$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: dU/pCMxGeaJDXBnY+ynWhCfjhDbzHfXSyGv2d0j8EAU= Subject key identifier: 62:BA:1B:1E:61:AD:4B:91:19:30:D6:BA:0D:1A:58:14:23:1C:BE:B7 Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0AFD Signing time: Thu 24 Apr 2025 19:11:57 +0000 Manifest this update: Thu 24 Apr 2025 19:11:57 +0000 Manifest next update: Thu 01 May 2025 19:11:57 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: 4u3l517U8vT0CV5D0jkf/RnBgOENWyCITzPj0YANDd0=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=) 3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Apr 24 19:11:57 2025 GMT Not After : May 1 19:11:57 2025 GMT Subject: CN=680a8cfd-85e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:35:81:9a:86:09:e9:81:39:fc:e4:de:c1: 4f:a5:62:36:48:e9:28:e5:d5:a7:e7:3b:03:c9:77: 0e:85:91:ed:ff:7a:7d:f2:0e:59:20:f9:22:3d:63: c9:d6:b5:0d:db:1f:a3:21:17:4e:65:53:12:a2:a4: c4:60:92:52:92:6e:50:cd:03:b1:c8:51:4f:4e:52: 8c:fe:c0:7d:5a:be:1b:b1:50:28:79:51:03:af:90: ab:86:f9:7e:f7:5f:f0:08:16:6c:ec:52:28:b7:ee: 2a:ab:e6:79:66:6c:ba:3b:70:6c:29:49:27:e8:5a: 38:6e:8b:a8:b7:67:e0:16:63:c7:78:f1:0a:f0:17: f2:d5:f6:32:e5:04:a5:a6:3a:5f:4b:b0:12:9f:03: 41:63:9b:61:5a:34:78:50:f5:44:a2:07:c9:96:0d: 99:90:1d:77:f2:3b:78:3c:9b:98:ea:b1:ea:5c:78: fc:be:72:8e:3f:cb:e1:83:a3:3b:d4:8d:57:8e:25: e8:43:19:1d:57:89:aa:d7:ce:b6:39:c6:95:65:ba: 6d:16:70:04:94:7e:95:90:dd:d7:cb:43:0b:7e:a3: 7a:51:03:78:1d:21:f4:b9:59:9b:65:a3:8d:dc:9a: fc:e0:7c:88:1e:4b:a5:16:2e:5a:fc:2f:67:9d:dd: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:1B:1E:61:AD:4B:91:19:30:D6:BA:0D:1A:58:14:23:1C:BE:B7 X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4e:87:03:54:ad:c1:3c:ea:53:86:b3:46:16:63:f6:10:23: 7f:27:89:7e:f4:b5:ce:83:8a:94:9e:89:e1:e0:59:b3:96:b3: 08:ad:f1:be:dc:97:0d:08:21:2d:9a:cd:78:6c:b5:f1:2a:2f: 39:fa:dd:b0:98:1f:57:f7:41:19:5a:04:76:35:1b:22:14:fa: 5d:e9:1d:df:22:90:9d:ba:b4:54:ce:c5:9a:04:62:02:bf:6a: f0:18:bf:62:fc:81:9f:25:6e:72:e2:15:f6:56:2e:25:a7:ea: 1c:58:8a:28:cf:0a:c2:00:68:e1:2a:63:25:05:40:c2:45:d8: 3f:50:75:16:54:4e:84:2b:5a:5e:11:e1:dd:b5:7c:f7:47:4f: c1:20:39:d0:84:55:b8:39:36:f6:09:8e:8b:3a:cd:89:3e:da: 69:55:72:ad:fe:8f:4c:56:dc:60:75:bd:f3:5d:9e:b8:fd:f3: 28:de:55:29:c3:93:eb:af:b1:b8:38:a8:9c:50:4d:54:d1:be: 89:82:5a:95:ba:34:8e:20:3d:11:43:f1:43:13:a4:8c:c2:6c: a3:bc:48:3d:b3:a6:5c:6b:82:39:4d:48:c7:81:d0:aa:b3:4a: e8:ea:94:10:8b:f1:7d:c4:3d:bc:4d:4e:c7:3f:17:23:62:6e: 42:51:cc:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjUwNDI0MTkxMTU3WhcNMjUwNTAxMTkxMTU3WjAYMRYwFAYD VQQDEw02ODBhOGNmZC04NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRc1gZqGCemBOfzk3sFPpWI2SOko5dWn5zsDyXcOhZHt/3p98g5ZIPkiPWPJ 1rUN2x+jIRdOZVMSoqTEYJJSkm5QzQOxyFFPTlKM/sB9Wr4bsVAoeVEDr5Crhvl+ 91/wCBZs7FIot+4qq+Z5Zmy6O3BsKUkn6Fo4bouot2fgFmPHePEK8Bfy1fYy5QSl pjpfS7ASnwNBY5thWjR4UPVEogfJlg2ZkB138jt4PJuY6rHqXHj8vnKOP8vhg6M7 1I1XjiXoQxkdV4mq1862OcaVZbptFnAElH6VkN3Xy0MLfqN6UQN4HSH0uVmbZaON 3Jr84HyIHkulFi5a/C9nnd0KtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK6Gx5h rUuRGTDWug0aWBQjHL63MB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbTocDVK3BPOpThrNGFmP2ECN/J4l+9LXOg4qUnonh4FmzlrMIrfG+ 3JcNCCEtms14bLXxKi85+t2wmB9X90EZWgR2NRsiFPpd6R3fIpCdurRUzsWaBGIC v2rwGL9i/IGfJW5y4hX2Vi4lp+ocWIoozwrCAGjhKmMlBUDCRdg/UHUWVE6EK1pe EeHdtXz3R0/BIDnQhFW4OTb2CY6LOs2JPtppVXKt/o9MVtxgdb3zXZ64/fMo3lUp w5Prr7G4OKicUE1U0b6JglqVujSOID0RQ/FDE6SMwmyjvEg9s6Zca4I5TUjHgdCq s0ro6pQQi/F9xD28TU7HPxcjYm5CUcwB -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:48 2025 by rpki-client