$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: COGNnjH9272govjq2YOUVMDzNi43qdaVRmE/mBTIha4= Subject key identifier: 28:C5:57:EA:34:F1:28:B1:91:24:A8:17:73:2B:A9:D8:DD:A6:67:E5 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0168 Signing time: Fri 25 Apr 2025 03:06:38 +0000 Manifest this update: Fri 25 Apr 2025 03:06:37 +0000 Manifest next update: Fri 02 May 2025 03:06:37 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: pEnOSZ1P0b/XEYswvGc4MYv6Z3OBUrinWxahWoDbzfo=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: wN+RYivC51/sVMn5qM1gC8zTEDi66N47MLSR9Ot7lLw=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: eyu3cJvMk8x/lB+NzC776MbDc6l8Tfm9D0VXNEV1yIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Apr 25 03:06:37 2025 GMT Not After : May 2 03:06:37 2025 GMT Subject: CN=680afc3e-40b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:02:a4:92:ba:a5:bb:c6:6e:57:92:f6:f5: 52:64:46:6b:be:57:51:d9:95:88:2a:40:34:76:c5: 29:f0:2e:b4:00:a1:e8:23:5b:a5:60:62:84:28:67: 7e:6a:ff:a2:57:ed:24:e3:3c:40:ff:f5:9d:0c:fd: bd:99:e9:90:35:c1:ea:09:b6:be:b6:0c:fa:8f:1b: 1b:fd:65:7b:8e:82:26:e2:4b:d4:51:aa:c6:14:06: 73:6d:0f:6e:62:29:4c:26:41:f5:92:a2:e5:13:43: 62:f0:0d:59:c9:8b:32:09:69:02:dc:3a:07:4c:2c: 14:b0:38:3b:ee:6e:bd:17:38:8a:71:fa:f4:47:71: 68:c3:44:60:66:69:47:88:f8:86:b2:98:05:d6:3a: 07:44:05:87:f7:55:14:2c:ce:b4:a7:0d:0d:73:b6: fb:e1:ca:1e:cc:57:9e:9e:95:89:05:c1:5e:4b:4e: 61:07:22:12:92:64:3f:78:a8:b6:03:6d:30:52:77: 02:06:6b:83:66:18:0d:46:77:6e:b0:a7:dc:85:c4: 07:aa:9a:c0:99:08:c0:a6:56:f0:f5:93:b3:16:b6: 1e:14:0e:e5:93:e2:c9:3c:56:4b:a9:75:ff:98:94: fc:44:1c:55:b9:ea:ca:80:65:88:de:0a:95:e2:12: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C5:57:EA:34:F1:28:B1:91:24:A8:17:73:2B:A9:D8:DD:A6:67:E5 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:45:04:0c:15:3b:66:15:78:47:00:8f:15:be:0e:59:40:ae: bd:ff:f7:2f:65:5c:b3:62:bf:9f:00:a5:bc:cc:43:ad:70:58: 6a:fe:9f:aa:8b:ce:cf:2f:37:a8:80:64:c2:df:fb:1b:64:ee: 21:5b:6e:20:fe:26:7a:e6:7b:38:42:14:78:e7:fc:bd:68:f6: fb:0b:8b:72:7f:f3:f2:06:3e:62:ac:fa:fd:6e:eb:31:da:21: 25:ad:45:66:31:a6:ca:cf:51:48:42:15:e1:36:e9:d9:73:df: 67:22:cc:8c:ba:3b:48:55:1a:a0:48:f8:28:bc:a3:6e:89:b2: 96:a2:71:ea:42:16:cd:9f:40:da:c7:74:8e:42:a4:b6:be:e1: ca:37:ff:58:0d:64:df:dd:8f:49:c3:fb:b1:32:d7:ee:d9:9d: bf:ef:f4:83:d9:28:4d:53:e8:de:e0:8f:02:70:15:40:c1:fe: e7:ae:53:a1:77:00:48:1b:85:62:5d:03:1f:2f:96:f4:af:d2: b6:a1:62:1a:52:08:90:4b:5c:44:ee:31:14:a4:e4:db:9d:1a: 09:73:05:06:10:7d:45:b3:9f:04:bc:11:7c:2b:69:74:a6:56: 9d:81:ec:e9:65:88:f5:76:84:81:c3:6b:5f:1e:b4:8a:dd:8e: 8d:c2:8c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUwNDI1MDMwNjM3WhcNMjUwNTAyMDMwNjM3WjAYMRYwFAYD VQQDEw02ODBhZmMzZS00MGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XkCpJK6pbvGbleS9vVSZEZrvldR2ZWIKkA0dsUp8C60AKHoI1ulYGKEKGd+ av+iV+0k4zxA//WdDP29memQNcHqCba+tgz6jxsb/WV7joIm4kvUUarGFAZzbQ9u YilMJkH1kqLlE0Ni8A1ZyYsyCWkC3DoHTCwUsDg77m69FziKcfr0R3Fow0RgZmlH iPiGspgF1joHRAWH91UULM60pw0Nc7b74coezFeenpWJBcFeS05hByISkmQ/eKi2 A20wUncCBmuDZhgNRndusKfchcQHqprAmQjAplbw9ZOzFrYeFA7lk+LJPFZLqXX/ mJT8RBxVuerKgGWI3gqV4hLgXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjFV+o0 8SixkSSoF3MrqdjdpmflMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPRQQMFTtmFXhHAI8Vvg5ZQK69//cvZVyzYr+fAKW8zEOtcFhq/p+q i87PLzeogGTC3/sbZO4hW24g/iZ65ns4QhR45/y9aPb7C4tyf/PyBj5irPr9busx 2iElrUVmMabKz1FIQhXhNunZc99nIsyMujtIVRqgSPgovKNuibKWonHqQhbNn0Da x3SOQqS2vuHKN/9YDWTf3Y9Jw/uxMtfu2Z2/7/SD2ShNU+je4I8CcBVAwf7nrlOh dwBIG4ViXQMfL5b0r9K2oWIaUgiQS1xE7jEUpOTbnRoJcwUGEH1Fs58EvBF8K2l0 pladgezpZYj1doSBw2tfHrSK3Y6Nwoxn -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:44 2025 by rpki-client