$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft File: -ZQWlLaneyTFg_p4tSflS7bVv58.mft (raw, json) Hash identifier: VgTGIXVwPRkgg7kDF6NLLEv3fZbucjW9VsMUf2ANPqs= Subject key identifier: 68:00:4C:AF:21:C2:AD:12:82:A1:E0:BF:78:36:B0:1B:24:07:07:EC Authority key identifier: F9:94:16:94:B6:A7:7B:24:C5:83:FA:78:B5:27:E5:4B:B6:D5:BF:9F Certificate issuer: /CN=A913CDE5/serialNumber=F9941694B6A77B24C583FA78B527E54BB6D5BF9F Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft Manifest number: 014F Signing time: Mon 07 Apr 2025 03:07:29 +0000 Manifest this update: Mon 07 Apr 2025 03:07:28 +0000 Manifest next update: Mon 14 Apr 2025 03:07:28 +0000 Files and hashes: 1: -ZQWlLaneyTFg_p4tSflS7bVv58.crl (hash: Hd+kcwG40HFgDOzixhN70LoD5h+7HNkbbqlIhtAtKdA=) 2: 90322C4C332311EF9149E085C4F9AE02.roa (hash: +LqWEa5rSALqs0LMlx4uyv4FlCHQZms5sQeB8rQmgBU=) 3: F843F2B4127E11EE9694E22BC4F9AE02.roa (hash: tDpMWaRhtbkPVQv/LPa404WcTagcZ2nRyMyon9dfVYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.crl rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 03:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDE5 Validity Not Before: Apr 7 03:07:28 2025 GMT Not After : Apr 14 03:07:28 2025 GMT Subject: CN=67f34171-70c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:35:78:42:f5:33:3c:44:e9:e2:46:a9:a4: 67:cf:d7:c6:53:48:38:2d:b4:e5:f9:eb:5a:a9:5a: fa:9c:44:73:a5:92:1c:af:27:c2:a6:e8:59:13:6d: c1:b0:13:0c:db:74:c5:39:a5:eb:36:ec:6b:21:8b: 96:dd:68:4c:88:c1:1d:ce:74:15:c4:12:1d:a2:f6: 65:40:cd:dc:4a:60:a9:8f:da:f0:78:1b:65:82:1a: 81:23:9e:a3:63:dd:e3:da:81:78:a5:aa:68:fe:42: d3:26:6f:95:c2:f4:5f:1c:8e:f2:4a:69:85:bf:c4: f6:42:33:72:c7:db:6c:5d:41:90:f9:bd:05:bf:6d: 54:87:ca:c8:f2:5c:e0:eb:8e:73:87:ff:6e:7c:69: 9c:a3:f6:ea:ec:7f:c5:bc:57:3c:c6:60:97:72:e7: 20:73:56:3d:65:64:e6:b8:9a:ed:18:e6:0b:fc:e9: 4e:5b:9d:d5:a8:b4:74:85:50:34:0f:e2:47:44:7b: 9d:be:3f:a0:8f:12:f2:5f:3f:83:1f:68:a6:27:11: 1b:91:e7:2e:70:d6:d5:3c:d7:ed:8e:2f:1b:30:ea: d7:eb:38:f1:59:81:55:18:08:71:2b:c8:fb:19:76: df:ec:f8:32:77:38:3c:7a:68:da:09:33:ed:85:54: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:00:4C:AF:21:C2:AD:12:82:A1:E0:BF:78:36:B0:1B:24:07:07:EC X509v3 Authority Key Identifier: keyid:F9:94:16:94:B6:A7:7B:24:C5:83:FA:78:B5:27:E5:4B:B6:D5:BF:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:80:69:9c:3c:5f:68:6f:ec:89:53:fc:41:18:90:b3:bd:ad: 0c:8f:63:16:6c:8e:69:06:25:3f:06:eb:86:9f:fe:f0:19:9d: 87:e0:8d:a9:8c:cb:64:23:b7:bc:df:16:a5:82:d7:a0:5d:57: 55:92:22:49:dd:08:a2:1b:54:1a:b4:4c:70:12:83:b5:52:12: ad:03:2f:ba:1e:9e:d9:dc:95:a0:c1:ce:8c:13:a7:86:f3:5f: 48:bb:71:94:3a:6a:3c:89:68:3a:31:ed:b0:c4:05:26:ee:e4: 2f:25:20:6a:8e:c8:68:ff:c3:6f:fb:1d:21:9c:b5:03:79:27: 12:fe:e9:f4:23:f0:e8:a9:c7:a5:f7:cc:79:bb:53:ab:a0:69: b9:34:e7:e5:a6:6e:d5:97:30:54:19:e5:d6:97:46:b6:b2:eb: 69:be:67:69:e7:a9:57:5b:9f:66:11:af:2b:2d:2e:73:02:35: 9a:86:e0:33:c7:70:1e:d0:a6:e9:b9:db:12:88:1e:7b:ec:d3: 41:9c:00:da:55:79:5e:11:bb:df:5d:55:3f:fe:80:a1:1f:ab: 96:62:f4:ef:35:a9:30:17:fe:53:80:08:0e:7d:ff:e4:69:89: 96:d6:9b:a5:64:f9:e1:87:1b:92:e4:24:c8:76:54:b9:42:5b: d1:3e:ed:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NERTUxMTAvBgNVBAUTKEY5OTQxNjk0QjZBNzdCMjRDNTgzRkE3OEI1MjdFNTRC QjZENUJGOUYwHhcNMjUwNDA3MDMwNzI4WhcNMjUwNDE0MDMwNzI4WjAYMRYwFAYD VQQDEw02N2YzNDE3MS03MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bs1eEL1MzxE6eJGqaRnz9fGU0g4LbTl+etaqVr6nERzpZIcryfCpuhZE23B sBMM23TFOaXrNuxrIYuW3WhMiMEdznQVxBIdovZlQM3cSmCpj9rweBtlghqBI56j Y93j2oF4papo/kLTJm+VwvRfHI7ySmmFv8T2QjNyx9tsXUGQ+b0Fv21Uh8rI8lzg 645zh/9ufGmco/bq7H/FvFc8xmCXcucgc1Y9ZWTmuJrtGOYL/OlOW53VqLR0hVA0 D+JHRHudvj+gjxLyXz+DH2imJxEbkecucNbVPNftji8bMOrX6zjxWYFVGAhxK8j7 GXbf7Pgydzg8emjaCTPthVQtWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgATK8h wq0SgqHgv3g2sBskBwfsMB8GA1UdIwQYMBaAFPmUFpS2p3skxYP6eLUn5Uu21b+f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RFNS80OTkzQjdGQzEy N0IxMUVFQjI3RThDMkJDNEY5QUUwMi8tWlFXbExhbmV5VEZnX3A0dFNmbFM3YlZ2 NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aUVdsTGFuZXlURmdfcDR0U2ZsUzdiVnY1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0RFNS80OTkzQjdGQzEyN0IxMUVFQjI3RThDMkJDNEY5QUUwMi8tWlFXbExhbmV5 VEZnX3A0dFNmbFM3YlZ2NTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACgGmcPF9ob+yJU/xBGJCzva0Mj2MWbI5pBiU/BuuGn/7wGZ2H4I2p jMtkI7e83xalgtegXVdVkiJJ3QiiG1QatExwEoO1UhKtAy+6Hp7Z3JWgwc6ME6eG 819Iu3GUOmo8iWg6Me2wxAUm7uQvJSBqjsho/8Nv+x0hnLUDeScS/un0I/Doqcel 98x5u1OroGm5NOflpm7VlzBUGeXWl0a2sutpvmdp56lXW59mEa8rLS5zAjWahuAz x3Ae0KbpudsSiB577NNBnADaVXleEbvfXVU//oChH6uWYvTvNakwF/5TgAgOff/k aYmW1pulZPnhhxuS5CTIdlS5QlvRPu0G -----END CERTIFICATE-----Generated at Tue Apr 8 19:06:30 2025 by rpki-client