$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: W6HwC4THIQoYpuW07SXIxXt0IuvBW2i3jxJr1mBLGto= Subject key identifier: 4F:B4:08:A3:A4:0B:E7:30:81:24:2F:DD:31:56:7D:0B:6B:65:79:59 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0477 Signing time: Thu 24 Apr 2025 23:53:01 +0000 Manifest this update: Thu 24 Apr 2025 23:53:00 +0000 Manifest next update: Thu 01 May 2025 23:53:00 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: l0I5/YDIbktClbn4odBO2YZ7XReb4bOPOx8CM0Azemw=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: L7q5MhSYBL7XAFYcbCU7483l92C9DWVyV5PtuFnvCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Apr 24 23:53:00 2025 GMT Not After : May 1 23:53:00 2025 GMT Subject: CN=680acedc-3701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:b8:55:0b:4c:67:2d:67:5f:83:93:46:07: 62:c7:26:c8:5a:17:0e:16:32:3e:3e:c0:01:6c:2a: 30:4f:3c:a7:f2:72:8d:fa:e9:8f:a2:90:96:08:d1: 4e:96:02:64:c8:bf:54:d1:1f:4d:a7:4c:a6:85:bd: 15:f1:fc:62:e0:c3:c3:e8:19:a8:21:dd:4e:d9:cd: 7b:72:15:82:ed:72:6c:0f:f4:e4:9b:92:20:f7:7b: a0:ed:9e:28:1a:0d:e3:46:9b:29:23:86:52:40:59: f0:a6:36:26:40:94:94:4e:5c:b7:65:c8:a0:7e:6f: e0:b8:83:3d:b3:cf:01:1d:07:f5:0c:a9:ea:9d:ca: 8b:9d:28:de:33:c3:75:10:30:2b:9c:0e:fa:59:c9: b5:77:4c:3b:3f:9a:d0:1f:72:5d:db:a1:79:00:49: e5:fd:82:00:3c:62:3e:99:fc:79:d4:75:48:d1:93: 88:7a:e5:ed:39:30:eb:4b:3f:e4:08:c9:fc:b7:ff: 8e:6a:23:d6:1f:27:16:77:58:bc:70:10:cc:91:85: 43:3a:15:5f:9c:26:31:ee:6d:dc:fb:20:62:30:82: 5a:ef:47:9c:fa:5a:4d:f3:e2:9d:db:2a:64:d7:ec: 8b:64:fc:18:23:87:bd:16:89:89:70:b8:31:0d:1d: 03:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:08:A3:A4:0B:E7:30:81:24:2F:DD:31:56:7D:0B:6B:65:79:59 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:13:74:0b:25:48:fa:41:6d:95:a3:88:8c:ae:0e:7f:d4:e5: e8:03:bc:71:19:75:08:64:3f:bf:b1:0d:24:5a:ba:1d:3b:ae: 29:d3:2f:1d:46:9c:50:c6:04:cc:7d:59:82:44:f3:b1:28:a6: 33:d8:f9:7e:27:5d:4c:f3:99:26:f9:68:19:39:a1:40:03:db: de:87:82:57:d7:19:58:5e:2c:46:c2:4c:4d:4e:c1:99:10:38: f1:b6:18:aa:b8:40:63:bd:a2:90:1f:52:04:29:e6:bf:17:14: 66:a8:58:e5:1d:f0:1d:21:85:99:7e:b3:9c:75:73:14:72:6b: 70:41:7e:e9:a5:92:03:14:58:5d:73:08:19:6a:60:b9:40:72: 14:f8:1d:e5:36:3e:46:cd:ad:43:3f:61:e4:c4:40:74:e1:39: cb:f4:42:f9:59:3e:ef:93:b0:3e:4b:b4:ca:dd:0c:b3:22:57: 30:a4:61:d6:e9:d0:94:ad:48:7c:d1:57:4c:56:92:85:de:61: 87:4b:a1:3e:75:14:38:5f:89:e3:3d:5e:a8:29:31:e7:7a:73: f5:dd:3c:bd:cf:9e:b6:61:e9:50:a2:f9:fc:17:17:69:59:20: 86:d0:3e:45:81:22:91:d0:94:c1:0f:95:02:44:63:f3:d4:49: 73:43:96:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjUwNDI0MjM1MzAwWhcNMjUwNTAxMjM1MzAwWjAYMRYwFAYD VQQDEw02ODBhY2VkYy0zNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pK4VQtMZy1nX4OTRgdixybIWhcOFjI+PsABbCowTzyn8nKN+umPopCWCNFO lgJkyL9U0R9Np0ymhb0V8fxi4MPD6BmoId1O2c17chWC7XJsD/Tkm5Ig93ug7Z4o Gg3jRpspI4ZSQFnwpjYmQJSUTly3Zcigfm/guIM9s88BHQf1DKnqncqLnSjeM8N1 EDArnA76Wcm1d0w7P5rQH3Jd26F5AEnl/YIAPGI+mfx51HVI0ZOIeuXtOTDrSz/k CMn8t/+OaiPWHycWd1i8cBDMkYVDOhVfnCYx7m3c+yBiMIJa70ec+lpN8+Kd2ypk 1+yLZPwYI4e9FomJcLgxDR0DjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+0CKOk C+cwgSQv3TFWfQtrZXlZMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzE3QLJUj6QW2Vo4iMrg5/1OXoA7xxGXUIZD+/sQ0kWrodO64p0y8d RpxQxgTMfVmCRPOxKKYz2Pl+J11M85km+WgZOaFAA9veh4JX1xlYXixGwkxNTsGZ EDjxthiquEBjvaKQH1IEKea/FxRmqFjlHfAdIYWZfrOcdXMUcmtwQX7ppZIDFFhd cwgZamC5QHIU+B3lNj5Gza1DP2HkxEB04TnL9EL5WT7vk7A+S7TK3QyzIlcwpGHW 6dCUrUh80VdMVpKF3mGHS6E+dRQ4X4njPV6oKTHnenP13Ty9z562YelQovn8Fxdp WSCG0D5FgSKR0JTBD5UCRGPz1ElzQ5bH -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:12 2025 by rpki-client