$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json) Hash identifier: NdVvFN3T2a1q4uxsQt+lT7JdkdPn8k2kgNJki+1I9Cw= Subject key identifier: EE:74:E9:A3:71:DB:C1:B9:AD:A6:CE:84:67:7E:77:84:78:53:BA:E6 Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft Manifest number: 040F Signing time: Fri 25 Apr 2025 00:14:47 +0000 Manifest this update: Fri 25 Apr 2025 00:14:46 +0000 Manifest next update: Fri 02 May 2025 00:14:46 +0000 Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: Xi2++d12He8r6we8ZfCfhVJdD+ZME0MGhGxgHK5pvEk=) 2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Validity Not Before: Apr 25 00:14:46 2025 GMT Not After : May 2 00:14:46 2025 GMT Subject: CN=680ad3f7-2f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:c3:37:00:ad:f5:e2:09:5e:20:c1:27:ca: 32:dd:73:8e:ca:e9:ff:eb:ed:e0:d0:3f:98:d7:6e: 04:86:d5:5d:92:1c:83:5f:1f:54:6a:9e:8c:41:f4: 05:2e:db:fa:01:48:bf:da:c4:17:ef:74:33:df:8b: d3:59:99:1a:2d:e7:5a:79:6f:fe:e1:86:27:0f:a7: e0:2d:6d:bb:e5:90:90:28:6b:a2:2f:20:42:e7:ac: 53:e3:4b:58:8f:83:8f:90:e5:4b:b8:f7:25:3a:33: 78:ec:96:ac:ef:a7:66:54:64:09:a8:71:51:d7:f5: c8:8c:ae:f8:a1:b1:9b:c2:b7:7e:48:c0:43:47:a2: e6:53:bd:8d:f1:13:9b:66:92:68:68:48:39:4b:5c: 44:3e:51:e3:13:97:88:13:97:b8:d4:aa:61:88:bd: 8a:23:e6:ae:6f:7a:d1:9c:67:6d:ba:42:75:fc:3d: 9a:af:c2:2b:99:96:82:30:7b:75:25:75:f7:aa:ae: f5:95:e0:cb:51:0d:73:67:87:cb:33:f8:0e:96:36: c7:38:3c:4a:22:ad:6b:86:71:f4:81:6c:0a:c3:39: a1:aa:0a:e8:e9:bd:8d:d4:5a:e8:74:07:d6:a4:51: dc:17:ce:f8:19:1f:5f:e7:88:7a:d7:66:08:f3:af: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:74:E9:A3:71:DB:C1:B9:AD:A6:CE:84:67:7E:77:84:78:53:BA:E6 X509v3 Authority Key Identifier: keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f2:1c:84:c6:e9:eb:e8:e0:5b:57:ab:09:e3:4a:33:bb:de: 94:28:99:2d:91:92:91:78:f4:71:64:71:01:fe:f8:a8:1e:1f: 81:ba:53:98:ca:18:95:82:11:c2:b5:15:d7:7d:36:f3:9c:eb: 69:47:52:b9:39:75:79:d9:7c:64:d5:93:98:5b:a7:bd:77:ec: 77:10:f5:9a:1a:d9:41:e2:3e:33:be:3c:8f:cd:c7:e8:ab:74: 9a:5d:e6:e3:05:26:18:0e:96:40:2f:84:73:16:a5:6a:c9:cd: 97:c0:bd:48:f5:89:e5:6a:66:6c:10:a3:d3:02:36:33:e1:4c: 09:50:3f:b6:c5:ee:b1:ed:71:ac:3c:41:de:d0:3d:05:4e:f5: 77:c0:f3:b1:32:cd:da:e8:5e:cf:15:68:7d:db:c5:70:f4:7b: 04:e6:26:81:88:9c:b4:eb:47:0b:fa:e4:8a:ac:f0:a1:9a:bb: fd:b9:c0:6f:5a:95:0e:82:5d:3d:82:33:b3:59:4b:12:7a:e8: bf:00:88:5c:4d:c0:98:08:c0:a4:25:79:d6:d5:d4:44:10:81: b5:f5:7b:77:54:11:83:11:50:da:3b:53:12:ab:ee:1e:68:7d: d4:dd:88:26:f8:45:b4:ca:00:70:b5:cd:c0:9c:ce:7d:36:fc: f9:b6:64:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx MkE1NTFDMzgwHhcNMjUwNDI1MDAxNDQ2WhcNMjUwNTAyMDAxNDQ2WjAYMRYwFAYD VQQDEw02ODBhZDNmNy0yZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFTDNwCt9eIJXiDBJ8oy3XOOyun/6+3g0D+Y124EhtVdkhyDXx9Uap6MQfQF Ltv6AUi/2sQX73Qz34vTWZkaLedaeW/+4YYnD6fgLW275ZCQKGuiLyBC56xT40tY j4OPkOVLuPclOjN47Jas76dmVGQJqHFR1/XIjK74obGbwrd+SMBDR6LmU72N8ROb ZpJoaEg5S1xEPlHjE5eIE5e41KphiL2KI+aub3rRnGdtukJ1/D2ar8IrmZaCMHt1 JXX3qq71leDLUQ1zZ4fLM/gOljbHODxKIq1rhnH0gWwKwzmhqgro6b2N1FrodAfW pFHcF874GR9f54h612YI86/+twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO506aNx 28G5rabOhGd+d4R4U7rmMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy bnFzd05HOWlTMk1TcFZIRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA38hyExunr6OBbV6sJ40ozu96UKJktkZKRePRxZHEB/vioHh+BulOY yhiVghHCtRXXfTbznOtpR1K5OXV52Xxk1ZOYW6e9d+x3EPWaGtlB4j4zvjyPzcfo q3SaXebjBSYYDpZAL4RzFqVqyc2XwL1I9YnlamZsEKPTAjYz4UwJUD+2xe6x7XGs PEHe0D0FTvV3wPOxMs3a6F7PFWh928Vw9HsE5iaBiJy060cL+uSKrPChmrv9ucBv WpUOgl09gjOzWUsSeui/AIhcTcCYCMCkJXnW1dREEIG19Xt3VBGDEVDaO1MSq+4e aH3U3Ygm+EW0ygBwtc3AnM59Nvz5tmSt -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:48 2025 by rpki-client