$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: 1ipyiSIUnmBt0QLK/cXAs/w1B9FQfYajgenVX2nHaQs= Subject key identifier: B1:C5:71:31:84:6F:77:8C:58:66:A9:CF:7F:07:49:1B:BD:1A:98:BD Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: 7E Signing time: Fri 25 Apr 2025 06:06:44 +0000 Manifest this update: Fri 25 Apr 2025 06:06:43 +0000 Manifest next update: Fri 02 May 2025 06:06:43 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: DeF7cfpKY29yX4xuc8hneEBLE5LK9lkKTm/d9lVDRK8=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 5: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Apr 25 06:06:43 2025 GMT Not After : May 2 06:06:43 2025 GMT Subject: CN=680b2674-8e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:49:6c:2c:01:d9:54:e0:cf:05:ea:09:78: 65:80:71:77:d3:c6:8d:48:70:ea:d2:f3:7c:9b:cc: d1:59:97:da:68:2f:14:b6:83:4a:6f:b3:42:48:9e: ad:1b:95:c5:05:e3:9c:93:dd:9c:bd:30:49:53:67: a3:69:aa:2f:b8:a3:8a:dd:04:38:b7:49:ad:95:b6: b3:3f:59:7e:49:7a:b5:05:37:48:49:60:01:07:36: 09:11:b8:12:34:fa:d0:a1:07:25:c8:ad:c5:df:6e: c4:37:88:58:1a:98:b5:e1:8d:06:16:64:ec:e7:4f: f5:ca:75:7a:59:16:42:de:f0:2c:73:3e:3e:09:4b: 91:3e:ea:dd:72:97:b7:c7:20:15:4a:3e:7a:8c:34: 80:10:9f:75:84:eb:52:b4:34:81:aa:95:d0:6d:25: 7e:8a:75:07:91:80:77:66:b5:a8:54:b6:7e:2e:ca: 26:36:91:90:4b:f8:ab:12:7d:9d:10:18:7d:0f:d6: 4a:8f:bf:3f:a6:7d:32:41:4e:84:85:32:c3:99:87: 21:51:ce:8e:55:49:93:2a:b7:d9:25:49:13:21:ea: 8d:3e:c6:f9:46:57:8c:3e:2f:7d:e5:d9:bc:30:24: 54:b3:8b:6c:15:7b:40:13:2a:b4:0a:f9:07:4e:a2: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C5:71:31:84:6F:77:8C:58:66:A9:CF:7F:07:49:1B:BD:1A:98:BD X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e3:f4:5e:b9:34:7c:7c:71:cb:29:36:5c:04:d0:8d:2b:ee: 4e:00:a1:f0:ac:3f:a1:de:bc:57:f3:f4:80:0e:05:e9:ef:12: b7:75:d3:67:7b:a7:0c:80:f3:42:35:40:7a:34:f5:2e:bc:14: 81:35:97:2f:91:5c:44:69:6e:a3:19:0f:24:de:d6:ba:11:3f: ea:6e:32:ac:e1:d1:a6:dc:23:16:43:cd:ca:29:c1:07:5e:20: 31:fb:c1:7f:99:9e:fb:07:2d:ab:9b:9a:2f:3c:b6:71:f2:de: 86:01:15:74:c5:ff:95:e4:a3:8a:5e:20:f0:59:dc:08:06:89: dd:56:ce:1e:4b:aa:9c:f9:4d:a8:04:52:8b:d3:f7:51:1c:0c: 0a:2d:e1:d7:7c:87:e8:b8:c9:42:46:6b:bc:b4:6e:57:d1:ff: af:4b:4c:f1:be:47:02:cf:05:e9:0b:2c:45:88:1a:ae:35:7a: ab:d2:3e:5a:fd:b1:b1:f8:bb:be:85:94:c0:07:c0:44:45:d9: 89:9e:8f:20:8d:b7:fd:2d:f9:0d:99:7c:67:54:ad:92:c8:e3: 11:c8:33:f2:58:45:c1:44:e1:da:f4:1f:a0:02:b4:16:b4:d6: 04:96:af:0d:3e:6b:54:f0:c0:d2:06:1d:00:41:ee:91:df:c9: 7b:ea:55:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwNDI1MDYwNjQzWhcNMjUwNTAyMDYwNjQzWjAYMRYwFAYD VQQDEw02ODBiMjY3NC04ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUpJbCwB2VTgzwXqCXhlgHF308aNSHDq0vN8m8zRWZfaaC8UtoNKb7NCSJ6t G5XFBeOck92cvTBJU2ejaaovuKOK3QQ4t0mtlbazP1l+SXq1BTdISWABBzYJEbgS NPrQoQclyK3F327EN4hYGpi14Y0GFmTs50/1ynV6WRZC3vAscz4+CUuRPurdcpe3 xyAVSj56jDSAEJ91hOtStDSBqpXQbSV+inUHkYB3ZrWoVLZ+LsomNpGQS/irEn2d EBh9D9ZKj78/pn0yQU6EhTLDmYchUc6OVUmTKrfZJUkTIeqNPsb5RleMPi995dm8 MCRUs4tsFXtAEyq0CvkHTqI5KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHFcTGE b3eMWGapz38HSRu9Gpi9MB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB54/ReuTR8fHHLKTZcBNCNK+5OAKHwrD+h3rxX8/SADgXp7xK3ddNn e6cMgPNCNUB6NPUuvBSBNZcvkVxEaW6jGQ8k3ta6ET/qbjKs4dGm3CMWQ83KKcEH XiAx+8F/mZ77By2rm5ovPLZx8t6GARV0xf+V5KOKXiDwWdwIBondVs4eS6qc+U2o BFKL0/dRHAwKLeHXfIfouMlCRmu8tG5X0f+vS0zxvkcCzwXpCyxFiBquNXqr0j5a /bGx+Lu+hZTAB8BERdmJno8gjbf9LfkNmXxnVK2SyOMRyDPyWEXBROHa9B+gArQW tNYElq8NPmtU8MDSBh0AQe6R38l76lUg -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:05 2025 by rpki-client