$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: u0OOtYPLtQDA9u+H6XXB6cpuKqAaqhFUyaimpS8D+Cg= Subject key identifier: 75:9C:8D:9D:E2:49:F9:3D:85:43:E4:A1:07:C6:F9:62:3C:3A:DA:6E Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 22E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 22D8 Signing time: Thu 24 Apr 2025 15:52:31 +0000 Manifest this update: Thu 24 Apr 2025 15:52:30 +0000 Manifest next update: Thu 01 May 2025 15:52:30 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: w1DIMipfCnXh+V3wAyIJSO0UyU7YxcpEOB9qAVkBLeg=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8935 (0x22e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: Apr 24 15:52:30 2025 GMT Not After : May 1 15:52:30 2025 GMT Subject: CN=680a5e3f-0003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:05:4e:90:db:00:fb:7e:81:ce:fa:90:85: 94:07:24:e2:fd:96:3b:75:82:51:cb:a5:49:db:a3: c5:d5:c7:ea:b8:29:8e:78:60:68:a7:dc:24:40:e9: 05:76:93:4a:18:b4:b1:0b:6e:71:ff:80:9e:c9:6f: 26:08:9f:b8:66:49:46:11:d2:fa:ae:eb:10:2a:d6: b5:1e:70:a3:26:8c:31:74:16:75:fe:88:4d:66:b3: df:e7:a3:d9:80:20:c5:14:1d:fb:73:24:1b:c8:e1: cb:d7:db:af:d2:fd:3f:d9:8c:36:0c:c4:3c:11:ff: d6:81:88:1c:49:c8:ad:4c:a3:a9:cc:41:00:20:1c: 91:64:df:1b:83:1a:49:e4:86:e2:19:85:3b:91:1e: aa:28:f8:93:4f:06:5b:2d:b0:ca:c7:55:64:91:a0: 46:c7:91:6e:70:86:90:84:0e:5c:05:38:32:2d:2c: 04:31:6b:ad:b4:5d:55:ef:2b:5b:76:b4:c8:26:7f: 23:ea:b7:1b:e9:aa:8e:a9:67:2f:5b:cb:fb:24:16: 9b:74:be:8c:3c:de:f4:fd:09:a4:db:e1:1c:d6:df: 86:a4:5d:33:96:d6:1e:d8:31:af:44:b6:6f:ed:cf: 63:4b:17:86:dc:1f:05:d6:28:7f:7a:2a:2f:78:92: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9C:8D:9D:E2:49:F9:3D:85:43:E4:A1:07:C6:F9:62:3C:3A:DA:6E X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:60:0b:76:e2:c7:1e:00:1d:5b:a7:ea:86:b9:58:9b:54:8d: 3a:58:87:03:42:7b:c1:a0:7b:84:ab:a1:6b:0b:75:df:bc:b1: cd:33:f9:98:42:e2:b9:dc:fc:41:58:d3:52:27:d8:73:c3:73: a0:27:db:b7:63:42:53:fd:4e:c2:af:9f:bf:45:31:8e:d5:01: 30:4e:9e:9f:ab:6b:89:3d:e1:18:95:26:e1:cc:60:ec:e5:a9: 3a:71:5a:ac:fa:93:9d:5b:1c:47:66:0f:47:c7:0f:fa:f0:8b: 7b:38:e8:ea:61:7d:01:21:86:06:c0:03:28:b1:5d:ea:7c:a4: 35:4f:7c:cd:64:8b:99:c0:52:15:2c:82:be:a2:11:4b:36:5a: ba:dd:30:3b:7a:90:c3:23:05:83:86:3b:0a:93:81:40:55:22: d0:bc:e5:d9:5f:c7:ef:02:42:19:f8:ad:22:4f:aa:9e:99:8a: c4:a5:f5:26:25:25:fe:93:be:87:5d:21:7d:82:80:bf:a8:8e: ff:f1:08:c6:c9:49:d9:31:43:c0:48:dc:b9:8d:49:3c:eb:8a: 5e:57:26:1b:06:33:e4:77:db:cf:8e:25:5b:82:73:36:10:aa: 2a:70:db:d0:49:5b:8f:c2:ff:f8:1d:9a:54:c3:68:c0:d1:67: 32:58:31:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUwNDI0MTU1MjMwWhcNMjUwNTAxMTU1MjMwWjAYMRYwFAYD VQQDEw02ODBhNWUzZi0wMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01wFTpDbAPt+gc76kIWUByTi/ZY7dYJRy6VJ26PF1cfquCmOeGBop9wkQOkF dpNKGLSxC25x/4CeyW8mCJ+4ZklGEdL6rusQKta1HnCjJowxdBZ1/ohNZrPf56PZ gCDFFB37cyQbyOHL19uv0v0/2Yw2DMQ8Ef/WgYgcScitTKOpzEEAIByRZN8bgxpJ 5IbiGYU7kR6qKPiTTwZbLbDKx1VkkaBGx5FucIaQhA5cBTgyLSwEMWuttF1V7ytb drTIJn8j6rcb6aqOqWcvW8v7JBabdL6MPN70/Qmk2+Ec1t+GpF0zltYe2DGvRLZv 7c9jSxeG3B8F1ih/eioveJJjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWcjZ3i Sfk9hUPkoQfG+WI8OtpuMB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHYAt24sceAB1bp+qGuVibVI06WIcDQnvBoHuEq6FrC3XfvLHNM/mY QuK53PxBWNNSJ9hzw3OgJ9u3Y0JT/U7Cr5+/RTGO1QEwTp6fq2uJPeEYlSbhzGDs 5ak6cVqs+pOdWxxHZg9Hxw/68It7OOjqYX0BIYYGwAMosV3qfKQ1T3zNZIuZwFIV LIK+ohFLNlq63TA7epDDIwWDhjsKk4FAVSLQvOXZX8fvAkIZ+K0iT6qemYrEpfUm JSX+k76HXSF9goC/qI7/8QjGyUnZMUPASNy5jUk864peVyYbBjPkd9vPjiVbgnM2 EKoqcNvQSVuPwv/4HZpUw2jA0WcyWDEV -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:37 2025 by rpki-client