$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: 6gGjObm3bTsCIc+qNrd25CR/Bnbg3QcR1f29ytZkUZY= Subject key identifier: 8E:8E:3A:3D:6E:E5:E4:0C:95:61:DC:36:E1:E5:7A:74:07:AA:A8:6C Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 1E Signing time: Fri 11 Apr 2025 07:08:39 +0000 Manifest this update: Fri 11 Apr 2025 07:08:39 +0000 Manifest next update: Fri 18 Apr 2025 07:08:39 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: r4SigFO7FKZIkyFUYFBC5T6XQSrqXIdenpkjSF+uew8=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Apr 11 07:08:39 2025 GMT Not After : Apr 18 07:08:39 2025 GMT Subject: CN=67f8bff7-2c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:f1:8a:e2:d8:14:d8:78:d7:fa:be:f3:a2: a6:b4:b9:95:dd:85:b6:af:15:4f:76:3c:4a:8b:ba: ad:75:fc:d4:60:ee:e1:0f:e3:7d:fc:14:5d:f9:b9: 2e:b0:58:f1:55:f9:4a:5b:a5:3e:82:58:68:cf:3f: f7:14:c2:3c:ba:e7:3c:e6:26:b3:f7:3f:87:f6:ed: 88:3c:ad:a7:53:c0:78:77:89:17:de:8a:26:e4:a1: c9:53:38:24:17:c8:06:54:c2:3b:41:6e:25:7c:19: 3e:a2:f7:4e:c6:81:b0:6e:f9:eb:e1:e2:36:bb:81: 60:78:32:8d:83:19:fa:e3:23:b2:63:b4:f4:bc:12: 5f:40:90:16:8b:c6:43:8e:39:3e:02:f7:97:22:bb: 03:41:83:d7:ea:7a:1d:56:93:17:59:5c:6a:60:0c: fb:af:55:5c:b8:b1:ce:28:5e:a6:1e:9f:8f:1b:80: 14:c2:7c:92:7e:dc:c0:55:59:8b:57:83:ba:9f:34: e5:63:87:3a:a5:70:38:0e:0c:4b:11:68:05:7f:17: 6b:ea:e4:3d:e1:19:42:46:98:ff:36:97:ae:11:68: 93:60:ad:f2:fc:e5:64:4c:5b:7f:cb:67:b6:dc:b2: 19:5b:ec:79:7c:66:42:90:ed:2c:50:c5:70:aa:7a: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8E:3A:3D:6E:E5:E4:0C:95:61:DC:36:E1:E5:7A:74:07:AA:A8:6C X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:cc:79:29:09:79:cc:31:e9:39:d3:05:87:86:2f:cb:f7:27: 87:d4:52:4a:2b:ef:b8:50:e0:7b:38:0f:f5:54:72:be:c5:a0: c6:30:fb:46:17:09:8c:9c:61:75:e0:3e:1c:f4:43:e5:7c:9b: e0:a8:23:48:6e:29:2a:36:09:d6:1d:44:d9:74:7b:0a:73:c1: 31:c5:15:84:67:c8:70:d9:6f:3a:53:4f:7e:a5:8e:9f:8d:6d: bd:93:64:ac:41:ab:e6:74:4d:43:44:2d:31:d2:52:ec:90:71: bf:f9:44:37:58:f0:e6:ce:46:d0:93:77:33:a5:ff:0c:6b:27: cc:65:6c:1a:0d:3d:9e:8e:a2:14:67:56:37:cd:cb:45:96:de: 7f:43:25:74:08:58:05:a3:25:f5:5b:12:2a:a5:8a:c2:e6:f5: b8:dd:b7:74:d3:d1:ca:ec:07:78:be:7a:22:01:d0:8c:6a:bf: e7:4b:7d:b1:8d:08:ba:c7:6c:41:5a:9b:e7:6b:84:26:b1:84: ee:ff:27:07:be:1d:73:68:ea:fc:64:c8:da:56:22:23:fc:1c: 9c:01:7d:e1:cc:c1:ec:7e:97:19:49:4d:0e:e0:72:70:77:04: ad:ac:72:39:bf:50:f6:21:de:c9:82:9d:dd:ac:72:27:ef:88: 3e:9d:85:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA0MTEwNzA4MzlaFw0yNTA0MTgwNzA4MzlaMBgxFjAUBgNV BAMTDTY3ZjhiZmY3LTJjNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDD/GK4tgU2HjX+r7zoqa0uZXdhbavFU92PEqLuq11/NRg7uEP4338FF35uS6w WPFV+UpbpT6CWGjPP/cUwjy65zzmJrP3P4f27Yg8radTwHh3iRfeiibkoclTOCQX yAZUwjtBbiV8GT6i907GgbBu+evh4ja7gWB4Mo2DGfrjI7JjtPS8El9AkBaLxkOO OT4C95ciuwNBg9fqeh1WkxdZXGpgDPuvVVy4sc4oXqYen48bgBTCfJJ+3MBVWYtX g7qfNOVjhzqlcDgODEsRaAV/F2vq5D3hGUJGmP82l64RaJNgrfL85WRMW3/LZ7bc shlb7Hl8ZkKQ7SxQxXCqek3lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjo46PW7l 5AyVYdw24eV6dAeqqGwwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfMeSkJecwx6TnTBYeGL8v3J4fUUkor77hQ4Hs4D/VUcr7FoMYw+0YX CYycYXXgPhz0Q+V8m+CoI0huKSo2CdYdRNl0ewpzwTHFFYRnyHDZbzpTT36ljp+N bb2TZKxBq+Z0TUNELTHSUuyQcb/5RDdY8ObORtCTdzOl/wxrJ8xlbBoNPZ6OohRn VjfNy0WW3n9DJXQIWAWjJfVbEiqlisLm9bjdt3TT0crsB3i+eiIB0Ixqv+dLfbGN CLrHbEFam+drhCaxhO7/Jwe+HXNo6vxkyNpWIiP8HJwBfeHMwex+lxlJTQ7gcnB3 BK2scjm/UPYh3smCnd2scifviD6dhRg= -----END CERTIFICATE-----Generated at Sat Apr 12 17:43:10 2025 by rpki-client