$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: 37qKZQ0d4UqLvFq9t7j9qoE07AC1LHktSxNmQodlqY0= Subject key identifier: C9:4B:70:BC:9B:4F:1D:14:A2:37:2A:BC:75:8F:08:04:58:0D:15:F9 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 14A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1487 Signing time: Thu 24 Apr 2025 16:54:00 +0000 Manifest this update: Thu 24 Apr 2025 16:54:00 +0000 Manifest next update: Thu 01 May 2025 16:54:00 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: Iz0DwHYzlmeGCW39TdjLE8+z8y3Exm2ihGQGqhHpxMg=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: KlBzZE2KV7lzBc+tNUy/mqi1akgFY3Eb2SwhsYFxcBI=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: uMpXCjBvKkjgsvqgftGEXm10xWManwhepg98lroRmbE=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 6D0gW6FWFI2VeP1xT9SYxSMf8UjausKvml76wHWoNrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5285 (0x14a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Apr 24 16:54:00 2025 GMT Not After : May 1 16:54:00 2025 GMT Subject: CN=680a6ca8-973e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:27:f5:6e:f1:63:fa:44:e8:34:35:cf:d5: 9a:53:af:60:e0:26:2a:36:b1:5c:f1:b1:98:e0:1d: da:cd:67:2a:4b:9b:59:6f:32:13:3d:4f:6b:75:b0: 22:05:81:c1:b6:00:37:5c:c2:00:34:04:ca:a1:32: 70:84:23:9f:b4:45:cb:6d:30:b7:05:65:56:16:b6: 5a:7d:38:d9:47:b5:26:60:81:1a:49:ec:54:ea:65: 4a:74:1c:01:eb:36:e5:d5:ab:30:52:96:20:b0:bf: 06:db:17:ac:df:7a:d0:af:4a:04:07:fb:96:24:2d: 1d:c5:c9:4a:66:56:12:bc:fb:6b:55:5d:11:28:f3: ac:0c:ee:c7:38:0d:42:2a:23:f9:d2:87:45:1d:83: 76:df:c4:bf:6b:21:a0:68:f0:68:df:e6:3e:53:60: e7:76:45:9d:82:81:8b:08:14:b3:87:ee:ed:c6:d9: 36:62:da:99:1b:01:a6:f4:2c:b5:46:70:88:8c:37: 11:46:5e:30:f2:c7:a5:c3:6a:17:ad:f4:50:d0:c7: 05:5e:9b:27:e8:b8:45:94:19:a3:11:b2:1e:8c:05: 98:92:4a:23:35:81:9f:aa:cd:27:46:79:08:3b:bc: 55:bc:82:dd:b8:1e:87:cf:e7:4c:f2:dd:9e:67:33: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4B:70:BC:9B:4F:1D:14:A2:37:2A:BC:75:8F:08:04:58:0D:15:F9 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:89:83:87:4c:aa:67:a3:96:9b:35:2d:e4:02:05:dc:22:4c: f5:25:ca:9a:9d:dd:6e:20:d7:4b:6d:20:86:b5:85:8e:47:1b: be:fc:14:f9:3e:c2:3e:35:84:91:0c:0e:09:12:17:8e:f3:da: ed:ff:73:78:c2:aa:c6:1e:ee:41:14:7b:fd:0d:95:0b:f1:81: d5:ce:3b:d1:29:f8:2a:cf:ad:10:1a:d3:07:cf:5d:6c:12:9f: 76:e1:90:27:2f:6e:96:df:b3:ca:53:73:f5:f3:38:5a:56:0d: 46:9d:ab:4b:3b:e1:b7:6a:91:7e:5f:89:df:7f:1b:d9:77:76: 1c:d7:b7:2a:71:7e:a3:e7:01:b3:83:51:22:8a:1b:0d:5b:c2: 91:0d:fa:fd:d4:50:b2:f9:94:8f:f4:56:2b:37:06:dc:fb:9e: f2:14:27:72:c2:35:8c:2d:7d:7c:63:a9:e0:08:92:42:55:b6: 2d:3b:e6:72:50:5d:e8:54:c5:17:7f:d1:25:e5:38:f0:e1:d4: dc:cb:56:a8:19:41:72:26:f1:55:12:b4:7b:29:8a:2a:85:db: ce:4d:85:c5:04:54:15:95:17:62:77:31:94:dd:82:9e:a3:f4: 6f:86:06:70:01:ea:8e:07:c6:b2:75:d4:76:9b:87:65:e7:2b: 20:5b:21:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUwNDI0MTY1NDAwWhcNMjUwNTAxMTY1NDAwWjAYMRYwFAYD VQQDEw02ODBhNmNhOC05NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsngn9W7xY/pE6DQ1z9WaU69g4CYqNrFc8bGY4B3azWcqS5tZbzITPU9rdbAi BYHBtgA3XMIANATKoTJwhCOftEXLbTC3BWVWFrZafTjZR7UmYIEaSexU6mVKdBwB 6zbl1aswUpYgsL8G2xes33rQr0oEB/uWJC0dxclKZlYSvPtrVV0RKPOsDO7HOA1C KiP50odFHYN238S/ayGgaPBo3+Y+U2DndkWdgoGLCBSzh+7txtk2YtqZGwGm9Cy1 RnCIjDcRRl4w8selw2oXrfRQ0McFXpsn6LhFlBmjEbIejAWYkkojNYGfqs0nRnkI O7xVvILduB6Hz+dM8t2eZzMJnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlLcLyb Tx0UojcqvHWPCARYDRX5MB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBziYOHTKpno5abNS3kAgXcIkz1Jcqand1uINdLbSCGtYWORxu+/BT5 PsI+NYSRDA4JEheO89rt/3N4wqrGHu5BFHv9DZUL8YHVzjvRKfgqz60QGtMHz11s Ep924ZAnL26W37PKU3P18zhaVg1GnatLO+G3apF+X4nffxvZd3Yc17cqcX6j5wGz g1EiihsNW8KRDfr91FCy+ZSP9FYrNwbc+57yFCdywjWMLX18Y6ngCJJCVbYtO+Zy UF3oVMUXf9El5Tjw4dTcy1aoGUFyJvFVErR7KYoqhdvOTYXFBFQVlRdidzGU3YKe o/RvhgZwAeqOB8ayddR2m4dl5ysgWyGR -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:07 2025 by rpki-client