$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: 5MwyE18ZCVPnUfWqrUywAhC/5N2sNlpIuMyYvuUdZKg= Subject key identifier: A0:96:9B:A8:32:43:9B:C5:B5:D9:2E:CA:98:33:77:51:AD:92:18:59 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 041E Signing time: Sat 29 Mar 2025 00:41:44 +0000 Manifest this update: Sat 29 Mar 2025 00:41:43 +0000 Manifest next update: Sat 05 Apr 2025 00:41:43 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: HnFLD6OrIwoYCdUwEpmeb2l/N8nk2OUQ1kmzcixKmXg=) 2: 5590E4766AD111EFB8AD551AC4F9AE02.roa (hash: u4534TN3FipMq5w+c3LILmi2ZS4NbdKmjDpYBOie5OM=) 3: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990 Validity Not Before: Mar 29 00:41:43 2025 GMT Not After : Apr 5 00:41:43 2025 GMT Subject: CN=67e741c8-7b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:1b:ea:2b:6f:a9:38:90:66:af:7d:07:b6: ad:33:9e:d1:d1:d2:d4:00:3c:6f:c0:6a:c7:a8:b4: 50:6a:b4:44:23:3c:13:c0:1a:38:f3:a2:dc:5d:ea: 05:cc:54:21:bd:2e:e9:70:49:df:aa:59:56:10:29: f4:cf:19:a9:3d:08:8f:ac:15:9f:4a:88:74:0a:02: c8:56:59:9b:c6:e7:29:9e:be:2f:6e:ac:c1:9b:55: 3b:83:91:a9:2f:9d:9b:15:88:2c:33:76:24:23:16: 6f:f0:bc:03:5a:69:96:7d:41:34:78:82:74:05:f1: 3c:63:d2:a5:72:f6:49:cc:f4:3e:00:6d:11:57:a5: f0:86:44:ca:06:87:0f:7f:22:9f:15:29:51:e8:1f: 18:84:27:da:82:86:67:2c:86:50:7b:85:73:3a:f3: 86:8f:ce:90:03:b3:a7:65:24:11:78:4b:ee:fc:ad: a0:36:32:ab:75:e4:f7:44:b2:7d:1d:dc:7e:7f:3d: f5:bd:82:a9:90:04:3e:cf:0d:5e:98:bf:04:68:c7: c4:8b:f7:c9:b5:a0:08:99:b3:c4:83:a7:42:4d:d5: f2:f7:d6:14:dc:c9:8f:17:b1:c0:c1:4f:9a:6c:01: d2:57:6d:43:09:80:d3:2b:08:13:ff:d3:a9:4f:cd: ad:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:96:9B:A8:32:43:9B:C5:B5:D9:2E:CA:98:33:77:51:AD:92:18:59 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:9c:90:ed:9b:4d:a7:a8:06:d2:e2:6c:d6:79:b7:c1:ca:22: 85:23:4d:28:22:19:eb:b4:8e:92:d2:1a:3f:b0:5d:33:ba:75: c8:3c:37:aa:41:97:88:c0:1f:53:56:0d:83:fe:03:a8:ea:6d: f0:67:ee:53:cd:f5:0f:21:3a:8c:de:df:cb:f7:dd:ed:2c:82: 1a:a9:00:d2:9f:6f:aa:45:76:41:b9:e6:76:96:e7:e6:82:2d: d0:b1:6b:2b:4d:7d:bb:86:d6:15:1f:ff:b8:ec:a5:ac:97:92: 89:ab:f7:cd:8d:0a:39:59:de:17:b5:c1:4d:68:e6:b7:10:d8: 4a:aa:89:7b:25:b5:cd:f5:8f:fa:12:1c:dd:ac:79:f2:6c:d5: a6:68:2d:48:6d:0e:96:f7:45:4a:f5:9c:c2:95:6b:ca:7a:4d: e3:5a:1e:08:7a:03:d3:50:92:d1:04:75:14:8b:8e:02:3b:3a: 30:65:e9:b7:dc:d0:02:78:90:86:58:c1:8c:b5:ba:df:76:14: 1f:bf:22:0c:e0:e9:93:fc:b2:3b:84:25:48:7d:ce:7f:c6:f0: 0e:21:bb:f9:46:69:12:5b:5c:56:f7:34:d4:0d:07:01:cb:f9: c2:fd:25:f6:03:de:c8:55:56:66:1b:14:85:91:07:6c:31:5d: 6e:ad:be:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUwMzI5MDA0MTQzWhcNMjUwNDA1MDA0MTQzWjAYMRYwFAYD VQQDEw02N2U3NDFjOC03YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozsb6itvqTiQZq99B7atM57R0dLUADxvwGrHqLRQarREIzwTwBo486LcXeoF zFQhvS7pcEnfqllWECn0zxmpPQiPrBWfSoh0CgLIVlmbxucpnr4vbqzBm1U7g5Gp L52bFYgsM3YkIxZv8LwDWmmWfUE0eIJ0BfE8Y9KlcvZJzPQ+AG0RV6XwhkTKBocP fyKfFSlR6B8YhCfagoZnLIZQe4VzOvOGj86QA7OnZSQReEvu/K2gNjKrdeT3RLJ9 Hdx+fz31vYKpkAQ+zw1emL8EaMfEi/fJtaAImbPEg6dCTdXy99YU3MmPF7HAwU+a bAHSV21DCYDTKwgT/9OpT82ttQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCWm6gy Q5vFtdkuypgzd1GtkhhZMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5nJDtm02nqAbS4mzWebfByiKFI00oIhnrtI6S0ho/sF0zunXIPDeq QZeIwB9TVg2D/gOo6m3wZ+5TzfUPITqM3t/L993tLIIaqQDSn2+qRXZBueZ2lufm gi3QsWsrTX27htYVH/+47KWsl5KJq/fNjQo5Wd4XtcFNaOa3ENhKqol7JbXN9Y/6 EhzdrHnybNWmaC1IbQ6W90VK9ZzClWvKek3jWh4IegPTUJLRBHUUi44COzowZem3 3NACeJCGWMGMtbrfdhQfvyIM4OmT/LI7hCVIfc5/xvAOIbv5RmkSW1xW9zTUDQcB y/nC/SX2A97IVVZmGxSFkQdsMV1urb5c -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:48 2025 by rpki-client