$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: 8tEXgWXYnV7enIyL6wSO9W9oEboeLL/JHXdGxegRYng= Subject key identifier: 4E:B0:06:BB:D7:DA:8E:63:07:C4:A1:85:28:38:69:DD:B2:CA:9A:1B Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1CF8 Signing time: Thu 24 Apr 2025 16:10:12 +0000 Manifest this update: Thu 24 Apr 2025 16:10:11 +0000 Manifest next update: Thu 01 May 2025 16:10:11 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: AiTrNFMrp9mZ1pre8yl88UuC3CLa98WUTgtOBHELD98=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7429 (0x1d05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Apr 24 16:10:11 2025 GMT Not After : May 1 16:10:11 2025 GMT Subject: CN=680a6264-21b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:dd:f2:9f:ed:60:0c:9f:30:53:7e:0a:0a: 92:a4:9f:b6:d8:8d:90:b7:d8:e0:46:1b:94:b0:d4: 7c:c1:3d:9d:de:0e:39:8c:68:d4:a3:11:ba:bb:4a: 63:a3:73:1a:90:36:fc:b9:6d:f1:ec:20:da:18:84: f5:9c:ea:36:30:83:5f:3a:1c:a6:28:fd:91:5b:b4: bc:f4:f5:60:57:d4:52:eb:bc:84:84:91:8f:37:5a: 39:4a:59:0e:fe:71:22:7c:ed:9f:7d:8d:ad:66:97: e2:ba:d4:ca:bc:d0:78:78:a2:06:6c:df:3f:5c:0b: d3:57:8b:23:83:ea:45:ab:e0:e4:c3:59:b4:1e:02: ea:17:95:ed:37:4f:79:e4:ff:b1:72:d1:fa:a3:1b: 46:d9:7b:6c:c6:15:1f:d7:0f:27:cc:3b:98:10:46: 3c:42:fb:d8:4a:c9:ff:bd:0c:8c:71:e1:6d:1f:32: 26:66:e4:95:4b:19:55:e4:bd:3e:96:c4:da:f7:0e: 57:61:e4:1a:9b:8e:ee:4e:f8:05:87:47:86:c6:54: f6:7b:90:3f:10:a4:b0:08:b8:e6:f6:d6:c9:d2:01: e2:0d:60:1d:9b:8d:3c:59:47:e5:31:84:c2:3a:34: f7:b3:ae:d4:76:d2:8a:68:8f:90:09:b1:e2:7b:11: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B0:06:BB:D7:DA:8E:63:07:C4:A1:85:28:38:69:DD:B2:CA:9A:1B X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ba:c1:aa:7b:7d:a2:38:84:fb:4f:32:b3:15:5b:ce:89:7f: 00:bc:e1:81:1a:1c:15:f5:4f:79:a2:6a:e4:9a:fa:53:04:3a: be:50:a9:4a:e2:98:63:b8:5d:58:58:71:b8:36:46:be:f2:e8: a8:94:62:17:56:d1:f1:60:3c:91:b8:73:c4:ab:a6:e4:77:ac: d8:17:cf:ab:d7:d0:4c:e8:26:d7:e1:ea:76:a6:8d:59:1b:44: 12:99:81:68:43:ff:fc:be:ae:ef:d7:7a:6b:ca:30:a1:6e:8b: 02:8c:92:eb:f6:1b:94:da:07:8e:e8:69:60:69:48:d3:9a:dc: 9d:86:a3:28:83:b1:52:38:94:ce:06:28:0c:40:32:10:b0:05: 4d:c8:40:ca:44:13:e7:43:70:5d:7c:92:56:45:94:29:b7:ad: d7:69:d0:9b:03:c0:b0:f4:b4:c5:ef:d3:70:d7:84:69:0e:92: 31:0f:f8:96:f5:87:57:92:4f:4f:1e:27:55:55:fa:6d:5a:0d: 11:bc:80:70:9c:58:08:df:a4:38:91:a7:ed:4b:5c:9c:e3:60: 38:47:64:00:44:bc:f5:cb:a5:11:10:3c:1b:b6:50:ab:ca:d1: 92:eb:a5:ed:72:78:de:f6:eb:a3:51:04:8a:07:46:87:87:a8: 07:cc:08:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwNDI0MTYxMDExWhcNMjUwNTAxMTYxMDExWjAYMRYwFAYD VQQDEw02ODBhNjI2NC0yMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcDd8p/tYAyfMFN+CgqSpJ+22I2Qt9jgRhuUsNR8wT2d3g45jGjUoxG6u0pj o3MakDb8uW3x7CDaGIT1nOo2MINfOhymKP2RW7S89PVgV9RS67yEhJGPN1o5SlkO /nEifO2ffY2tZpfiutTKvNB4eKIGbN8/XAvTV4sjg+pFq+Dkw1m0HgLqF5XtN095 5P+xctH6oxtG2XtsxhUf1w8nzDuYEEY8QvvYSsn/vQyMceFtHzImZuSVSxlV5L0+ lsTa9w5XYeQam47uTvgFh0eGxlT2e5A/EKSwCLjm9tbJ0gHiDWAdm408WUflMYTC OjT3s67UdtKKaI+QCbHiexGazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6wBrvX 2o5jB8ShhSg4ad2yypobMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqusGqe32iOIT7TzKzFVvOiX8AvOGBGhwV9U95omrkmvpTBDq+UKlK 4phjuF1YWHG4Nka+8uiolGIXVtHxYDyRuHPEq6bkd6zYF8+r19BM6CbX4ep2po1Z G0QSmYFoQ//8vq7v13pryjChbosCjJLr9huU2geO6GlgaUjTmtydhqMog7FSOJTO BigMQDIQsAVNyEDKRBPnQ3BdfJJWRZQpt63XadCbA8Cw9LTF79Nw14RpDpIxD/iW 9YdXkk9PHidVVfptWg0RvIBwnFgI36Q4kaftS1yc42A4R2QARLz1y6UREDwbtlCr ytGS66Xtcnje9uujUQSKB0aHh6gHzAjq -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:29 2025 by rpki-client