$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: IGbNC08dfguQqmJjoRYPdhhV686XRh2Cvx3mIpHTw14= Subject key identifier: D5:3E:4F:5A:94:33:D1:18:E7:BE:74:06:E3:C9:A4:15:C9:D2:D7:40 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 1A Signing time: Fri 25 Apr 2025 06:57:24 +0000 Manifest this update: Fri 25 Apr 2025 06:57:24 +0000 Manifest next update: Fri 02 May 2025 06:57:24 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: 5qARoFd5AOdwAMROZl3+xLCwtaye+nLR9XY2ryvUvzs=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Apr 25 06:57:24 2025 GMT Not After : May 2 06:57:24 2025 GMT Subject: CN=680b3254-c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:65:83:10:6f:3d:e5:54:07:dd:0e:01:94: db:b7:37:a3:b1:05:ea:cb:a2:3c:52:21:f4:cd:5a: 00:b4:e7:5f:be:19:fb:a6:f9:ac:93:04:66:77:f1: 2f:6f:5d:60:ed:bd:a2:d3:8e:66:4d:ce:ba:8b:6a: cb:96:3e:42:5f:bf:76:f7:9a:55:6d:a6:b3:80:59: 74:5e:78:23:03:a8:05:f4:c6:93:ab:9d:94:fb:48: 5c:3c:c9:28:a8:d0:66:28:21:f8:0d:e2:3e:40:87: 26:88:53:a6:73:c6:c4:01:00:b3:cd:5c:eb:78:a1: 2d:f9:26:19:92:19:58:44:b1:1d:9e:c4:c2:d1:0d: 93:31:ae:cd:aa:28:53:eb:4c:b8:93:28:78:77:42: 67:99:6d:31:d5:55:08:ad:d8:82:f4:ae:f1:6f:e1: 67:01:ae:85:89:4e:b4:d9:d4:81:24:19:58:bc:f6: 97:55:db:96:08:6a:eb:26:6d:da:ad:88:fe:6b:04: e2:b7:bd:3b:fb:b9:3d:66:05:97:29:f7:ff:de:4a: a9:ad:5c:97:78:58:a9:cd:18:df:a7:25:31:da:dd: 26:80:87:44:55:d7:2a:d1:0a:36:7f:ca:fe:3a:c6: fd:71:99:0b:2e:3c:18:03:40:5b:91:90:30:41:6f: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:4F:5A:94:33:D1:18:E7:BE:74:06:E3:C9:A4:15:C9:D2:D7:40 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:57:b3:ad:08:83:31:43:ae:7e:6f:f8:a5:b3:0d:56:dd: 42:cc:09:dd:42:99:f9:99:a3:e5:60:9a:11:9b:91:11:bf:b7: 9f:9f:57:49:b6:81:7b:9a:04:5b:df:94:27:db:1e:9d:e4:97: ea:a5:fe:37:77:a4:a0:2b:77:23:f2:16:26:13:f8:52:4c:63: 7f:8a:7a:88:7a:75:46:85:0f:95:3f:6f:8d:00:75:f5:4c:e4: 2c:56:0c:47:72:5f:1d:e0:84:ae:a5:cf:6f:7e:11:08:71:cc: 89:5e:da:16:4a:af:15:af:50:14:78:67:88:7b:d6:f8:ba:40: 8f:a2:24:24:39:25:f2:6d:30:37:f7:89:b9:86:4b:72:92:48: c4:78:08:1c:eb:6b:94:19:be:df:6c:13:7f:d1:9c:97:0d:93: 2b:7e:6d:6d:68:a9:48:f0:36:7e:cf:63:5e:8f:84:b9:fc:8e: c4:58:e9:16:f9:80:3d:2f:44:90:3d:30:35:2c:42:92:18:e9: df:a0:e3:72:4f:1b:7b:33:d4:b1:77:56:e3:fa:a2:2c:c5:4c: bd:36:b0:b9:f2:a7:11:91:d4:9c:b0:59:cb:ed:6d:63:32:2e: ed:57:72:07:60:d2:90:9c:6e:e4:72:25:8f:9c:a5:39:f1:11: 3d:b3:b8:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTA0MjUwNjU3MjRaFw0yNTA1MDIwNjU3MjRaMBgxFjAUBgNV BAMTDTY4MGIzMjU0LWM4M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZEmWDEG895VQH3Q4BlNu3N6OxBerLojxSIfTNWgC051++Gfum+ayTBGZ38S9v XWDtvaLTjmZNzrqLasuWPkJfv3b3mlVtprOAWXReeCMDqAX0xpOrnZT7SFw8ySio 0GYoIfgN4j5AhyaIU6ZzxsQBALPNXOt4oS35JhmSGVhEsR2exMLRDZMxrs2qKFPr TLiTKHh3QmeZbTHVVQit2IL0rvFv4WcBroWJTrTZ1IEkGVi89pdV25YIausmbdqt iP5rBOK3vTv7uT1mBZcp9//eSqmtXJd4WKnNGN+nJTHa3SaAh0RV1yrRCjZ/yv46 xv1xmQsuPBgDQFuRkDBBb2ErAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1T5PWpQz 0RjnvnQG48mkFcnS10AwHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWLV7OtCIMxQ65+b/ilsw1W3ULMCd1CmfmZo+VgmhGbkRG/t5+fV0m2 gXuaBFvflCfbHp3kl+ql/jd3pKArdyPyFiYT+FJMY3+Keoh6dUaFD5U/b40AdfVM 5CxWDEdyXx3ghK6lz29+EQhxzIle2hZKrxWvUBR4Z4h71vi6QI+iJCQ5JfJtMDf3 ibmGS3KSSMR4CBzra5QZvt9sE3/RnJcNkyt+bW1oqUjwNn7PY16PhLn8jsRY6Rb5 gD0vRJA9MDUsQpIY6d+g43JPG3sz1LF3VuP6oizFTL02sLnypxGR1JywWcvtbWMy Lu1Xcgdg0pCcbuRyJY+cpTnxET2zuJA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:41 2025 by rpki-client