$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft File: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json) Hash identifier: G8d61V8WVx3dSLsRD+iA2sf6NjVpiiA8pNiJCyo+gyw= Subject key identifier: E2:F4:B9:90:81:E2:17:28:DA:F2:5D:0F:1D:66:4A:0F:82:83:5C:A3 Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 Certificate issuer: /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft Manifest number: 070B Signing time: Thu 24 Apr 2025 21:41:35 +0000 Manifest this update: Thu 24 Apr 2025 21:41:34 +0000 Manifest next update: Thu 01 May 2025 21:41:34 +0000 Files and hashes: 1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: eyBT7QshIaKnIao5H3RPzmVYmTBCdaJBWgoBiNutlwM=) 2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: MX4yOu1oCqUSOCDHmBztUTuNn37/SxpV/qX8mmPxh2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196492, serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Validity Not Before: Apr 24 21:41:34 2025 GMT Not After : May 1 21:41:34 2025 GMT Subject: CN=680ab00e-65ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:b7:ff:ec:d0:28:a3:57:b3:76:7b:08:75: 3a:fd:53:58:6d:da:9c:d5:55:16:f4:74:2f:8f:0b: c9:50:8c:f0:e6:72:ab:7b:26:69:0a:c5:8b:77:27: 9b:16:8f:e1:e4:1d:a7:95:d1:22:7b:d6:d9:12:c7: 2b:5a:9c:b0:a1:6f:73:2f:5a:13:1b:bb:f4:95:68: ef:0d:9a:ba:a3:ef:9d:bf:0b:f4:b5:52:1e:0f:f5: 74:76:69:bc:6c:b0:b7:54:e1:ce:6b:29:35:03:7a: 88:66:c1:cc:cd:6d:10:df:f2:2f:00:d5:58:b6:4d: d6:de:cc:5b:6b:d7:30:d9:c1:b1:0b:ca:a0:a8:e7: 52:86:69:51:3e:ef:81:d6:ce:c6:49:6d:f7:ff:dd: 08:d4:4e:80:7e:06:72:6f:6b:41:c8:d6:da:7f:7a: f3:74:a0:cb:a1:97:6b:db:75:5b:35:04:34:e3:5e: d5:10:70:5d:53:25:31:91:e5:bb:22:0e:d1:1a:49: f9:17:69:8a:46:3a:df:80:9d:5e:d2:c3:a3:a8:55: 6b:c4:ee:42:f2:bd:02:72:c9:a2:a1:3a:d3:cd:ea: a8:51:d4:8b:41:1e:95:dd:e0:00:2d:31:55:4e:d9: 2e:90:bb:66:5e:07:bf:d6:5d:91:73:e3:d4:9b:c7: c6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F4:B9:90:81:E2:17:28:DA:F2:5D:0F:1D:66:4A:0F:82:83:5C:A3 X509v3 Authority Key Identifier: keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a7:fe:90:65:03:8d:12:08:04:16:98:c6:0f:20:51:c6:a9: c0:67:eb:ec:17:83:3f:3e:40:12:e4:d4:36:48:f8:85:23:c0: b5:eb:34:79:1e:a9:39:af:6f:d4:77:70:4f:f3:cb:0e:b3:1e: f4:ff:fd:b4:4b:90:f6:84:3f:b3:a3:95:8c:0d:ca:fe:2c:47: 3c:85:7a:aa:68:42:bc:b1:6d:32:d3:b9:f7:df:5c:61:da:ea: f8:57:ff:e3:a8:a9:46:97:4a:60:da:ea:5f:bb:7f:be:ef:ca: a5:6f:1f:d9:47:3c:94:ba:91:c1:44:49:f3:3d:1e:cf:1b:56: e1:17:00:8a:7a:99:b1:5b:2b:33:81:67:7d:9f:8e:4a:d5:4f: 89:ec:14:0b:fb:85:89:48:d4:95:6c:4b:06:af:86:d2:74:f8: 99:03:8d:9d:95:19:44:d4:1c:f3:d0:0a:25:62:8a:3e:88:45: c8:be:e7:56:3b:1a:93:01:d1:26:1b:aa:3c:21:6f:6f:bf:43: 4b:58:48:4c:1a:ef:d9:1e:43:8d:44:34:ac:74:e9:65:3a:eb: c9:8c:0e:c7:39:d2:4e:ef:bd:b8:db:88:33:0b:18:c4:12:c5: 14:55:ad:10:9f:78:91:16:bf:58:cc:5e:22:f5:3d:41:89:64: 42:e7:1f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0OTIxMTAvBgNVBAUTKDlCMzk5QkZCRDE2OTM1Njc0OEY4MTVGMkNBODA0OEU5 RDVGQTRGRTQwHhcNMjUwNDI0MjE0MTM0WhcNMjUwNTAxMjE0MTM0WjAYMRYwFAYD VQQDEw02ODBhYjAwZS02NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucy3/+zQKKNXs3Z7CHU6/VNYbdqc1VUW9HQvjwvJUIzw5nKreyZpCsWLdyeb Fo/h5B2nldEie9bZEscrWpywoW9zL1oTG7v0lWjvDZq6o++dvwv0tVIeD/V0dmm8 bLC3VOHOayk1A3qIZsHMzW0Q3/IvANVYtk3W3sxba9cw2cGxC8qgqOdShmlRPu+B 1s7GSW33/90I1E6AfgZyb2tByNbaf3rzdKDLoZdr23VbNQQ0417VEHBdUyUxkeW7 Ig7RGkn5F2mKRjrfgJ1e0sOjqFVrxO5C8r0CcsmioTrTzeqoUdSLQR6V3eAALTFV TtkukLtmXge/1l2Rc+PUm8fGxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOL0uZCB 4hco2vJdDx1mSg+Cg1yjMB8GA1UdIwQYMBaAFJs5m/vRaTVnSPgV8sqASOnV+k/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ5Mi84MDJFQjFCRTM4 M0UxMUVCOTgxQkI3NTdDNEY5QUUwMi9tem1iLTlGcE5XZEktQlh5eW9CSTZkWDZU LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216bWItOUZwTldkSS1CWHl5b0JJNmRYNlQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ5Mi84MDJFQjFCRTM4M0UxMUVCOTgxQkI3NTdDNEY5QUUwMi9tem1iLTlGcE5X ZEktQlh5eW9CSTZkWDZULVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGp/6QZQONEggEFpjGDyBRxqnAZ+vsF4M/PkAS5NQ2SPiFI8C16zR5 Hqk5r2/Ud3BP88sOsx70//20S5D2hD+zo5WMDcr+LEc8hXqqaEK8sW0y07n331xh 2ur4V//jqKlGl0pg2upfu3++78qlbx/ZRzyUupHBREnzPR7PG1bhFwCKepmxWysz gWd9n45K1U+J7BQL+4WJSNSVbEsGr4bSdPiZA42dlRlE1Bzz0AolYoo+iEXIvudW OxqTAdEmG6o8IW9vv0NLWEhMGu/ZHkONRDSsdOllOuvJjA7HOdJO772424gzCxjE EsUUVa0Qn3iRFr9YzF4i9T1BiWRC5x9n -----END CERTIFICATE-----Generated at Sat Apr 26 15:08:58 2025 by rpki-client