$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: j2X7iyZrK0i1yPtkgRlVm45t7XrI5uLTwcn4uxZ7GCg= Subject key identifier: 05:A2:4E:06:D1:15:7B:27:F2:4E:89:53:A3:0B:2D:A2:06:94:8A:2A Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0C2A Signing time: Fri 04 Apr 2025 18:34:25 +0000 Manifest this update: Fri 04 Apr 2025 18:34:25 +0000 Manifest next update: Fri 11 Apr 2025 18:34:25 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: Q3xRjofCRiYgqw/6IXDRpEJD79ILKRfH7b3P0k6i1xE=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: RucjPZzTbGDJdlGQIFIquuY8AQ91dPmBUeP0p5s4V7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB Validity Not Before: Apr 4 18:34:25 2025 GMT Not After : Apr 11 18:34:25 2025 GMT Subject: CN=67f02631-f472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:66:84:1a:db:27:01:1e:4b:fa:f8:f4:0f: 56:bd:26:5f:fa:61:37:ea:76:0b:b3:92:05:00:7f: 98:8c:56:87:77:cc:a7:25:3e:f5:bf:06:a1:1e:77: e0:7a:56:ed:82:20:07:fd:7e:3f:66:d7:55:75:a2: 16:b3:3b:75:4a:8f:98:0c:bf:80:b4:74:b9:0e:13: cf:bf:c6:b5:b7:71:1b:af:30:56:ad:39:88:e7:d1: af:7e:b5:85:76:f2:9e:d1:b8:f7:af:c1:d1:f5:20: 6d:e9:c3:c7:4f:22:64:62:62:64:80:8b:3f:4d:90: 93:75:0d:73:d8:4a:f8:39:8a:fe:86:d7:af:8d:ba: 2a:3d:5e:d5:59:1b:a6:2b:a9:a3:6e:8c:03:da:93: b3:d2:1a:8a:20:b8:b0:23:20:8a:1a:ce:83:79:9e: 30:f6:a7:40:99:c5:70:36:0a:7e:0a:94:09:c7:ac: 58:35:f4:9e:6d:1d:e1:59:ed:61:ee:de:9a:be:79: ec:b0:b6:76:2b:e3:dd:c2:04:d2:c3:f8:8b:85:c9: 7b:ad:52:99:bf:4c:d5:d9:cc:c3:c3:76:14:b5:34: 2e:1a:d3:af:dc:29:ba:04:49:36:ec:ee:ec:0e:03: 89:1a:2a:81:bb:d0:45:b0:21:59:d7:a3:10:9c:d4: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A2:4E:06:D1:15:7B:27:F2:4E:89:53:A3:0B:2D:A2:06:94:8A:2A X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:23:c7:ab:50:f0:d0:ec:81:af:d4:7b:2d:27:23:d6:24:99: a6:d2:84:bc:e2:c8:46:98:9a:91:c4:95:a5:84:e4:67:1f:55: 35:8f:4b:c5:5e:aa:a8:de:ef:0e:1d:13:f0:72:83:e6:4f:83: 17:9f:1d:21:cd:f3:52:9c:f5:10:30:f7:50:d3:e5:36:dc:4f: 84:53:1d:33:bc:88:9a:69:9c:cf:f2:9d:4c:c6:89:5c:62:69: be:30:5b:58:08:36:a8:10:33:11:29:e3:93:3f:50:e0:46:45: 6c:a6:13:3e:ed:e2:93:a7:ac:f5:d6:1e:61:f7:a6:9a:1f:ff: 17:77:c3:56:94:71:98:36:78:b9:48:31:6a:fe:c8:a7:a0:90: 43:a4:0a:8e:f9:16:bd:6e:f6:a0:d3:ce:2b:b2:16:a3:dc:b2: bd:ab:5b:e0:25:72:36:72:6a:69:5e:f9:42:37:a6:29:c9:cc: 7c:6b:04:b4:d0:8b:6a:ad:90:12:0e:e0:0b:1d:25:d4:fa:f8: 7e:0a:36:00:df:5a:ab:06:84:37:f4:df:42:4d:3f:d5:45:e6: 27:d1:8c:c7:50:79:85:c0:14:3a:6a:65:e5:fd:5a:d8:8b:cb: aa:c4:63:4a:7c:f7:6d:24:4e:f7:b2:13:2d:22:5a:97:79:52: 91:e1:77:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUwNDA0MTgzNDI1WhcNMjUwNDExMTgzNDI1WjAYMRYwFAYD VQQDEw02N2YwMjYzMS1mNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrpmhBrbJwEeS/r49A9WvSZf+mE36nYLs5IFAH+YjFaHd8ynJT71vwahHnfg elbtgiAH/X4/ZtdVdaIWszt1So+YDL+AtHS5DhPPv8a1t3EbrzBWrTmI59GvfrWF dvKe0bj3r8HR9SBt6cPHTyJkYmJkgIs/TZCTdQ1z2Er4OYr+htevjboqPV7VWRum K6mjbowD2pOz0hqKILiwIyCKGs6DeZ4w9qdAmcVwNgp+CpQJx6xYNfSebR3hWe1h 7t6avnnssLZ2K+PdwgTSw/iLhcl7rVKZv0zV2czDw3YUtTQuGtOv3Cm6BEk27O7s DgOJGiqBu9BFsCFZ16MQnNSW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWiTgbR FXsn8k6JU6MLLaIGlIoqMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLI8erUPDQ7IGv1HstJyPWJJmm0oS84shGmJqRxJWlhORnH1U1j0vF Xqqo3u8OHRPwcoPmT4MXnx0hzfNSnPUQMPdQ0+U23E+EUx0zvIiaaZzP8p1Mxolc Ymm+MFtYCDaoEDMRKeOTP1DgRkVsphM+7eKTp6z11h5h96aaH/8Xd8NWlHGYNni5 SDFq/sinoJBDpAqO+Ra9bvag084rshaj3LK9q1vgJXI2cmppXvlCN6Ypycx8awS0 0ItqrZASDuALHSXU+vh+CjYA31qrBoQ39N9CTT/VReYn0YzHUHmFwBQ6amXl/VrY i8uqxGNKfPdtJE73shMtIlqXeVKR4Xfx -----END CERTIFICATE-----Generated at Sat Apr 5 22:19:12 2025 by rpki-client