$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json) Hash identifier: 3O6VsQfiV3USXF7VaB+lHC4VSXPBIYaTso/E4KtW+CY= Subject key identifier: 2F:F2:10:C6:E7:DB:5F:6F:C3:00:74:2E:E7:9B:9B:5C:67:9E:16:CC Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft Manifest number: 0745 Signing time: Wed 02 Apr 2025 21:53:46 +0000 Manifest this update: Wed 02 Apr 2025 21:53:46 +0000 Manifest next update: Wed 09 Apr 2025 21:53:46 +0000 Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: S87nTucN8puGA+6leYOTtYbTxnGL5ZPMin5xGkzfUSc=) 2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: e1Q5MYIIjz5LWcGb0fXsxIuQ9p6/453WvuoEPrSW9e4=) 3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: DbaBLma8zvPIwZ5Spppp0TVJfQzrx6U8bGBh6k5CtpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F Validity Not Before: Apr 2 21:53:46 2025 GMT Not After : Apr 9 21:53:46 2025 GMT Subject: CN=67edb1ea-2064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:82:d6:be:1e:72:be:ed:6a:20:e3:21:88: a4:f6:97:09:eb:1f:6c:b6:2a:0d:fd:e2:5f:7b:5b: c4:24:f4:15:e5:3d:c5:bb:b7:86:d5:95:3e:89:2e: cf:4a:4a:50:75:a4:06:00:49:45:33:f2:01:18:7d: 27:b7:e0:0e:da:d5:f1:4b:3e:9c:c3:32:e6:30:a9: ee:ac:3b:10:15:78:f7:76:1e:68:95:42:95:b3:03: 15:6c:7a:60:7f:1e:29:87:bc:26:92:d5:6a:20:33: 0e:c9:e7:28:46:27:5f:ed:af:8a:c4:50:54:bc:5e: 29:02:5a:c0:14:a6:4c:6d:c9:c2:eb:03:3f:e9:f0: 77:24:35:12:c9:23:f9:bf:86:67:1d:de:15:02:6f: 91:12:eb:9f:d5:30:ed:42:d6:3c:ba:51:c2:d0:7b: 47:bc:0e:ff:4e:ae:7d:a4:70:48:14:0d:6f:d7:85: e5:07:71:ae:ee:95:3d:03:61:d6:eb:91:eb:b8:0c: 62:a4:54:ed:f8:f6:e1:7f:29:ed:9c:07:aa:f0:0e: b5:53:0d:49:f4:68:e3:44:06:47:3c:6b:56:d2:cd: c3:72:a7:74:1c:02:88:91:88:13:85:4f:69:11:cd: 88:36:f2:d9:d7:6a:6a:d2:c8:64:38:29:22:c3:3e: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F2:10:C6:E7:DB:5F:6F:C3:00:74:2E:E7:9B:9B:5C:67:9E:16:CC X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:78:61:a1:c1:b0:65:c5:9b:1e:3b:17:10:a7:46:34:d8:07: ba:25:cb:ce:42:27:bd:00:9d:58:cd:7d:bd:4d:1b:c0:6f:5d: 04:74:b3:46:33:47:f6:13:73:53:95:9c:c3:e9:da:b7:73:6c: e2:12:1b:f5:4f:c2:9e:4b:55:29:a1:c1:28:ba:a7:b2:83:b5: cd:fb:52:48:91:e4:3e:0f:c8:42:07:30:be:c4:1c:93:2b:2b: a6:46:15:0d:74:d5:2b:b3:9b:7e:87:fc:40:d5:3e:f1:84:df: 51:8e:f1:c0:f1:c6:25:ca:29:f4:8a:7a:51:ef:80:01:ea:1e: 38:3d:a7:6a:b6:c9:00:a4:cd:4c:b1:12:7b:36:e0:d9:ba:1b: 79:4e:67:14:08:31:a5:3f:8d:d0:7a:04:5f:ac:bd:14:c2:06: 63:4d:1a:5b:c0:3e:98:9f:53:46:1a:83:b8:80:d2:0e:d8:9c: d4:d9:db:58:6d:ff:c2:7b:fe:2c:26:2e:42:26:1b:f9:1d:8b: cd:fb:09:51:85:b3:13:a3:08:93:b2:15:4a:16:3a:92:56:ed: 4f:31:d6:9a:69:44:50:d1:16:ab:e4:e5:c2:f0:c6:11:3d:7f: a4:eb:68:44:fb:ec:36:15:e0:bd:72:ad:4a:5c:08:fe:33:6e: a2:26:69:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjUwNDAyMjE1MzQ2WhcNMjUwNDA5MjE1MzQ2WjAYMRYwFAYD VQQDEw02N2VkYjFlYS0yMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xmC1r4ecr7taiDjIYik9pcJ6x9stioN/eJfe1vEJPQV5T3Fu7eG1ZU+iS7P SkpQdaQGAElFM/IBGH0nt+AO2tXxSz6cwzLmMKnurDsQFXj3dh5olUKVswMVbHpg fx4ph7wmktVqIDMOyecoRidf7a+KxFBUvF4pAlrAFKZMbcnC6wM/6fB3JDUSySP5 v4ZnHd4VAm+REuuf1TDtQtY8ulHC0HtHvA7/Tq59pHBIFA1v14XlB3Gu7pU9A2HW 65HruAxipFTt+PbhfyntnAeq8A61Uw1J9GjjRAZHPGtW0s3Dcqd0HAKIkYgThU9p Ec2INvLZ12pq0shkOCkiwz5ZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/yEMbn 219vwwB0Luebm1xnnhbMMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy b0Rra1lXalRKNHNtZnJydXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSeGGhwbBlxZseOxcQp0Y02Ae6JcvOQie9AJ1YzX29TRvAb10EdLNG M0f2E3NTlZzD6dq3c2ziEhv1T8KeS1UpocEouqeyg7XN+1JIkeQ+D8hCBzC+xByT KyumRhUNdNUrs5t+h/xA1T7xhN9RjvHA8cYlyin0inpR74AB6h44PadqtskApM1M sRJ7NuDZuht5TmcUCDGlP43QegRfrL0UwgZjTRpbwD6Yn1NGGoO4gNIO2JzU2dtY bf/Ce/4sJi5CJhv5HYvN+wlRhbMTowiTshVKFjqSVu1PMdaaaURQ0Rar5OXC8MYR PX+k62hE++w2FeC9cq1KXAj+M26iJmkv -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:27 2025 by rpki-client