$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: DFaxqGP+M6UTFxJRdXE6DsZG0ufvvE2k88wunwKbLDo= Subject key identifier: 5E:47:97:32:74:08:94:80:9C:C5:86:9A:0A:4E:A6:37:19:B5:59:4F Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0B06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0AF5 Signing time: Tue 08 Apr 2025 19:12:50 +0000 Manifest this update: Tue 08 Apr 2025 19:12:50 +0000 Manifest next update: Tue 15 Apr 2025 19:12:50 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: oG/HqQroNl6O1T2R23+YlOZysI03ElxvLInpKJTuNdQ=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=) 3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 19:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2 Validity Not Before: Apr 8 19:12:50 2025 GMT Not After : Apr 15 19:12:50 2025 GMT Subject: CN=67f57532-e7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:04:f8:2e:a6:de:f7:f3:7e:d4:6f:8c:c8: 49:cf:97:e2:9b:4d:ea:38:86:e1:ad:42:40:fe:09: 8e:91:cf:ed:ab:08:dc:de:93:b9:ef:3f:44:49:07: 12:96:e4:b2:f4:a0:01:b4:a5:d7:4a:7e:89:30:e2: 83:65:40:9b:3d:8f:9b:83:ef:46:b6:dd:95:19:fc: 12:b6:e7:c1:b7:3d:20:4b:26:66:98:c2:d1:4b:8e: 41:90:58:ab:7f:4d:15:67:ed:db:dc:58:fa:75:5c: 29:6d:35:50:74:8b:f3:d6:77:c6:3d:b7:ac:15:03: 53:bc:0b:a2:0e:b3:7a:63:12:f3:ff:d9:2a:34:ad: 0e:1c:72:2d:f0:1f:8a:9e:fa:b7:3a:d6:25:a7:2f: cb:d7:bd:8f:87:2b:07:0b:04:29:89:d8:84:ab:a1: 87:f2:99:a6:cf:30:1c:ee:d1:0f:4e:ad:f7:09:c8: d5:e6:2a:d7:2f:6e:ee:af:25:03:99:21:7b:48:c1: 78:f9:de:e5:9a:f6:bb:23:b6:08:ba:bd:62:a2:41: 26:17:6f:ce:42:75:7d:27:ab:5f:b7:1e:0a:91:1b: d3:7a:90:46:d5:7b:71:42:c4:a2:b4:94:f9:cf:e0: 76:1e:25:5f:fb:59:8e:62:45:06:48:ac:09:75:d3: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:47:97:32:74:08:94:80:9C:C5:86:9A:0A:4E:A6:37:19:B5:59:4F X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:6c:8c:48:f9:80:6d:0e:ca:34:90:43:96:01:7c:bd:a3:c4: 48:2c:91:e5:94:bc:41:f0:4b:a0:1d:8c:d5:2b:1f:82:81:a0: 9e:78:e8:0d:68:44:cb:7d:30:ff:47:f6:a4:8c:c1:cb:54:12: 77:cb:e7:95:67:fe:00:c0:4f:ee:73:c0:23:1e:4b:cd:77:5f: c7:38:f0:d8:56:bf:58:8b:19:8a:cc:03:56:95:bc:36:bc:d5: 3c:05:fd:d1:5e:5b:e6:98:66:eb:fe:3f:ea:83:73:f6:44:41: 33:1e:21:6a:97:b0:8d:9e:f5:af:52:07:e0:f6:7f:a4:6f:3b: 23:d0:78:34:32:ac:05:5c:03:d1:a4:a0:66:b1:e1:1e:3b:6f: 25:e9:d8:a9:23:ca:4d:a6:c1:c1:d9:81:f4:02:90:d8:52:8e: 2a:be:72:97:1e:81:46:eb:2a:ee:21:18:5f:1f:d3:a0:e0:4e: df:5f:de:ea:5f:da:d6:fe:0f:18:f7:a4:10:08:e3:24:f9:6b: 1c:cd:4e:6c:0f:a7:4c:60:5a:8d:58:58:1a:9f:12:33:d9:b9: 79:ef:86:66:15:8b:a1:4b:97:8d:9f:e6:a8:01:98:8a:e5:82: ab:d5:8b:db:3c:da:16:93:18:6c:c5:a6:95:48:9c:8e:8e:d0: 4d:35:27:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjUwNDA4MTkxMjUwWhcNMjUwNDE1MTkxMjUwWjAYMRYwFAYD VQQDEw02N2Y1NzUzMi1lN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq0E+C6m3vfzftRvjMhJz5fim03qOIbhrUJA/gmOkc/tqwjc3pO57z9ESQcS luSy9KABtKXXSn6JMOKDZUCbPY+bg+9Gtt2VGfwStufBtz0gSyZmmMLRS45BkFir f00VZ+3b3Fj6dVwpbTVQdIvz1nfGPbesFQNTvAuiDrN6YxLz/9kqNK0OHHIt8B+K nvq3OtYlpy/L172PhysHCwQpidiEq6GH8pmmzzAc7tEPTq33CcjV5irXL27uryUD mSF7SMF4+d7lmva7I7YIur1iokEmF2/OQnV9J6tftx4KkRvTepBG1XtxQsSitJT5 z+B2HiVf+1mOYkUGSKwJddMpDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5HlzJ0 CJSAnMWGmgpOpjcZtVlPMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtbIxI+YBtDso0kEOWAXy9o8RILJHllLxB8EugHYzVKx+CgaCeeOgN aETLfTD/R/akjMHLVBJ3y+eVZ/4AwE/uc8AjHkvNd1/HOPDYVr9YixmKzANWlbw2 vNU8Bf3RXlvmmGbr/j/qg3P2REEzHiFql7CNnvWvUgfg9n+kbzsj0Hg0MqwFXAPR pKBmseEeO28l6dipI8pNpsHB2YH0ApDYUo4qvnKXHoFG6yruIRhfH9Og4E7fX97q X9rW/g8Y96QQCOMk+WsczU5sD6dMYFqNWFganxIz2bl574ZmFYuhS5eNn+aoAZiK 5YKr1YvbPNoWkxhsxaaVSJyOjtBNNSfE -----END CERTIFICATE-----Generated at Fri Apr 11 13:52:37 2025 by rpki-client