$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft File: zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json) Hash identifier: aJS80RkqnSy6Da6S8pcf26h9F4eCCtEgV8Ya5sSWtAE= Subject key identifier: 88:63:6D:71:0A:F6:8C:36:0F:B7:E9:04:68:26:7E:34:A7:57:BB:BC Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70 Certificate issuer: /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft Manifest number: D9 Signing time: Fri 25 Apr 2025 04:37:31 +0000 Manifest this update: Fri 25 Apr 2025 04:37:31 +0000 Manifest next update: Fri 02 May 2025 04:37:31 +0000 Files and hashes: 1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: dqBhpgC+EZVl89Y3hCSxs+IEVB46L3aIOmc/hgR1FYA=) 2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: KzdO+S8UaZA+5dqwU3YevT9OI76OGpIsZ7GNNEbB7Sc=) 3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: 9rjLofEU8o84/eDpG2+v1chrVfPs+sqWqIrHcUhxjLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770 Validity Not Before: Apr 25 04:37:31 2025 GMT Not After : May 2 04:37:31 2025 GMT Subject: CN=680b118b-d549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:9d:15:dd:07:dc:22:29:0f:66:f0:76:2a: 62:86:da:f8:8d:0a:43:de:e6:3c:82:ad:5e:1c:a3: da:81:d5:29:57:78:50:15:54:2e:be:d3:f5:dc:2d: 0c:aa:32:3b:18:43:a9:14:20:1c:76:79:d4:91:9d: ca:d8:03:32:8c:04:71:ef:e4:51:21:a7:fd:ed:db: e7:7e:70:fb:81:ad:9d:52:05:1f:1e:f2:c6:6b:20: a1:eb:63:1f:8c:89:5d:56:46:00:18:2c:4b:56:93: 38:18:1e:d2:dd:74:cb:5d:be:9c:53:ae:91:4d:78: 0f:b4:b8:b9:f6:16:75:1b:2f:26:8a:b9:fc:bd:f0: 57:49:f6:45:61:2b:e3:66:49:f7:e1:95:8f:7d:0f: c7:0b:b1:a1:ea:30:39:2d:0a:ee:2a:5f:45:60:6d: 7e:d1:69:7c:ff:81:40:ff:a4:d0:4e:06:88:cb:22: 81:a5:a2:18:08:8d:2f:f7:91:5a:74:45:18:57:00: 5d:dc:0c:60:79:79:70:ec:c0:03:64:ee:71:85:35: 73:7d:6d:3a:6d:f5:a3:4a:83:ee:c3:a5:b6:d0:a0: a0:b4:62:68:ff:f4:5d:c0:d7:01:0a:e6:5c:64:c0: 04:85:f6:23:8c:b0:7f:11:2c:67:fb:b5:4c:3d:fb: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:6D:71:0A:F6:8C:36:0F:B7:E9:04:68:26:7E:34:A7:57:BB:BC X509v3 Authority Key Identifier: keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:3c:d9:7d:4f:1a:46:9e:f4:bb:19:29:0a:16:83:0f:09:b2: f8:3a:96:c0:79:1c:53:e7:32:8a:c9:59:b1:91:5d:b0:e1:ea: 01:d3:d2:ed:21:2a:47:20:e5:e8:20:72:98:ad:9e:d6:54:04: 2a:96:21:df:6e:31:67:9a:e6:ba:b2:3a:71:ad:ba:53:92:0d: 60:35:eb:ef:4e:17:55:1e:13:ce:bf:db:42:53:55:63:6b:4f: ae:4d:c8:b0:5f:86:db:f5:f5:84:16:5b:c3:e6:74:45:87:f9: 2c:b0:4d:f3:cf:62:93:09:fa:fa:89:5a:84:7d:52:8c:9a:e7: 92:9f:a4:e2:e0:92:88:96:74:da:f8:f4:d6:c0:90:b2:09:72: 4a:cd:6a:9f:fd:1e:67:f8:4d:e2:31:73:3e:28:de:10:1d:21: 30:9e:5c:06:ed:47:94:2d:ac:c3:4e:3d:bc:aa:88:5b:56:a7: 66:92:71:6c:0b:9a:58:89:7b:e9:52:bb:9c:c0:4d:d4:59:30: 12:74:8c:37:d3:e8:a0:fc:6e:1d:ff:a7:1d:2e:39:b2:80:08: eb:a0:bf:4f:52:b7:20:f0:43:b8:5a:a3:da:c8:6e:e9:2d:91: db:0f:bf:30:e2:7b:dc:ac:f9:81:d2:72:27:f2:50:88:86:7d: 39:ec:37:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI2MUUxMTAvBgNVBAUTKENEN0I4Njk1NkJFRDlERDYyMTVCRTQ4NUYwQzcxNUI5 MjBDOUE3NzAwHhcNMjUwNDI1MDQzNzMxWhcNMjUwNTAyMDQzNzMxWjAYMRYwFAYD VQQDEw02ODBiMTE4Yi1kNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D2dFd0H3CIpD2bwdipihtr4jQpD3uY8gq1eHKPagdUpV3hQFVQuvtP13C0M qjI7GEOpFCAcdnnUkZ3K2AMyjARx7+RRIaf97dvnfnD7ga2dUgUfHvLGayCh62Mf jIldVkYAGCxLVpM4GB7S3XTLXb6cU66RTXgPtLi59hZ1Gy8mirn8vfBXSfZFYSvj Zkn34ZWPfQ/HC7Gh6jA5LQruKl9FYG1+0Wl8/4FA/6TQTgaIyyKBpaIYCI0v95Fa dEUYVwBd3AxgeXlw7MADZO5xhTVzfW06bfWjSoPuw6W20KCgtGJo//RdwNcBCuZc ZMAEhfYjjLB/ESxn+7VMPfsMSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhjbXEK 9ow2D7fpBGgmfjSnV7u8MB8GA1UdIwQYMBaAFM17hpVr7Z3WIVvkhfDHFbkgyadw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjYxRS84MDdGOTI1NEQ1 NEUxMUVFOENDOTY1MzBDNEY5QUUwMi96WHVHbFd2dG5kWWhXLVNGOE1jVnVTREpw M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pYdUdsV3Z0bmRZaFctU0Y4TWNWdVNESnAzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjYxRS84MDdGOTI1NEQ1NEUxMUVFOENDOTY1MzBDNEY5QUUwMi96WHVHbFd2dG5k WWhXLVNGOE1jVnVTREpwM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQPNl9TxpGnvS7GSkKFoMPCbL4OpbAeRxT5zKKyVmxkV2w4eoB09Lt ISpHIOXoIHKYrZ7WVAQqliHfbjFnmua6sjpxrbpTkg1gNevvThdVHhPOv9tCU1Vj a0+uTciwX4bb9fWEFlvD5nRFh/kssE3zz2KTCfr6iVqEfVKMmueSn6Ti4JKIlnTa +PTWwJCyCXJKzWqf/R5n+E3iMXM+KN4QHSEwnlwG7UeULazDTj28qohbVqdmknFs C5pYiXvpUrucwE3UWTASdIw30+ig/G4d/6cdLjmygAjroL9PUrcg8EO4WqPayG7p LZHbD78w4nvcrPmB0nIn8lCIhn057Ddp -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:51 2025 by rpki-client