$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: LLIXvqUCA/DSvLYb2yyJ3luA3djcG/kbVSXf2qIFq0c= Subject key identifier: 98:A2:48:11:AF:25:8D:46:AA:DC:D8:22:72:7A:D8:FC:E5:84:40:89 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 022D Signing time: Fri 25 Apr 2025 01:41:53 +0000 Manifest this update: Fri 25 Apr 2025 01:41:53 +0000 Manifest next update: Fri 02 May 2025 01:41:53 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: 0w05Vtfm+GrfODtxQxjzj1aK5lBW5O/MrxTfJQ02GZg=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: pHBuxlD5xQVDJjXkIBgfM6YV4nu0ZIEhZDtze/Saq+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Apr 25 01:41:53 2025 GMT Not After : May 2 01:41:53 2025 GMT Subject: CN=680ae861-e6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:75:b2:57:b1:22:ec:16:95:20:af:f5:bf:f0: 5c:6f:93:9f:33:09:9b:7c:99:dd:62:ac:ad:4e:c9: b2:58:17:8e:62:18:35:f1:3e:4b:e5:5c:1f:86:82: 1d:72:ae:62:55:27:e3:3e:99:e1:08:8a:bf:f3:14: eb:b4:17:56:4c:c4:b8:5c:73:94:40:1c:c0:f1:02: 2f:fb:c9:a7:e0:4b:39:ec:a1:a4:d9:41:ae:34:99: cb:a3:dd:f5:27:18:e2:d7:c3:54:e0:52:dd:a2:8f: df:5d:4a:95:9e:e8:a5:69:21:91:61:41:eb:ec:97: bd:9f:54:10:1d:5b:cc:c0:77:b0:7e:33:44:29:03: 22:a4:5c:85:bc:fa:dc:5a:a0:eb:ea:7f:72:41:6c: 6a:7b:45:0b:14:89:1a:1e:36:35:72:c9:54:07:6a: 26:14:f2:ab:09:de:3f:ff:7c:bb:ae:78:ed:e2:65: eb:b4:ee:52:f7:eb:d0:d4:8e:31:4c:87:53:74:e1: f1:9a:73:b0:a8:d2:3b:76:bb:a6:04:d2:55:98:63: d8:70:8b:b4:62:61:6f:ee:89:e3:f1:6d:42:18:32: 61:89:ec:f8:c8:62:a4:1b:8a:f3:7e:0d:6d:6e:ad: c1:66:91:c2:91:76:67:89:86:39:bc:c1:66:97:08: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A2:48:11:AF:25:8D:46:AA:DC:D8:22:72:7A:D8:FC:E5:84:40:89 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:72:12:09:5b:4d:a9:83:ac:1f:0b:9a:fe:29:02:f5:d8:71: 98:64:1d:2c:15:48:a1:af:31:6f:ae:8b:42:35:5a:95:8b:bc: d7:9e:59:8d:21:0e:5d:23:4a:34:0e:44:2a:4d:ff:ee:4d:07: 08:95:b7:c6:90:6d:f0:45:56:26:f8:b9:d1:d8:e9:80:bd:a5: c8:57:47:01:f0:c3:c9:30:a5:39:0b:4f:a4:c0:dd:a2:8b:49: fe:af:d3:02:17:bb:1b:fa:42:0a:9c:5b:b7:1a:29:94:a3:8d: 92:68:e3:09:6c:de:83:d2:b9:61:7e:b2:e9:e9:ea:a8:35:7a: 1d:29:6a:b5:d8:21:7c:48:98:8d:e2:e1:04:42:65:fa:ef:76: 18:85:72:fe:19:2b:0e:cb:af:8a:69:7c:d8:60:bb:1a:37:34: fc:26:6e:f4:aa:49:b0:7e:55:25:b4:8c:53:f2:e0:ad:b3:12: a3:85:ca:eb:ea:ea:98:26:45:6e:88:0a:af:2a:c4:32:45:ea: d5:6d:d1:06:6f:10:71:83:59:ff:3c:ac:27:1e:a5:9f:bc:fc: 6e:28:0c:1e:72:88:e7:5d:e7:b1:ff:3d:53:93:ab:7a:e8:68: 6f:81:47:e3:24:50:e1:04:be:c8:9c:d2:5a:cc:37:a0:33:eb: e0:4c:9f:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUwNDI1MDE0MTUzWhcNMjUwNTAyMDE0MTUzWjAYMRYwFAYD VQQDEw02ODBhZTg2MS1lNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nWyV7Ei7BaVIK/1v/Bcb5OfMwmbfJndYqytTsmyWBeOYhg18T5L5VwfhoId cq5iVSfjPpnhCIq/8xTrtBdWTMS4XHOUQBzA8QIv+8mn4Es57KGk2UGuNJnLo931 Jxji18NU4FLdoo/fXUqVnuilaSGRYUHr7Je9n1QQHVvMwHewfjNEKQMipFyFvPrc WqDr6n9yQWxqe0ULFIkaHjY1cslUB2omFPKrCd4//3y7rnjt4mXrtO5S9+vQ1I4x TIdTdOHxmnOwqNI7drumBNJVmGPYcIu0YmFv7onj8W1CGDJhiez4yGKkG4rzfg1t bq3BZpHCkXZniYY5vMFmlwhmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiiSBGv JY1GqtzYInJ62PzlhECJMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANchIJW02pg6wfC5r+KQL12HGYZB0sFUihrzFvrotCNVqVi7zXnlmN IQ5dI0o0DkQqTf/uTQcIlbfGkG3wRVYm+LnR2OmAvaXIV0cB8MPJMKU5C0+kwN2i i0n+r9MCF7sb+kIKnFu3GimUo42SaOMJbN6D0rlhfrLp6eqoNXodKWq12CF8SJiN 4uEEQmX673YYhXL+GSsOy6+KaXzYYLsaNzT8Jm70qkmwflUltIxT8uCtsxKjhcrr 6uqYJkVuiAqvKsQyRerVbdEGbxBxg1n/PKwnHqWfvPxuKAwecojnXeex/z1Tk6t6 6GhvgUfjJFDhBL7InNJazDegM+vgTJ/X -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:36 2025 by rpki-client