$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json) Hash identifier: OERHCHZOq1xP6f7dS/sr7YSRNzC3hnmh3QqUOuV5too= Subject key identifier: 36:E0:1B:BE:2C:9B:83:2D:65:74:62:5A:88:EF:6B:2A:A6:6B:8C:E4 Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft Manifest number: 0166 Signing time: Thu 03 Apr 2025 03:21:02 +0000 Manifest this update: Thu 03 Apr 2025 03:21:01 +0000 Manifest next update: Thu 10 Apr 2025 03:21:01 +0000 Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: 6iC6TkVLu5x6nj8S42CbT5MxwhTO13Tf82T5lW0XA1U=) 2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: poEtgPZtcpiKYKdYhV9CVGAapseARodx6sLWBCWZ/Pg=) 3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: RgZyk1M0eEMoNtFOvPy85ZKQKHabcvIY9dY7CkjXass=) 4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: 34mVt8KDeQIiFh5q4FQNM2/Hz6nw+/aMWnc/7Wb1lCk=) 5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: PFCyjZSOpcMocZlkABMSTW0YSTJDAjKzZb80gKogztE=) 6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: S8OAyRRDBlpW325PGxmAZWgYigEamJ2scEiQ4nUj0ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911710E Validity Not Before: Apr 3 03:21:01 2025 GMT Not After : Apr 10 03:21:01 2025 GMT Subject: CN=67edfe9e-dc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:92:cc:35:b0:40:e1:89:d0:68:6b:96:62: 04:12:23:cb:68:38:87:18:29:c6:b2:b3:b4:f3:a7: ad:28:cb:db:63:95:75:fc:bb:51:5c:64:2d:ee:15: b3:c9:c0:58:74:40:20:a3:ed:ec:6f:08:63:27:b1: f4:9c:d7:44:22:93:11:32:8e:39:48:7f:5a:47:bd: f9:1b:a9:22:eb:5d:f4:a8:0e:c5:cc:e6:5e:71:fa: d4:56:fe:7b:4d:9b:b9:ce:60:76:24:62:59:1f:ef: 80:27:9d:87:15:d6:1d:16:43:a5:9e:fc:e8:13:a6: 07:c0:47:63:ca:53:b7:75:91:ef:c0:c6:d8:5d:a8: fb:55:75:da:9e:68:76:8b:4e:b9:62:e2:45:68:01: 90:22:d0:c4:69:94:f4:a2:60:d2:81:5f:2e:18:2a: ac:77:26:03:35:e0:90:bf:5c:89:75:c0:69:33:62: d0:77:e0:d3:b8:c8:72:36:c1:34:47:01:fc:4f:1f: 93:a5:96:bc:cc:bb:53:40:d3:55:5e:e1:eb:71:9d: 65:02:a9:c5:ed:c2:f7:4e:70:f0:f1:50:a7:81:9c: 71:3e:b3:4b:c5:6f:50:7d:86:a7:17:cb:f2:dd:e9: 10:0b:1c:e0:a0:f9:e1:f7:89:fe:72:4a:95:31:75: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E0:1B:BE:2C:9B:83:2D:65:74:62:5A:88:EF:6B:2A:A6:6B:8C:E4 X509v3 Authority Key Identifier: keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:53:a5:aa:ee:fc:bf:e7:ec:a3:73:8c:19:ab:52:9d:af:aa: e8:b8:70:e0:4f:a9:2a:06:43:76:64:51:39:d1:e4:9c:99:f1: 3c:7f:9c:18:8e:af:a5:7f:d5:0b:7c:12:db:ed:9a:d8:bf:ad: 48:1d:6f:26:14:4c:f6:27:fe:6f:34:b8:d2:16:3c:88:c9:c8: 1d:ae:21:29:a0:23:9a:b1:ed:3c:bf:5a:75:bf:64:47:9b:03: 5a:7e:bf:c6:29:6e:a8:f7:cf:88:5b:58:dc:98:0a:b8:18:e1: 8d:1e:2e:28:dd:6b:ac:6f:e4:64:a9:04:82:95:08:df:7e:c0: 0a:00:81:8c:d1:02:d9:3f:d4:00:30:ba:e3:29:85:63:6e:ff: 7a:fb:0e:4e:8f:58:98:fe:68:e3:22:9e:87:b5:08:9a:87:05: c8:60:4c:56:85:31:29:02:d5:1f:38:b6:41:f8:8a:78:22:d3: 7f:35:ec:36:75:63:06:bb:f0:05:68:0b:cb:b5:79:24:3b:d4: 93:91:43:6c:f0:1b:a7:0e:6e:b9:ea:56:15:7e:d7:12:c6:79: e8:9f:3c:bd:ef:af:8e:5c:d9:c3:95:42:8b:a3:e2:b5:fc:c1: 62:69:30:91:23:10:af:0c:d4:24:98:31:42:c5:6b:ef:e6:7e: 51:1e:e4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3 NDYxOTkzODMwHhcNMjUwNDAzMDMyMTAxWhcNMjUwNDEwMDMyMTAxWjAYMRYwFAYD VQQDEw02N2VkZmU5ZS1kYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7aSzDWwQOGJ0GhrlmIEEiPLaDiHGCnGsrO086etKMvbY5V1/LtRXGQt7hWz ycBYdEAgo+3sbwhjJ7H0nNdEIpMRMo45SH9aR735G6ki6130qA7FzOZecfrUVv57 TZu5zmB2JGJZH++AJ52HFdYdFkOlnvzoE6YHwEdjylO3dZHvwMbYXaj7VXXanmh2 i065YuJFaAGQItDEaZT0omDSgV8uGCqsdyYDNeCQv1yJdcBpM2LQd+DTuMhyNsE0 RwH8Tx+TpZa8zLtTQNNVXuHrcZ1lAqnF7cL3TnDw8VCngZxxPrNLxW9QfYanF8vy 3ekQCxzgoPnh94n+ckqVMXUbsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbgG74s m4MtZXRiWojvayqma4zkMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4 UjRMbWYyWV9QQmwwWVprNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuU6Wq7vy/5+yjc4wZq1Kdr6rouHDgT6kqBkN2ZFE50eScmfE8f5wY jq+lf9ULfBLb7ZrYv61IHW8mFEz2J/5vNLjSFjyIycgdriEpoCOase08v1p1v2RH mwNafr/GKW6o98+IW1jcmAq4GOGNHi4o3Wusb+RkqQSClQjffsAKAIGM0QLZP9QA MLrjKYVjbv96+w5Oj1iY/mjjIp6HtQiahwXIYExWhTEpAtUfOLZB+Ip4ItN/New2 dWMGu/AFaAvLtXkkO9STkUNs8BunDm656lYVftcSxnnonzy976+OXNnDlUKLo+K1 /MFiaTCRIxCvDNQkmDFCxWvv5n5RHuRZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:04 2025 by rpki-client