$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: vx4wLnkGim3aVEIcndOgAUeXVGnr8WcXy922cHKB1ak= Subject key identifier: F4:D2:03:44:B0:C0:B2:8A:1C:FE:CA:40:82:B0:51:F8:1D:68:8B:41 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: 6A Signing time: Fri 25 Apr 2025 05:59:50 +0000 Manifest this update: Fri 25 Apr 2025 05:59:49 +0000 Manifest next update: Fri 02 May 2025 05:59:49 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: 1Bd99QQ0qJt8Sn1fvTuTu9KfTDBVmvXJbeRk/5vI5dI=) 2: 1976FC0CFA6C11EF99638E1FC4F9AE02.roa (hash: te5PzAkdFI+eQ5CMJL5Z4aIa9hh81p7zUj8QOmt+SYo=) 3: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: WagnJcg5f8efkpfWr+mqkirfnMGP4KyRA+7+p8TOFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Apr 25 05:59:49 2025 GMT Not After : May 2 05:59:49 2025 GMT Subject: CN=680b24d6-2477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:8c:da:9b:d9:49:0d:9c:97:aa:d9:3e:b0: 8f:40:6d:79:a5:17:83:ae:94:6e:30:89:7f:61:c3: eb:40:ef:67:64:69:af:01:ec:7a:48:c4:90:97:75: 73:95:50:e7:22:21:e7:88:af:b4:25:a2:16:da:36: 48:f5:53:30:4c:5d:af:fa:c8:71:7c:c6:e3:78:8d: 5c:54:4a:1e:81:19:6c:bf:f1:bd:81:f7:6a:07:de: d4:fd:be:c7:d8:95:a8:56:0d:fe:79:c5:62:e1:44: c2:cf:51:b6:b2:b9:c8:47:a0:4b:26:f0:a8:93:66: 02:77:e4:15:52:94:7b:51:a3:ab:2d:0e:ef:b5:1a: cb:6f:1d:a9:fa:1c:a6:bc:6a:69:4d:a1:4a:67:cb: ae:3c:2b:a1:7d:0d:64:d2:70:14:e3:62:df:e4:10: 70:4a:0e:36:5a:c4:c2:3d:1e:03:a0:51:1d:9b:c3: c1:25:ff:f8:0d:9b:0b:56:f2:37:3b:1b:bc:89:0e: 02:e5:c7:b2:02:08:6c:2b:2a:1f:f3:5a:cd:d0:af: 6c:b8:da:5f:9b:ca:ee:5a:6f:69:8f:53:a0:5f:31: 83:a8:63:d1:e8:2a:5b:23:5d:08:d2:2b:f2:0a:5e: e4:6a:73:da:91:1d:fc:47:8c:b0:b5:45:20:1d:5f: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D2:03:44:B0:C0:B2:8A:1C:FE:CA:40:82:B0:51:F8:1D:68:8B:41 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:dd:7f:05:06:1b:8b:e3:c8:3e:b8:f3:06:75:ed:a8:6b:94: aa:3f:66:a1:c5:e5:58:ac:cd:9b:3e:5d:f0:a5:6a:b1:f3:4d: 4d:f6:26:e3:29:27:a0:58:13:51:4a:78:69:1d:07:32:2e:6a: 4d:7b:d3:17:88:c4:b3:8b:99:61:20:9e:0b:f2:ba:47:61:9c: 31:13:ec:c7:14:10:44:87:3a:c1:65:f9:a9:c5:cb:b9:f1:21: 39:fd:28:95:da:f2:ae:59:23:18:54:20:9e:de:f5:de:54:88: 44:63:c7:d4:4f:aa:c5:d2:5a:aa:55:7a:64:ba:77:c4:88:7c: 67:84:a2:ad:7f:80:47:d7:6e:c9:d9:8f:c1:86:11:80:29:9c: 32:ba:64:1e:86:ce:f6:19:ba:45:6c:0a:ce:8f:95:f6:fa:c4: f0:13:2e:2a:ae:5a:a8:80:a3:04:ba:6f:32:7b:47:12:36:3b: 8f:3b:e2:41:08:00:e8:e6:1a:94:c5:b5:1e:8e:a5:85:f6:4a: 22:46:86:48:03:e1:9c:44:09:e1:18:e9:e9:90:06:d2:fb:15: 75:53:f0:5c:ac:da:c2:db:f7:c7:0f:d0:a2:50:4a:49:4b:81: d1:11:01:1a:41:b7:83:73:dc:7f:32:c5:8d:e5:d0:14:2f:a0: 75:e3:93:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoRkQ5RDdGNjYwRjNBMTMwQ0E0OEJFQkJBNjZFMTYyQkQz MDM0RTM4RDAeFw0yNTA0MjUwNTU5NDlaFw0yNTA1MDIwNTU5NDlaMBgxFjAUBgNV BAMTDTY4MGIyNGQ2LTI0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5C4zam9lJDZyXqtk+sI9AbXmlF4OulG4wiX9hw+tA72dkaa8B7HpIxJCXdXOV UOciIeeIr7QlohbaNkj1UzBMXa/6yHF8xuN4jVxUSh6BGWy/8b2B92oH3tT9vsfY lahWDf55xWLhRMLPUbayuchHoEsm8KiTZgJ35BVSlHtRo6stDu+1GstvHan6HKa8 amlNoUpny648K6F9DWTScBTjYt/kEHBKDjZaxMI9HgOgUR2bw8El//gNmwtW8jc7 G7yJDgLlx7ICCGwrKh/zWs3Qr2y42l+byu5ab2mPU6BfMYOoY9HoKlsjXQjSK/IK XuRqc9qRHfxHjLC1RSAdXxc1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9NIDRLDA sooc/spAgrBR+B1oi0EwHwYDVR0jBBgwFoAU/Z1/Zg86Ewyki+u6ZuFivTA0440w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzRFRkQxNUI2OEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1oxX1pnODZFd3lraS11Nlp1Rml2VEEwNDQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzRFRkQxNUI2OEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5 a2ktdTZadUZpdlRBMDQ0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEndfwUGG4vjyD648wZ17ahrlKo/ZqHF5ViszZs+XfClarHzTU32JuMp J6BYE1FKeGkdBzIuak170xeIxLOLmWEgngvyukdhnDET7McUEESHOsFl+anFy7nx ITn9KJXa8q5ZIxhUIJ7e9d5UiERjx9RPqsXSWqpVemS6d8SIfGeEoq1/gEfXbsnZ j8GGEYApnDK6ZB6GzvYZukVsCs6Plfb6xPATLiquWqiAowS6bzJ7RxI2O4874kEI AOjmGpTFtR6OpYX2SiJGhkgD4ZxECeEY6emQBtL7FXVT8Fys2sLb98cP0KJQSklL gdERARpBt4Nz3H8yxY3l0BQvoHXjkyo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:02 2025 by rpki-client