$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: bieah46R6XItUImvNk+G3U3+MVEvcbx50FdXqpqBMR8= Subject key identifier: 62:13:50:BF:4F:F7:63:77:6E:C9:5B:06:54:DC:58:39:02:B1:DD:8D Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 08D7 Signing time: Sun 06 Apr 2025 20:11:15 +0000 Manifest this update: Sun 06 Apr 2025 20:11:15 +0000 Manifest next update: Sun 13 Apr 2025 20:11:15 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: aJnmw2JZYG1YaPD+LD27REt9nGNfYNMiZ5P1Vuhj+0g=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 20:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46 Validity Not Before: Apr 6 20:11:15 2025 GMT Not After : Apr 13 20:11:15 2025 GMT Subject: CN=67f2dfe3-fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:3f:b2:89:ac:24:b6:de:d0:68:9a:fe:fc: ed:3f:8a:6f:a5:b9:da:c3:85:52:e1:77:de:23:ac: 6a:01:c2:55:08:35:e9:2c:ff:ae:e2:09:d9:10:1d: 74:34:79:e4:0e:85:19:0e:62:a3:bb:2b:84:55:20: 47:55:76:06:b6:7c:18:ca:12:57:35:63:ef:44:8d: b5:cc:1d:4c:ba:c7:e3:db:78:b1:fe:f0:db:c9:f4: 5d:53:79:fc:a9:d6:82:7f:33:fe:db:b3:68:7f:53: 0d:46:e4:b7:e9:5e:f5:58:6b:98:be:23:4c:48:39: a1:2c:3b:4d:a4:cc:5f:48:e8:84:1d:cd:5f:18:65: 67:8e:3a:a5:07:bd:10:94:a6:9a:3f:17:19:d7:ed: 27:01:9b:22:72:90:e1:72:c9:ba:0d:45:3b:d3:43: f6:1d:a7:7e:f8:03:a3:49:3f:1b:46:37:fa:45:06: 5a:b1:17:a8:e1:ff:89:5d:ee:41:7a:7f:e8:66:02: 3f:99:75:07:2c:d1:0d:ff:c6:0a:f8:d8:97:d7:53: 2a:0d:bd:1f:88:20:ad:ad:10:41:c4:b2:98:3c:56: a0:55:09:08:97:bb:07:f7:2a:64:52:65:75:34:10: b1:64:d5:26:2c:af:d4:53:7b:0c:5b:c2:c8:eb:01: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:13:50:BF:4F:F7:63:77:6E:C9:5B:06:54:DC:58:39:02:B1:DD:8D X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:16:f5:65:5a:bc:21:83:26:a4:67:e7:47:53:df:23:7b:ff: ef:83:a0:42:36:44:17:02:05:07:0e:4e:ae:bb:cf:d4:48:2e: 6c:8f:db:01:5c:db:6d:ed:ef:5d:1c:04:0a:8a:d8:4b:65:91: 62:7f:30:24:2e:fe:44:49:d8:0e:3d:5e:53:d3:89:21:c9:cb: 76:8e:ee:76:cd:65:45:ae:8e:13:9e:78:84:92:81:89:b3:ee: 1f:da:3f:b7:c2:6a:23:72:f1:8d:44:cf:ec:70:7c:6e:e5:23: 38:3c:49:47:d7:e9:84:4b:a6:85:c5:21:4f:4b:27:c8:cb:31: 84:7e:e0:82:b4:8c:30:5b:e3:89:47:5e:da:da:14:11:4a:a9: 0f:9a:c1:de:af:1e:77:c1:6e:36:02:1c:90:e8:9d:c4:76:f1: 04:b0:e0:fe:df:58:02:55:4b:e6:41:f3:83:00:fd:94:0a:81: 73:bd:fd:bd:80:7f:84:6d:2e:9e:6d:33:f2:1f:ef:31:12:8e: df:86:68:c8:1f:91:43:23:53:b6:03:84:ee:25:94:08:26:5f: b4:6e:ad:b7:24:a2:76:03:8a:0a:d1:d4:b4:e3:b6:b3:38:7b: 0f:43:d3:7b:92:c3:c0:35:d7:36:90:2f:f4:77:91:3d:2c:1f: db:52:3c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUwNDA2MjAxMTE1WhcNMjUwNDEzMjAxMTE1WjAYMRYwFAYD VQQDEw02N2YyZGZlMy1mYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU4/somsJLbe0Gia/vztP4pvpbnaw4VS4XfeI6xqAcJVCDXpLP+u4gnZEB10 NHnkDoUZDmKjuyuEVSBHVXYGtnwYyhJXNWPvRI21zB1Musfj23ix/vDbyfRdU3n8 qdaCfzP+27Nof1MNRuS36V71WGuYviNMSDmhLDtNpMxfSOiEHc1fGGVnjjqlB70Q lKaaPxcZ1+0nAZsicpDhcsm6DUU700P2Had++AOjST8bRjf6RQZasReo4f+JXe5B en/oZgI/mXUHLNEN/8YK+NiX11MqDb0fiCCtrRBBxLKYPFagVQkIl7sH9ypkUmV1 NBCxZNUmLK/UU3sMW8LI6wHTHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGITUL9P 92N3bslbBlTcWDkCsd2NMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByFvVlWrwhgyakZ+dHU98je//vg6BCNkQXAgUHDk6uu8/USC5sj9sB XNtt7e9dHAQKithLZZFifzAkLv5ESdgOPV5T04khyct2ju52zWVFro4TnniEkoGJ s+4f2j+3wmojcvGNRM/scHxu5SM4PElH1+mES6aFxSFPSyfIyzGEfuCCtIwwW+OJ R17a2hQRSqkPmsHerx53wW42AhyQ6J3EdvEEsOD+31gCVUvmQfODAP2UCoFzvf29 gH+EbS6ebTPyH+8xEo7fhmjIH5FDI1O2A4TuJZQIJl+0bq23JKJ2A4oK0dS047az OHsPQ9N7ksPANdc2kC/0d5E9LB/bUjwm -----END CERTIFICATE-----Generated at Mon Apr 7 12:19:33 2025 by rpki-client