$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: 88DL65uBlzp8D3dl52XomTlLVTobYMtSk7pOEwLLjBA= Subject key identifier: 1A:94:D4:84:00:A6:3B:1B:A9:9D:2D:F2:78:EE:EE:AA:9B:76:86:44 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1AFC Signing time: Wed 30 Apr 2025 16:17:42 +0000 Manifest this update: Wed 30 Apr 2025 16:17:41 +0000 Manifest next update: Wed 07 May 2025 16:17:41 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: n+jHAq8f5brhpvffM8KsDpqgXL09+oCHN6ECnWRtS6Q=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: LAyDzMwa+0p5sRd95KyHExi3C3Z0niccQY6hw3OgiYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 16:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6931 (0x1b13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Apr 30 16:17:41 2025 GMT Not After : May 7 16:17:41 2025 GMT Subject: CN=68124d26-885b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:de:5f:8b:ef:69:2b:ec:9e:d2:4c:b2:d1:7c: 28:ba:5d:d5:ac:28:1e:e3:3c:07:ea:92:85:47:80: a9:91:cd:51:ee:96:28:3a:cd:49:b4:9d:0a:36:eb: 85:86:5c:63:2d:f1:b3:fd:3b:3a:27:6c:ef:32:24: 2e:e0:eb:60:cd:f1:b6:5c:02:40:e4:e9:81:c7:6c: f9:69:6a:87:18:54:87:c7:b8:62:7e:c5:b1:b6:02: 84:7c:7c:83:0c:b8:eb:cf:bf:02:71:91:fc:d6:1e: 9c:ee:eb:42:1c:dc:65:82:05:92:c4:c3:0d:d1:35: 1a:77:fb:5d:5a:f5:17:c9:2a:05:2a:e7:62:2a:1c: fd:f5:87:27:c4:bf:b5:b2:e0:97:7f:13:f4:f7:da: dc:88:be:31:dc:00:52:f0:63:d5:fa:21:64:1b:ea: c1:47:3b:75:30:92:b4:bf:26:78:f7:f6:46:61:ad: 48:68:06:63:1d:37:37:9c:cc:9b:24:06:a3:e2:96: b4:1a:74:e2:ec:ac:f0:f7:29:9d:b2:37:8e:d5:53: be:d8:2d:1f:bf:70:43:b5:27:48:e5:56:67:0d:62: a8:cf:c8:7e:98:82:88:be:1f:01:d3:cd:55:5a:1a: ff:46:6b:f0:3e:55:16:c5:01:c5:52:bc:68:89:2a: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:94:D4:84:00:A6:3B:1B:A9:9D:2D:F2:78:EE:EE:AA:9B:76:86:44 X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:76:ce:ab:62:b2:5c:13:17:02:a9:0d:fe:34:f1:17:a2:6c: 1c:0d:ab:db:8a:00:de:3c:be:ea:2c:cc:3b:3e:a3:f2:a8:23: f6:10:16:1c:83:93:ac:27:04:ee:28:ec:03:b0:56:98:9d:9e: 4f:0f:c0:fa:bb:67:aa:c8:61:c1:3a:e6:55:52:63:b3:37:e6: 41:e6:79:de:8a:89:ae:e1:28:34:9e:68:d4:8b:e4:fe:a7:51: ce:04:0f:5a:fe:a9:07:b9:4a:e5:90:f6:d2:f5:7c:80:30:5b: 7c:0b:ed:b5:a7:47:03:4c:c6:d6:56:06:2e:51:e5:97:15:e1: 5c:e2:c5:7c:99:2c:47:f8:8e:c8:17:5e:e6:3d:72:72:1c:f1: a0:dd:03:1c:48:cc:6f:42:62:69:cf:f4:6e:21:9b:a3:23:c3: 5d:fd:49:df:5e:ab:16:6b:11:ac:b9:b8:e1:94:ec:55:a4:c2: 77:31:17:c3:78:74:69:02:ca:55:21:a8:73:79:d1:40:c3:f1: fb:bf:06:43:33:25:27:48:5c:41:a5:76:12:6b:72:c0:cb:2f: b4:be:0b:3f:ea:e9:e4:ef:99:0d:39:ae:8d:41:e9:18:1b:64: da:de:9f:03:2f:39:85:03:37:51:cf:a1:02:f6:90:9f:a1:7c: 46:49:0e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUwNDMwMTYxNzQxWhcNMjUwNTA3MTYxNzQxWjAYMRYwFAYD VQQDEw02ODEyNGQyNi04ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA595fi+9pK+ye0kyy0Xwoul3VrCge4zwH6pKFR4Cpkc1R7pYoOs1JtJ0KNuuF hlxjLfGz/Ts6J2zvMiQu4OtgzfG2XAJA5OmBx2z5aWqHGFSHx7hifsWxtgKEfHyD DLjrz78CcZH81h6c7utCHNxlggWSxMMN0TUad/tdWvUXySoFKudiKhz99YcnxL+1 suCXfxP099rciL4x3ABS8GPV+iFkG+rBRzt1MJK0vyZ49/ZGYa1IaAZjHTc3nMyb JAaj4pa0GnTi7Kzw9ymdsjeO1VO+2C0fv3BDtSdI5VZnDWKoz8h+mIKIvh8B081V Whr/RmvwPlUWxQHFUrxoiSrsxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqU1IQA pjsbqZ0t8nju7qqbdoZEMB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFds6rYrJcExcCqQ3+NPEXomwcDavbigDePL7qLMw7PqPyqCP2EBYc g5OsJwTuKOwDsFaYnZ5PD8D6u2eqyGHBOuZVUmOzN+ZB5nneiomu4Sg0nmjUi+T+ p1HOBA9a/qkHuUrlkPbS9XyAMFt8C+21p0cDTMbWVgYuUeWXFeFc4sV8mSxH+I7I F17mPXJyHPGg3QMcSMxvQmJpz/RuIZujI8Nd/UnfXqsWaxGsubjhlOxVpMJ3MRfD eHRpAspVIahzedFAw/H7vwZDMyUnSFxBpXYSa3LAyy+0vgs/6unk75kNOa6NQekY G2Ta3p8DLzmFAzdRz6EC9pCfoXxGSQ47 -----END CERTIFICATE-----Generated at Fri May 2 10:14:40 2025 by rpki-client