$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: H6dhM5zeqZJQfGRGCYVEHtWJRGr2Wf5so1Y5p15/PWw= Subject key identifier: 52:94:EF:2C:34:C9:C7:9A:36:74:DF:F7:59:E9:1E:F7:C8:00:0F:91 Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: D8 Signing time: Thu 03 Apr 2025 04:47:51 +0000 Manifest this update: Thu 03 Apr 2025 04:47:51 +0000 Manifest next update: Thu 10 Apr 2025 04:47:51 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: l80OQmr1TmW8W4xlBR/2c0pD467h0V06wDIcgJJE4ro=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018 Validity Not Before: Apr 3 04:47:51 2025 GMT Not After : Apr 10 04:47:51 2025 GMT Subject: CN=67ee12f7-ef0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:27:a7:80:f4:d0:ee:78:1c:3d:27:79:c2: 67:ee:b7:9e:3e:b5:c8:bb:ea:8b:10:4d:bb:0a:a1: 00:91:5e:da:07:05:a5:1e:42:0b:25:f1:10:67:2c: dd:fc:41:f7:f6:fd:c0:a5:9a:ba:bc:ae:64:f8:c3: 3a:df:b4:e4:4b:4d:ed:93:a2:76:3e:93:c9:d6:b2: 9a:b9:38:65:70:f1:8a:f6:38:fe:c3:9c:c7:bd:e7: dc:18:58:68:e4:72:05:da:e0:15:98:22:8e:e2:f3: 72:a2:bd:6d:94:cd:23:65:67:51:2f:30:1d:0a:1f: 5e:73:59:0a:18:12:8d:22:d9:e6:70:53:10:f6:07: 7d:1d:e7:ce:34:e7:cd:45:00:d5:1b:51:78:e2:6c: fd:40:2e:6d:24:8c:1c:a6:94:da:3f:ad:f4:c5:a7: d8:85:df:ca:cf:21:8f:40:5e:b8:79:be:b1:75:be: 7b:49:92:e2:54:dd:2b:8b:12:64:dc:6b:91:0a:a3: 01:91:55:71:d6:e1:a9:53:5d:d5:5b:91:96:fa:26: 74:45:f7:66:50:cd:e5:ea:3d:c7:6e:59:11:dc:e3: 6a:b6:5a:eb:86:c8:15:cf:97:ce:85:df:33:9e:34: b8:12:eb:81:bb:2a:7f:88:40:47:ef:40:43:8a:61: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:94:EF:2C:34:C9:C7:9A:36:74:DF:F7:59:E9:1E:F7:C8:00:0F:91 X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a6:49:0b:e1:5b:81:43:77:4c:76:d3:51:55:a7:6c:35:40: b8:bd:e2:a1:7f:97:fc:bb:d3:ad:ec:dd:03:03:7b:69:d9:6f: 61:81:73:00:c4:43:39:2e:a2:ce:77:b0:14:83:22:90:6a:df: 52:1c:c2:81:0d:fa:6c:af:9e:db:7c:ca:62:aa:17:8e:67:75: 29:d7:ca:6b:4c:1a:c3:a4:64:da:32:b5:3d:6b:b4:f6:b5:92: 95:16:84:2d:ff:95:8e:cd:b3:20:b3:5f:1a:96:d4:03:b0:17: dc:cf:98:82:95:88:af:e1:fc:a8:a6:d5:c5:88:be:b6:66:12: 1b:9f:1e:25:73:a5:83:5c:55:19:a9:9a:0f:11:46:82:a2:a0: f7:40:3c:70:69:cb:fc:88:c2:86:86:60:7c:b9:9d:d8:8f:a3: 76:d9:25:4a:15:cc:70:2a:b7:d3:26:bf:99:30:58:85:3d:33: 38:b0:a4:10:3f:8d:ce:bc:10:53:10:33:26:cd:05:b9:a0:6a: 8f:20:9f:91:4d:cd:5a:93:bd:28:fd:20:dd:83:a9:8a:f4:00: 62:44:51:78:cc:c0:7f:42:6b:7d:a8:67:36:42:50:47:3b:a5: 08:fb:f0:07:4a:a2:fd:70:58:c1:c8:ab:49:85:93:12:2d:89: b3:40:7a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUwNDAzMDQ0NzUxWhcNMjUwNDEwMDQ0NzUxWjAYMRYwFAYD VQQDEw02N2VlMTJmNy1lZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV8np4D00O54HD0necJn7reePrXIu+qLEE27CqEAkV7aBwWlHkILJfEQZyzd /EH39v3ApZq6vK5k+MM637TkS03tk6J2PpPJ1rKauThlcPGK9jj+w5zHvefcGFho 5HIF2uAVmCKO4vNyor1tlM0jZWdRLzAdCh9ec1kKGBKNItnmcFMQ9gd9HefONOfN RQDVG1F44mz9QC5tJIwcppTaP630xafYhd/KzyGPQF64eb6xdb57SZLiVN0rixJk 3GuRCqMBkVVx1uGpU13VW5GW+iZ0RfdmUM3l6j3HblkR3ONqtlrrhsgVz5fOhd8z njS4EuuBuyp/iEBH70BDimEbtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKU7yw0 yceaNnTf91npHvfIAA+RMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOpkkL4VuBQ3dMdtNRVadsNUC4veKhf5f8u9Ot7N0DA3tp2W9hgXMA xEM5LqLOd7AUgyKQat9SHMKBDfpsr57bfMpiqheOZ3Up18prTBrDpGTaMrU9a7T2 tZKVFoQt/5WOzbMgs18altQDsBfcz5iClYiv4fyoptXFiL62ZhIbnx4lc6WDXFUZ qZoPEUaCoqD3QDxwacv8iMKGhmB8uZ3Yj6N22SVKFcxwKrfTJr+ZMFiFPTM4sKQQ P43OvBBTEDMmzQW5oGqPIJ+RTc1ak70o/SDdg6mK9ABiRFF4zMB/Qmt9qGc2QlBH O6UI+/AHSqL9cFjByKtJhZMSLYmzQHry -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:18 2025 by rpki-client