:3c:c8:65:40:8d:30: 28:62:9b:d2:16:aa:87:dc:04:f8:e3:7b:7e:e6:0f: 5b:b2:72:87:c7:55:03:7f:d3:56:af:06:1e:d5:a6: 54:38:50:a2:a6:ec:d4:4f:3a:53:e7:f4:96:da:97: 9d:06:a9:8f:52:4e:19:8d:1c:55:6f:98:97:2c:2a: b2:f4:b4:50:3e:96:0a:95:b8:05:e8:ba:83:71:1d: bb:5f:c8:45:f0:61:57:8a:ff:91:bd:a5:2c:7c:8a: d6:70:59:be:84:83:3e:36:30:b8:09:ac:05:57:60: 43:5b:5d:12:4b:2c:50:f5:8f:fa:b8:50:1f:0c:6c: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BA:95:7E:B1:7C:07:49:BD:48:AA:B8:B4:96:25:8E:80:C4:C0:0E X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:20:52:24:12:74:03:90:b1:e7:4e:53:84:c7:e7:b8:08:8f: 07:22:0c:cc:20:90:ca:32:4f:00:26:e1:47:a4:98:a3:c8:be: c3:f5:82:85:ec:17:8f:88:49:8f:ab:e2:67:6a:c3:a9:69:d8: d1:3a:78:b1:ad:9d:20:bf:3a:e4:9b:5e:b0:56:3f:73:36:bf: 8a:f8:20:6e:11:14:2a:c9:08:bb:e6:2f:3e:86:a1:2e:a5:2e: 6e:04:2c:91:8d:be:50:1e:03:1b:cc:95:f5:9e:be:63:9d:b4: 84:2d:e4:8b:10:5e:43:cb:ac:b2:e0:35:62:b3:4e:f9:12:7b: 63:5d:a0:34:80:ff:d0:4d:12:b3:ee:a7:ec:af:c6:c2:ae:6b: 6f:d2:a6:bb:94:48:b0:7a:05:f3:7b:e0:89:7d:12:13:6d:e9: 9a:36:07:04:9e:7a:ed:f1:1c:f7:b4:b5:46:6a:03:6a:ec:d0: 8f:eb:e4:71:45:0c:89:41:83:8f:14:24:be:77:79:a3:a6:0b: 07:88:a7:e8:fe:9d:73:7e:f7:58:58:45:78:e1:34:9d:b4:7a: 5a:a3:8c:0f:4d:bf:7a:da:6d:b7:97:cf:52:b9:29:3f:8f:56: b8:7a:41:23:9e:00:05:c3:8d:5b:a2:93:3d:7d:3f:c6:65:a3: 66:85:d8:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUwNDI1MDQyOTUwWhcNMjUwNTAyMDQyOTUwWjAYMRYwFAYD VQQDEw02ODBiMGZiZS03YjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PfsTkl1Lccyl4eeYC/lIqEGTy59L2MXsL+YrYIGCvuYaGWhsdrGzYw0gY7y sX8psKVjmpJWgXs4v+djJV/kAhdogTI8at/y6iiBiF/Q4XaR2WPfN15L2Q3ZCRsG I2HiYsSjWvj4nezYS4l/bNKJfZ81ermg8tkZSHqtJYkFacI8yGVAjTAoYpvSFqqH 3AT443t+5g9bsnKHx1UDf9NWrwYe1aZUOFCipuzUTzpT5/SW2pedBqmPUk4ZjRxV b5iXLCqy9LRQPpYKlbgF6LqDcR27X8hF8GFXiv+RvaUsfIrWcFm+hIM+NjC4CawF V2BDW10SSyxQ9Y/6uFAfDGwzuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy6lX6x fAdJvUiquLSWJY6AxMAOMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVIFIkEnQDkLHnTlOEx+e4CI8HIgzMIJDKMk8AJuFHpJijyL7D9YKF 7BePiEmPq+JnasOpadjROnixrZ0gvzrkm16wVj9zNr+K+CBuERQqyQi75i8+hqEu pS5uBCyRjb5QHgMbzJX1nr5jnbSELeSLEF5Dy6yy4DVis075EntjXaA0gP/QTRKz 7qfsr8bCrmtv0qa7lEiwegXze+CJfRITbemaNgcEnnrt8Rz3tLVGagNq7NCP6+Rx RQyJQYOPFCS+d3mjpgsHiKfo/p1zfvdYWEV44TSdtHpao4wPTb962m23l89SuSk/ j1a4ekEjngAFw41bopM9fT/GZaNmhdgu -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:43 2025 by rpki-client