$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: hvISoIyC4/HKD/8GB5SV9nd5dH94vZUwee/G0TnipW4= Subject key identifier: DE:90:77:67:73:14:53:28:3B:B3:30:2C:5A:0E:28:6F:0C:34:FE:E8 Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 0904 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 08FE Signing time: Thu 24 Apr 2025 20:13:29 +0000 Manifest this update: Thu 24 Apr 2025 20:13:29 +0000 Manifest next update: Thu 01 May 2025 20:13:29 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: Xbz1PuulZi6bz/O7t2ygEv5JG8AJNiDYcdIS6H7ov3c=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: CqsjKnLyNxMW+zfiZfws10ntuapNIgSqb9GlDOC7IG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2308 (0x904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: Apr 24 20:13:29 2025 GMT Not After : May 1 20:13:29 2025 GMT Subject: CN=680a9b69-4393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:11:6e:98:5e:02:7c:6a:3a:8e:2d:75:12: 8c:15:36:42:86:bf:40:0e:f3:9c:92:9f:f3:13:17: 05:ee:43:ec:d6:87:2a:00:0b:9b:71:4e:5d:d2:c7: 60:6d:60:84:aa:00:cf:ab:ab:fe:bf:c6:5c:01:8e: af:11:4f:5d:b9:71:75:34:ab:73:6f:41:3a:f0:59: ee:5b:50:39:c6:ef:3b:c8:63:5f:d6:09:79:85:ec: 0f:c9:64:92:b1:b5:3b:4a:44:45:a9:c5:8e:c0:43: 56:bc:e9:ad:f2:0d:b6:8d:45:95:06:ef:ad:ab:c1: f6:20:6d:e6:c5:0d:f7:0c:a6:68:b0:5c:6c:5e:85: 8e:10:15:74:0a:fe:3a:f3:e9:81:78:e3:4e:a1:da: 45:b1:26:5f:5b:a9:27:79:10:76:cc:c0:70:23:30: 6f:6c:a8:eb:af:78:e8:79:69:f7:22:f5:ee:fc:ad: cc:fc:c3:0f:5e:0b:3e:76:f9:ad:dd:8f:57:32:da: d4:d6:1b:55:b8:83:7f:46:b0:0a:76:7a:a2:da:eb: 76:40:29:cf:ec:e3:36:28:26:bf:b8:b8:c1:7b:c5: f1:78:af:10:ac:22:c0:33:e8:13:7f:c5:b2:4a:f2: c7:4d:33:49:f6:1f:44:ff:82:67:39:2b:de:93:68: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:77:67:73:14:53:28:3B:B3:30:2C:5A:0E:28:6F:0C:34:FE:E8 X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:33:0d:fd:c7:92:c1:f9:e3:9b:da:e4:2c:e7:2a:80:8d:f2: 98:e6:5d:c3:5f:39:21:2b:80:50:13:8d:db:a7:87:12:00:20: 76:c3:0d:46:46:95:cb:cb:00:4b:59:63:8b:af:e5:29:99:0d: 13:3c:98:32:14:95:5e:ce:29:6b:dd:95:c2:a1:61:fd:e1:76: 69:56:6d:f7:3a:31:b5:86:5f:98:13:21:19:e3:39:3f:5a:3d: 2f:97:6c:d1:5e:32:6f:dc:27:c1:82:e1:40:d2:f2:68:d6:9e: 46:fe:f4:f5:5e:2b:6a:73:6e:6d:b4:97:fc:6d:17:eb:70:70: 36:58:09:1a:c6:c9:b0:35:80:57:ed:8a:57:ec:ca:9e:6a:14: 17:d7:9e:a0:71:bd:c1:fc:8d:a2:16:aa:83:fd:a8:01:0f:30: f4:dc:1a:c6:ac:0a:ab:d1:a1:ab:e1:28:01:59:cf:a6:1a:4b: de:c3:74:84:45:5b:d0:84:ba:ed:17:db:c4:ae:a3:03:16:35: cc:a8:c0:36:19:49:d7:18:bf:5c:63:9e:94:6e:c4:83:12:c2: 29:a8:b2:54:bd:4e:c8:d2:7b:d2:01:ec:07:19:6c:20:1b:e3: dc:08:27:c1:33:f3:52:79:1c:f6:23:87:6f:0e:fc:07:ff:0e: 9f:d0:6d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjUwNDI0MjAxMzI5WhcNMjUwNTAxMjAxMzI5WjAYMRYwFAYD VQQDEw02ODBhOWI2OS00MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8cRbpheAnxqOo4tdRKMFTZChr9ADvOckp/zExcF7kPs1ocqAAubcU5d0sdg bWCEqgDPq6v+v8ZcAY6vEU9duXF1NKtzb0E68FnuW1A5xu87yGNf1gl5hewPyWSS sbU7SkRFqcWOwENWvOmt8g22jUWVBu+tq8H2IG3mxQ33DKZosFxsXoWOEBV0Cv46 8+mBeONOodpFsSZfW6kneRB2zMBwIzBvbKjrr3joeWn3IvXu/K3M/MMPXgs+dvmt 3Y9XMtrU1htVuIN/RrAKdnqi2ut2QCnP7OM2KCa/uLjBe8XxeK8QrCLAM+gTf8Wy SvLHTTNJ9h9E/4JnOSvek2hWswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6Qd2dz FFMoO7MwLFoOKG8MNP7oMB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5Mw39x5LB+eOb2uQs5yqAjfKY5l3DXzkhK4BQE43bp4cSACB2ww1G RpXLywBLWWOLr+UpmQ0TPJgyFJVezilr3ZXCoWH94XZpVm33OjG1hl+YEyEZ4zk/ Wj0vl2zRXjJv3CfBguFA0vJo1p5G/vT1Xitqc25ttJf8bRfrcHA2WAkaxsmwNYBX 7YpX7MqeahQX156gcb3B/I2iFqqD/agBDzD03BrGrAqr0aGr4SgBWc+mGkvew3SE RVvQhLrtF9vErqMDFjXMqMA2GUnXGL9cY56UbsSDEsIpqLJUvU7I0nvSAewHGWwg G+PcCCfBM/NSeRz2I4dvDvwH/w6f0G3O -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:14 2025 by rpki-client