$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: o9FufUL1PJrg4ld6UN+kUhBUX/uZTb97Hw7y2SWMhVk= Subject key identifier: 4F:67:FD:F6:F8:2B:7A:F1:A8:57:19:94:A6:E5:6A:80:1B:30:04:78 Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0F9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 0F8F Signing time: Thu 24 Apr 2025 17:31:46 +0000 Manifest this update: Thu 24 Apr 2025 17:31:45 +0000 Manifest next update: Thu 01 May 2025 17:31:45 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: ZuyrxFOzy4M4SWUf4pK3/7QID7oWyfiwUJ1wMBR29KY=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=) 4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3997 (0xf9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Apr 24 17:31:45 2025 GMT Not After : May 1 17:31:45 2025 GMT Subject: CN=680a7581-71e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:35:b0:b6:6f:9a:6e:08:14:71:98:69:80: 04:b7:b8:89:56:a9:8a:75:31:ca:36:a8:3c:a7:cc: b3:db:f3:55:cd:3c:06:4b:bc:43:55:a4:5b:f9:f8: df:5c:11:b3:fe:d6:0f:30:63:11:ac:44:8e:56:10: ac:34:6a:75:f4:5b:78:25:75:56:e8:50:eb:17:06: bc:a6:c7:7a:24:a6:ec:4d:0a:48:d6:78:aa:82:de: c4:48:4d:4c:59:2d:69:30:de:a8:af:39:63:31:01: eb:70:e4:51:45:f2:75:dc:06:fe:d8:1e:7f:19:22: f3:e5:e6:02:fe:d3:b8:88:67:1e:77:3d:be:0c:11: 19:27:23:9b:0d:13:4e:35:fe:ba:ec:32:e2:9c:9d: 5b:3a:33:35:96:d1:41:73:1b:09:fd:4a:97:6e:ed: 72:00:f7:4d:70:4d:ab:8c:95:91:2a:1c:0b:85:a7: 41:9f:23:b4:54:af:de:b3:7a:03:29:c3:aa:e5:83: f7:60:ad:7c:77:c8:af:b5:e1:84:36:c5:27:6c:ee: a1:97:8d:6c:be:77:46:5c:67:78:c5:48:3c:e6:44: 92:a8:f5:b8:b4:27:a5:ca:36:dc:e2:2b:eb:a3:52: 93:50:21:c0:38:28:e2:06:b1:6c:b6:e0:e9:d1:d2: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:67:FD:F6:F8:2B:7A:F1:A8:57:19:94:A6:E5:6A:80:1B:30:04:78 X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:66:87:67:55:95:f6:d5:f9:76:e0:17:6a:40:34:b8:44:ac: e8:7a:c6:07:78:d4:7a:cc:52:54:97:09:35:9d:06:2d:2e:3c: 03:26:98:b4:07:92:5b:2c:21:00:37:5e:97:39:f2:7a:5f:5b: 4c:bb:11:dd:9a:e5:47:b7:b2:89:5f:d7:56:4c:49:69:4f:34: a9:8a:55:33:68:78:70:46:ba:5c:0d:7f:1e:7d:d2:f3:b4:16: f8:db:ae:d3:60:32:d0:4c:8c:dd:e8:44:63:0c:9e:5a:47:3c: 05:89:ca:ae:e0:cc:0c:83:1a:33:fc:5d:56:91:a9:d3:75:89: a3:b5:64:f4:34:70:5c:bf:9f:9a:23:cb:3d:a6:d7:b8:c5:44: e4:0a:6b:70:71:61:a5:cb:2e:15:08:67:98:b1:cf:6a:b5:c4: 6f:69:80:85:9e:1e:5f:74:82:70:89:16:ac:05:30:4a:f4:49: 2b:15:9c:03:7a:e8:94:97:e6:01:7c:d6:64:e1:c0:ed:03:fb: 82:fd:ab:29:d2:6b:a3:30:86:18:db:47:7f:0d:60:cf:d2:15: 33:7f:7f:e3:af:a9:2e:c5:ea:78:ea:fb:a7:1e:e8:e4:9a:aa: b3:0c:6a:4b:8b:1d:1e:d1:fe:1a:59:c4:cd:fe:6b:b7:52:1a: ab:c8:1d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjUwNDI0MTczMTQ1WhcNMjUwNTAxMTczMTQ1WjAYMRYwFAYD VQQDEw02ODBhNzU4MS03MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUg1sLZvmm4IFHGYaYAEt7iJVqmKdTHKNqg8p8yz2/NVzTwGS7xDVaRb+fjf XBGz/tYPMGMRrESOVhCsNGp19Ft4JXVW6FDrFwa8psd6JKbsTQpI1niqgt7ESE1M WS1pMN6orzljMQHrcORRRfJ13Ab+2B5/GSLz5eYC/tO4iGcedz2+DBEZJyObDRNO Nf667DLinJ1bOjM1ltFBcxsJ/UqXbu1yAPdNcE2rjJWRKhwLhadBnyO0VK/es3oD KcOq5YP3YK18d8ivteGENsUnbO6hl41svndGXGd4xUg85kSSqPW4tCelyjbc4ivr o1KTUCHAOCjiBrFstuDp0dKTiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9n/fb4 K3rxqFcZlKblaoAbMAR4MB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcZodnVZX21fl24BdqQDS4RKzoesYHeNR6zFJUlwk1nQYtLjwDJpi0 B5JbLCEAN16XOfJ6X1tMuxHdmuVHt7KJX9dWTElpTzSpilUzaHhwRrpcDX8efdLz tBb4267TYDLQTIzd6ERjDJ5aRzwFicqu4MwMgxoz/F1WkanTdYmjtWT0NHBcv5+a I8s9pte4xUTkCmtwcWGlyy4VCGeYsc9qtcRvaYCFnh5fdIJwiRasBTBK9EkrFZwD euiUl+YBfNZk4cDtA/uC/asp0mujMIYY20d/DWDP0hUzf3/jr6kuxep46vunHujk mqqzDGpLix0e0f4aWcTN/mu3UhqryB1G -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:40 2025 by rpki-client