$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: 0rSJuZSFF/CyHJYzrYT61N1/8bB45W1khzXxC9SR8kQ= Subject key identifier: 36:0A:A1:CC:D0:1F:B9:F4:93:70:C4:53:CD:C8:B0:E0:09:0A:BD:A0 Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 026D Signing time: Fri 25 Apr 2025 01:28:54 +0000 Manifest this update: Fri 25 Apr 2025 01:28:54 +0000 Manifest next update: Fri 02 May 2025 01:28:54 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: F0KOQHBNOIjz26hRNUmNNfE+PS95xgfGh2xdClNSGVo=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: WqjZAsQr/HLYxK8PcAumByn22k0e0D3wGPxVIBEBQ6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Apr 25 01:28:54 2025 GMT Not After : May 2 01:28:54 2025 GMT Subject: CN=680ae556-8439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:6e:34:24:42:ce:4c:7f:b1:8e:a7:88:f4: 53:7d:39:16:57:b4:39:14:e3:f4:40:da:3e:42:ac: f2:66:2f:a0:eb:ad:b0:99:3d:74:03:f1:5c:9a:62: 10:9e:4a:d3:e4:0f:28:e3:6c:84:ad:37:d9:ad:5d: 57:7a:64:e6:a7:9a:0b:c4:77:29:ef:86:7e:28:ab: 69:a5:cc:a5:65:fc:d4:61:8e:a2:f0:f1:61:e0:e9: 52:d3:fe:e6:b2:40:37:41:91:86:34:b3:eb:6c:3e: 57:83:53:f9:4c:e5:b8:4e:47:48:eb:66:d2:7a:e9: c0:6e:50:3f:e5:a9:1c:7a:54:86:ad:10:76:19:0a: 19:71:d1:22:57:f3:f4:9b:8d:50:37:61:21:3d:9f: a9:36:47:be:ae:14:f2:68:53:50:85:2f:4a:43:a0: 0a:41:6a:10:3e:7d:76:05:f4:28:af:74:25:c8:a3: 46:75:52:b3:b1:57:de:a7:a1:be:d9:e7:5c:32:4d: c7:db:24:eb:d4:9c:2c:ee:89:7b:88:15:82:69:a3: 91:d3:de:5b:93:f4:e0:f8:77:0b:02:47:e4:81:f6: 5b:74:ce:7d:08:78:c2:b8:b5:86:76:53:bd:74:13: c8:73:e9:60:5b:81:50:66:2e:55:68:f0:c1:2d:2c: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:A1:CC:D0:1F:B9:F4:93:70:C4:53:CD:C8:B0:E0:09:0A:BD:A0 X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:56:e7:ac:ed:56:0c:cd:a0:e0:71:d8:84:95:db:9e:25:ba: 1f:d5:b6:96:90:76:4e:b4:53:d1:7b:d7:cf:83:62:39:8d:da: 0e:42:99:a7:28:6d:8f:88:3f:7d:19:07:1f:ce:7c:c6:6b:48: 24:b5:32:9e:07:53:99:83:f6:c7:1e:39:1f:fd:50:82:0d:31: 20:f3:a6:30:ac:05:04:d7:6c:24:7c:bc:18:0d:45:df:52:05: b3:58:72:4b:c3:53:f3:31:8f:b9:a2:5e:53:6e:d7:3a:78:7f: 02:89:ed:f8:f6:44:ca:01:67:47:56:36:47:74:6c:ed:a9:68: a9:1a:71:bb:80:c4:18:07:17:32:24:41:e5:28:b5:61:0b:67: c2:91:56:e3:2e:8b:eb:61:04:2f:5c:e5:08:d7:0e:14:1c:8b: 01:d7:e5:d2:ea:2b:cc:28:32:0c:b6:6c:4b:09:f3:c8:04:d2: 2c:3b:23:d8:20:a7:46:2d:70:c3:8c:11:35:c2:58:5f:83:dd: bd:aa:06:c1:39:1d:1a:6f:96:ce:30:b7:76:8a:35:bd:0e:05: e2:3f:c1:ba:9f:0d:dc:a1:41:bc:dc:b1:a6:cf:ca:88:3d:52: f3:5f:27:3c:09:29:93:89:2f:1a:b8:72:5a:fe:5c:81:c6:b0: 79:83:28:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUwNDI1MDEyODU0WhcNMjUwNTAyMDEyODU0WjAYMRYwFAYD VQQDEw02ODBhZTU1Ni04NDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGpuNCRCzkx/sY6niPRTfTkWV7Q5FOP0QNo+QqzyZi+g662wmT10A/FcmmIQ nkrT5A8o42yErTfZrV1XemTmp5oLxHcp74Z+KKtppcylZfzUYY6i8PFh4OlS0/7m skA3QZGGNLPrbD5Xg1P5TOW4TkdI62bSeunAblA/5akcelSGrRB2GQoZcdEiV/P0 m41QN2EhPZ+pNke+rhTyaFNQhS9KQ6AKQWoQPn12BfQor3QlyKNGdVKzsVfep6G+ 2edcMk3H2yTr1Jws7ol7iBWCaaOR095bk/Tg+HcLAkfkgfZbdM59CHjCuLWGdlO9 dBPIc+lgW4FQZi5VaPDBLSyc8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYKoczQ H7n0k3DEU83IsOAJCr2gMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxVues7VYMzaDgcdiEldueJbof1baWkHZOtFPRe9fPg2I5jdoOQpmn KG2PiD99GQcfznzGa0gktTKeB1OZg/bHHjkf/VCCDTEg86YwrAUE12wkfLwYDUXf UgWzWHJLw1PzMY+5ol5Tbtc6eH8Cie349kTKAWdHVjZHdGztqWipGnG7gMQYBxcy JEHlKLVhC2fCkVbjLovrYQQvXOUI1w4UHIsB1+XS6ivMKDIMtmxLCfPIBNIsOyPY IKdGLXDDjBE1wlhfg929qgbBOR0ab5bOMLd2ijW9DgXiP8G6nw3coUG83LGmz8qI PVLzXyc8CSmTiS8auHJa/lyBxrB5gyhd -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:12 2025 by rpki-client