$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json) Hash identifier: T4I8ApmsYRWselXKU8/9DUNGCmW+Uv1wX3KcmG4W98c= Subject key identifier: 63:B9:52:27:39:21:B2:CD:D2:C4:EB:44:74:00:FC:93:D3:17:31:0C Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft Manifest number: 04AA Signing time: Thu 24 Apr 2025 23:48:53 +0000 Manifest this update: Thu 24 Apr 2025 23:48:52 +0000 Manifest next update: Thu 01 May 2025 23:48:52 +0000 Files and hashes: 1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: urf4aE7Xiu66R9FBDXkkk+nNjUmR+I9Gjw+DgfwNkkA=) 2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Validity Not Before: Apr 24 23:48:52 2025 GMT Not After : May 1 23:48:52 2025 GMT Subject: CN=680acde5-0cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:21:59:a4:c0:f4:9f:99:e6:4d:f1:8b:6a: d6:86:a4:09:7b:b4:8e:a6:93:f2:54:36:f8:5e:5f: ff:77:62:d0:75:23:9e:ff:9c:1f:99:18:97:48:56: f3:6e:fc:d5:9d:1c:93:fb:82:1c:30:3f:1d:e7:92: 24:fa:e5:b8:7c:50:94:1b:58:fe:da:21:53:8d:f3: e8:4f:54:0d:65:b8:32:24:05:a5:8f:af:5b:a2:c9: f4:64:7e:3b:96:f4:6b:1e:08:26:c8:cf:9a:31:2d: a2:86:d0:b6:a8:99:2b:8d:a8:27:ca:b1:5b:e4:33: 9b:fe:57:5d:c0:31:f2:03:cb:c2:c1:94:81:ae:08: c5:ce:7d:64:25:02:3c:2b:9e:30:02:fe:06:0f:24: 24:04:9d:95:00:c8:44:6b:5f:e4:4f:e6:77:84:f0: 55:9b:55:18:ed:70:d5:b7:f6:3f:9c:db:e8:26:b8: e1:16:ad:2a:98:f4:d2:f7:e6:05:bc:a2:64:ee:75: 3f:67:c8:9a:3b:99:09:2e:f4:da:19:1f:a3:7a:d1: 98:9c:78:79:df:c5:4a:90:72:55:d1:c7:71:f5:87: 1c:17:20:7a:bb:89:7d:ba:15:d4:b2:d0:bc:c9:ee: 50:3d:8f:f5:1d:73:05:fc:bf:0d:95:db:85:ae:71: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B9:52:27:39:21:B2:CD:D2:C4:EB:44:74:00:FC:93:D3:17:31:0C X509v3 Authority Key Identifier: keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:eb:82:55:35:79:55:34:3c:09:03:61:47:67:0b:48:df:8c: a9:f0:46:50:a7:f6:e9:fa:93:c7:5c:4e:dd:87:fd:45:31:ea: 55:40:fc:e8:9b:31:4e:15:76:a2:a8:29:13:5d:73:0e:f0:b8: 5f:c3:45:d9:1a:4b:a5:5f:5b:53:56:bb:55:8b:b4:8b:c3:91: 8d:34:5c:ae:19:43:5e:95:37:f7:ab:fe:53:51:fe:98:11:2c: 97:7a:ec:46:d5:f4:b7:f2:1a:72:57:c8:8a:72:b4:5d:6a:cf: 32:e6:ec:06:4b:d4:92:1d:1a:60:17:ce:e5:56:69:ba:ca:ff: f6:9f:5a:80:10:97:bf:29:aa:ba:e0:41:d9:7b:dc:7e:96:76: 3e:fd:a7:30:69:dd:24:2a:c9:89:29:e5:28:3b:82:79:cb:93: 87:d8:6d:d2:c8:d7:95:30:66:28:03:5a:6e:4c:6d:67:27:6e: eb:8a:b1:c2:b1:dd:55:e5:88:ef:21:9e:ce:d1:67:16:d9:27: 06:38:dc:58:29:ba:59:fc:b2:f1:14:ca:8a:00:ca:b4:f3:05: bd:d8:ff:c7:55:d2:7b:77:7b:f4:92:b4:92:d4:03:80:78:b2: 50:39:c6:90:e2:62:bc:47:ff:0d:48:41:8a:1d:6b:0e:b5:78: dd:74:5b:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhEM0FDQ0M2REFB NEM1MThDQjQwHhcNMjUwNDI0MjM0ODUyWhcNMjUwNTAxMjM0ODUyWjAYMRYwFAYD VQQDEw02ODBhY2RlNS0wY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0v0hWaTA9J+Z5k3xi2rWhqQJe7SOppPyVDb4Xl//d2LQdSOe/5wfmRiXSFbz bvzVnRyT+4IcMD8d55Ik+uW4fFCUG1j+2iFTjfPoT1QNZbgyJAWlj69bosn0ZH47 lvRrHggmyM+aMS2ihtC2qJkrjagnyrFb5DOb/lddwDHyA8vCwZSBrgjFzn1kJQI8 K54wAv4GDyQkBJ2VAMhEa1/kT+Z3hPBVm1UY7XDVt/Y/nNvoJrjhFq0qmPTS9+YF vKJk7nU/Z8iaO5kJLvTaGR+jetGYnHh538VKkHJV0cdx9YccFyB6u4l9uhXUstC8 ye5QPY/1HXMF/L8NlduFrnFLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO5Uic5 IbLN0sTrRHQA/JPTFzEMMB8GA1UdIwQYMBaAFGfzfFDKM89PUIV406zMbapMUYy0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE3Ri83NjBFMjI4RTM3 REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venowOVFoWGpUck14dHFreFJq TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfTjhVTW96ejA5UWhYalRyTXh0cWt4UmpMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE3Ri83NjBFMjI4RTM3REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venow OVFoWGpUck14dHFreFJqTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL64JVNXlVNDwJA2FHZwtI34yp8EZQp/bp+pPHXE7dh/1FMepVQPzo mzFOFXaiqCkTXXMO8Lhfw0XZGkulX1tTVrtVi7SLw5GNNFyuGUNelTf3q/5TUf6Y ESyXeuxG1fS38hpyV8iKcrRdas8y5uwGS9SSHRpgF87lVmm6yv/2n1qAEJe/Kaq6 4EHZe9x+lnY+/acwad0kKsmJKeUoO4J5y5OH2G3SyNeVMGYoA1puTG1nJ27rirHC sd1V5YjvIZ7O0WcW2ScGONxYKbpZ/LLxFMqKAMq08wW92P/HVdJ7d3v0krSS1AOA eLJQOcaQ4mK8R/8NSEGKHWsOtXjddFtr -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:37 2025 by rpki-client