$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: v+pMyUCPrOliYF8ez055Pm5UZwK9GVR6ja8sRAqVNoE= Subject key identifier: BA:E6:51:E0:D0:EF:30:1F:A3:7C:E6:05:6E:7A:F0:1D:D1:18:F8:0A Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: AE Signing time: Fri 25 Apr 2025 05:15:18 +0000 Manifest this update: Fri 25 Apr 2025 05:15:17 +0000 Manifest next update: Fri 02 May 2025 05:15:17 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: v8LQhU2DHrdtK6+04b/u4R2z6PKRexzjUu2laPRH8lw=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9954FB38E37711EF90F2E16BC4F9AE02.roa (hash: o9y28m0EAF8MtxFS/y6b9hCsWA8xm82cKuUMMSbrJ8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Apr 25 05:15:17 2025 GMT Not After : May 2 05:15:17 2025 GMT Subject: CN=680b1a65-00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:3e:19:41:f5:80:95:30:ae:57:33:8e:51: 03:45:1d:d7:8e:f1:1c:2d:8e:9f:b8:51:e4:91:b4: 27:24:25:d8:8d:b6:92:3c:da:25:b2:68:4b:98:89: 69:40:79:01:fc:87:93:97:f1:75:24:56:d2:9a:a6: 83:ae:fd:58:52:e3:80:53:bf:88:ae:8c:a1:c3:ef: b7:2c:66:6c:ba:52:5f:b5:2e:fc:ea:3f:d2:49:73: 94:bc:f1:c4:11:55:27:f4:e2:ce:3a:d2:e4:e1:9e: b1:ad:35:8e:37:08:db:ed:84:d0:70:88:d6:5e:e5: aa:a3:5f:93:ec:de:a5:56:4b:44:b4:38:6d:ad:98: 6b:af:b7:c4:ec:5c:3c:40:da:d8:6e:e5:c5:02:b8: 5f:02:01:6d:2c:7a:ea:c7:e1:05:8a:cd:82:2f:e2: 66:8b:2e:a8:40:00:0f:35:20:29:d9:33:8c:bd:5e: 74:ff:29:09:5e:67:56:5c:80:d6:96:f8:a6:70:2a: 90:51:a3:6e:30:48:0a:ab:d8:4a:0d:ac:32:de:41: 27:2a:0e:c8:09:4a:bf:df:ed:38:f3:dc:01:38:9d: 85:84:1b:4b:5b:35:82:06:8a:2b:d8:8f:ea:01:8c: ff:ec:41:d2:ca:71:6f:26:1e:fc:c7:39:7c:66:c5: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:51:E0:D0:EF:30:1F:A3:7C:E6:05:6E:7A:F0:1D:D1:18:F8:0A X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dc:44:1b:43:85:57:26:38:c7:9f:77:d5:1d:b0:e9:fb:b9: ec:3d:42:23:f0:cf:2e:34:43:d7:65:c0:c7:d0:13:ca:e5:df: c1:c7:1f:d2:62:ef:30:3c:24:f1:e0:c1:ca:28:15:1e:f5:0f: 21:db:2c:49:5c:05:07:98:d6:f7:8c:54:14:08:89:41:31:58: 2e:8d:b4:84:9d:7b:b6:b8:74:b1:fc:23:e0:b2:74:5b:b3:c1: 5d:be:0f:4a:59:9f:fc:b1:1b:59:9f:dc:08:ec:b1:6c:c4:57: e7:44:bf:3c:6f:c1:4e:8c:1a:11:1f:36:e8:f9:62:f3:39:f1: ac:a0:1b:8d:2e:e5:d2:a5:d9:3b:a4:3a:b3:da:a1:24:8a:b7: c4:55:a4:a9:02:21:66:51:cb:91:0e:62:2a:19:fd:b0:3b:ea: 33:64:ab:97:f4:f4:78:63:ec:5d:47:28:b9:fc:40:6f:7b:bb: 0a:6d:cf:ff:71:23:61:f1:a0:b5:47:4c:5f:93:88:00:00:44: 75:d2:de:ef:f7:ed:c1:bf:f2:9c:cf:4f:8d:f2:6a:f3:1b:0f: 48:88:41:93:ae:dd:b6:6e:bf:56:5f:86:d1:64:dd:28:61:d9: 3a:45:09:96:33:6a:67:46:d0:a1:6a:a9:c7:b4:d6:0f:96:df: 68:96:93:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwNDI1MDUxNTE3WhcNMjUwNTAyMDUxNTE3WjAYMRYwFAYD VQQDEw02ODBiMWE2NS0wMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsso+GUH1gJUwrlczjlEDRR3XjvEcLY6fuFHkkbQnJCXYjbaSPNolsmhLmIlp QHkB/IeTl/F1JFbSmqaDrv1YUuOAU7+Iroyhw++3LGZsulJftS786j/SSXOUvPHE EVUn9OLOOtLk4Z6xrTWONwjb7YTQcIjWXuWqo1+T7N6lVktEtDhtrZhrr7fE7Fw8 QNrYbuXFArhfAgFtLHrqx+EFis2CL+Jmiy6oQAAPNSAp2TOMvV50/ykJXmdWXIDW lvimcCqQUaNuMEgKq9hKDawy3kEnKg7ICUq/3+0489wBOJ2FhBtLWzWCBoor2I/q AYz/7EHSynFvJh78xzl8ZsV1wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrmUeDQ 7zAfo3zmBW568B3RGPgKMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA83EQbQ4VXJjjHn3fVHbDp+7nsPUIj8M8uNEPXZcDH0BPK5d/Bxx/S Yu8wPCTx4MHKKBUe9Q8h2yxJXAUHmNb3jFQUCIlBMVgujbSEnXu2uHSx/CPgsnRb s8Fdvg9KWZ/8sRtZn9wI7LFsxFfnRL88b8FOjBoRHzbo+WLzOfGsoBuNLuXSpdk7 pDqz2qEkirfEVaSpAiFmUcuRDmIqGf2wO+ozZKuX9PR4Y+xdRyi5/EBve7sKbc// cSNh8aC1R0xfk4gAAER10t7v9+3Bv/Kcz0+N8mrzGw9IiEGTrt22br9WX4bRZN0o Ydk6RQmWM2pnRtChaqnHtNYPlt9olpMP -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:24 2025 by rpki-client