$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: dvKtDIRdR3mEYVkXJRL8VZgz5IDy3qBM6AKBZuRNNMM= Subject key identifier: 83:86:1E:74:C2:0B:82:33:E7:C2:CE:BC:59:A9:21:4B:F8:0C:A2:CD Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 09AB Signing time: Fri 02 May 2025 20:11:46 +0000 Manifest this update: Fri 02 May 2025 20:11:45 +0000 Manifest next update: Fri 09 May 2025 20:11:45 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: WJaCcwy8xA8d41N0uhiE0yrHzsylqBd5NHuvVJhHKdo=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: May 2 20:11:45 2025 GMT Not After : May 9 20:11:45 2025 GMT Subject: CN=68152701-f6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:22:0d:0f:48:33:cf:ee:ec:14:02:5d:b1: 65:18:f8:18:89:29:22:9d:a7:81:d9:1e:ba:94:9b: 5c:a6:dd:e6:a7:e5:8b:46:1b:f0:80:b9:3a:47:20: 9f:4c:4e:1c:57:67:63:df:97:f8:85:33:a1:b1:14: 9b:6d:34:96:df:f7:8b:d4:9a:29:1b:85:69:b9:a4: 00:1a:d9:70:84:b6:9d:16:55:ff:01:8a:31:84:b3: 2f:09:7c:33:a7:d6:d5:09:b5:05:34:19:85:62:3a: d4:3f:c5:fb:66:32:e5:76:b3:19:37:5f:88:35:9f: 17:fa:a0:eb:62:20:eb:39:a3:48:a0:12:40:f6:f9: f2:2b:a4:8f:60:0b:8e:99:20:f0:87:dd:49:16:b9: 75:96:24:ae:f1:e1:dd:8a:77:4b:ac:38:c0:c5:d3: 01:d9:29:96:44:22:57:27:e8:2e:2a:0c:a2:d6:86: 4e:98:46:9e:3a:9c:40:32:f5:b3:da:53:76:95:d7: fc:fa:9b:b7:5c:b5:8a:28:41:d9:c4:87:df:77:40: 10:10:ee:d1:0b:80:41:08:2d:d2:5d:6b:26:3d:14: 2f:c6:8f:02:25:af:b0:a5:f2:53:c9:bf:28:45:b0: ea:de:aa:a9:03:07:a5:fe:ad:d7:df:d6:26:13:f6: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:86:1E:74:C2:0B:82:33:E7:C2:CE:BC:59:A9:21:4B:F8:0C:A2:CD X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a0:22:ef:0f:05:f5:cd:7a:26:14:7d:5a:56:a4:0b:4b:c9: 17:75:e5:7e:00:d0:c4:bf:8f:77:07:67:9f:a3:5e:05:9c:d1: 62:8e:64:eb:80:55:95:bb:0f:86:8e:b6:71:a3:10:1b:0b:67: 16:86:f9:c3:98:c8:2e:d7:7a:d1:a0:de:b1:68:d1:4c:99:53: 7d:5b:9f:cf:0a:a1:87:97:1f:3d:f2:46:82:e3:9b:df:f4:10: c8:7a:b9:6d:96:95:84:68:73:ae:1c:b7:cc:e1:df:73:8d:10: a0:f8:bd:c5:53:15:fb:31:98:3e:8e:00:f6:3f:e6:2b:72:17: 43:dc:69:f1:88:ae:6f:49:09:34:50:c6:13:13:5a:82:e6:85: 1a:3e:37:9f:f6:62:95:d7:a6:99:f5:c8:0e:07:e8:27:67:ef: cd:3f:5a:e7:e0:0c:87:7a:93:19:80:32:30:47:94:02:f5:09: 7a:ae:7a:68:68:be:d5:50:31:bd:5f:72:46:89:6e:b7:59:da: d7:7a:09:6e:d1:0f:81:ab:c8:0a:86:e8:e5:e4:44:6f:91:ba: d0:22:b6:a7:a6:1f:08:dc:ef:45:76:95:03:a3:a7:d7:e3:ee: 0e:04:e1:55:a5:76:3e:eb:79:05:54:dd:8e:0b:43:d6:e5:d5: 69:9d:48:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUwNTAyMjAxMTQ1WhcNMjUwNTA5MjAxMTQ1WjAYMRYwFAYD VQQDEw02ODE1MjcwMS1mNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssYiDQ9IM8/u7BQCXbFlGPgYiSkinaeB2R66lJtcpt3mp+WLRhvwgLk6RyCf TE4cV2dj35f4hTOhsRSbbTSW3/eL1JopG4VpuaQAGtlwhLadFlX/AYoxhLMvCXwz p9bVCbUFNBmFYjrUP8X7ZjLldrMZN1+INZ8X+qDrYiDrOaNIoBJA9vnyK6SPYAuO mSDwh91JFrl1liSu8eHdindLrDjAxdMB2SmWRCJXJ+guKgyi1oZOmEaeOpxAMvWz 2lN2ldf8+pu3XLWKKEHZxIffd0AQEO7RC4BBCC3SXWsmPRQvxo8CJa+wpfJTyb8o RbDq3qqpAwel/q3X39YmE/a6LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOGHnTC C4Iz58LOvFmpIUv4DKLNMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzoCLvDwX1zXomFH1aVqQLS8kXdeV+ANDEv493B2efo14FnNFijmTr gFWVuw+GjrZxoxAbC2cWhvnDmMgu13rRoN6xaNFMmVN9W5/PCqGHlx898kaC45vf 9BDIerltlpWEaHOuHLfM4d9zjRCg+L3FUxX7MZg+jgD2P+YrchdD3GnxiK5vSQk0 UMYTE1qC5oUaPjef9mKV16aZ9cgOB+gnZ+/NP1rn4AyHepMZgDIwR5QC9Ql6rnpo aL7VUDG9X3JGiW63WdrXeglu0Q+Bq8gKhujl5ERvkbrQIranph8I3O9FdpUDo6fX 4+4OBOFVpXY+63kFVN2OC0PW5dVpnUhK -----END CERTIFICATE-----Generated at Sat May 3 08:51:20 2025 by rpki-client