$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: 6cP7ZCohb9Home4iH04i7PPZGrNfOLB7UP4GYEZL4O4= Subject key identifier: D7:B6:28:34:F4:49:52:E7:60:A4:06:F8:3E:84:D8:DA:87:93:17:6D Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 0239 Signing time: Fri 25 Apr 2025 03:16:06 +0000 Manifest this update: Fri 25 Apr 2025 03:16:06 +0000 Manifest next update: Fri 02 May 2025 03:16:06 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: tqOOi6f48lkcqtkgCnUsYn+CrhRuJgGgmA9F+RVi73U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Apr 25 03:16:06 2025 GMT Not After : May 2 03:16:06 2025 GMT Subject: CN=680afe76-892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:27:dc:f0:e6:f0:56:e3:ef:2d:d3:c5:fc: 93:45:58:f1:42:99:19:73:51:80:33:94:b3:18:4e: 27:2e:c6:5b:88:11:5f:02:80:4a:aa:11:bb:86:15: ed:92:3f:93:c3:42:93:6c:f9:1a:d4:5c:29:52:1e: 84:ce:28:bd:c5:22:57:e9:48:d1:18:4e:66:60:e9: 12:20:c5:4a:51:fc:9e:55:4e:89:14:0f:20:f6:1e: 73:a9:f8:87:52:9d:b4:3f:b8:f1:e6:ae:e9:ee:93: b2:5a:ab:68:27:15:68:7b:40:9f:c3:c5:cc:28:6b: 1e:64:73:44:11:0e:f8:86:67:78:da:bc:a8:e7:be: 28:88:2b:99:65:bf:26:b9:56:6e:af:a4:2b:6e:60: 3d:32:56:96:b4:01:a2:31:ce:15:b2:46:3c:57:1d: 32:b9:df:5e:28:d8:96:64:c8:f1:af:2a:05:59:63: bf:0d:cc:ef:50:b1:59:b3:d5:51:90:2f:bb:ff:ab: 71:46:38:5e:9c:18:d8:ee:c4:da:53:8d:dc:3b:12: b6:19:47:02:d7:87:9a:e9:ab:ff:3f:8c:db:e5:a6: 23:c3:ed:b7:04:a5:05:13:e4:44:c3:f9:10:e6:e8: 5b:d4:3e:29:87:12:a5:13:30:63:8e:32:2a:38:1f: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:28:34:F4:49:52:E7:60:A4:06:F8:3E:84:D8:DA:87:93:17:6D X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:3d:43:03:18:54:5a:f0:e5:63:a2:e8:6f:ad:09:6d:1f: 6d:99:05:15:a2:d3:75:01:4f:4b:3b:a0:3d:1f:ce:f0:67:df: 90:d9:42:83:0d:c3:e7:81:90:8b:78:b7:99:40:c6:0a:b4:a6: 82:65:47:eb:a9:98:da:0e:8a:17:76:6e:a2:59:06:38:a4:cb: ba:43:1c:c9:18:04:47:3a:f3:a7:8b:b8:6e:0d:f5:63:0a:39: a2:a0:e0:65:9e:24:d6:81:e5:d8:3f:86:68:46:1a:25:f8:dd: 20:e3:ff:09:ed:b3:a5:9c:98:18:60:ad:6d:e5:97:76:eb:a4: 95:22:7f:42:f9:c9:7a:2e:34:df:5c:ad:db:01:d1:83:ce:0f: 48:f3:30:cd:e7:d5:c9:e7:c3:05:98:54:3a:d1:b4:67:13:c1: 29:66:3f:c8:08:08:f2:4d:53:5b:42:18:e4:85:90:ee:fa:4c: 85:9e:51:8d:d9:e1:32:c0:52:b5:ed:2d:d9:91:f5:b7:14:d4: ec:af:4e:df:d1:24:e0:df:16:b0:4c:73:6c:1f:ee:8f:5c:77: c9:0f:e6:dc:ff:3f:29:91:29:8f:ab:e5:fe:18:62:c6:0c:98: 51:a0:4c:22:b8:ad:d0:e2:37:83:8a:48:3b:17:0f:13:23:f7: 50:17:41:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUwNDI1MDMxNjA2WhcNMjUwNTAyMDMxNjA2WjAYMRYwFAYD VQQDEw02ODBhZmU3Ni04OTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9Yn3PDm8Fbj7y3TxfyTRVjxQpkZc1GAM5SzGE4nLsZbiBFfAoBKqhG7hhXt kj+Tw0KTbPka1FwpUh6Ezii9xSJX6UjRGE5mYOkSIMVKUfyeVU6JFA8g9h5zqfiH Up20P7jx5q7p7pOyWqtoJxVoe0Cfw8XMKGseZHNEEQ74hmd42ryo574oiCuZZb8m uVZur6QrbmA9MlaWtAGiMc4VskY8Vx0yud9eKNiWZMjxryoFWWO/DczvULFZs9VR kC+7/6txRjhenBjY7sTaU43cOxK2GUcC14ea6av/P4zb5aYjw+23BKUFE+REw/kQ 5uhb1D4phxKlEzBjjjIqOB/7/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNe2KDT0 SVLnYKQG+D6E2NqHkxdtMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC1D1DAxhUWvDlY6Lob60JbR9tmQUVotN1AU9LO6A9H87wZ9+Q2UKD DcPngZCLeLeZQMYKtKaCZUfrqZjaDooXdm6iWQY4pMu6QxzJGARHOvOni7huDfVj CjmioOBlniTWgeXYP4ZoRhol+N0g4/8J7bOlnJgYYK1t5Zd266SVIn9C+cl6LjTf XK3bAdGDzg9I8zDN59XJ58MFmFQ60bRnE8EpZj/ICAjyTVNbQhjkhZDu+kyFnlGN 2eEywFK17S3ZkfW3FNTsr07f0STg3xawTHNsH+6PXHfJD+bc/z8pkSmPq+X+GGLG DJhRoEwiuK3Q4jeDikg7Fw8TI/dQF0GH -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:54 2025 by rpki-client