$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: 0D6xYdoUk9ZcxxlOsh9UGrgFa19FAjjFI502PFgxCMc= Subject key identifier: 96:C3:49:DA:22:B8:AF:80:58:8B:54:D3:0C:17:F2:DB:C1:44:7C:58 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 013D Signing time: Sat 05 Apr 2025 03:47:07 +0000 Manifest this update: Sat 05 Apr 2025 03:47:07 +0000 Manifest next update: Sat 12 Apr 2025 03:47:07 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: x3UuTLqOHu9MlWcw+BJgMad1eaey6ZOq3sujM7kUgEw=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456 Validity Not Before: Apr 5 03:47:07 2025 GMT Not After : Apr 12 03:47:07 2025 GMT Subject: CN=67f0a7bb-e61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:c2:99:2e:12:17:0d:5a:39:52:f9:7d:63: 58:70:59:21:83:03:a0:51:c3:62:4c:35:4e:b6:4d: e6:38:11:64:28:5d:f8:57:00:f1:8f:11:b1:3a:ef: 75:07:20:21:f9:8a:8c:ad:43:d2:08:43:b5:e5:f9: 53:9e:78:52:d8:64:67:96:7d:32:c3:75:0b:d8:20: 31:62:19:52:88:8d:82:89:33:ab:57:90:58:33:2a: 2f:be:20:fd:14:8b:56:32:5e:e1:23:6b:45:bf:8e: 22:e4:76:67:6b:df:79:bb:3b:da:e0:bd:be:27:8d: 57:5d:52:f4:bd:ef:f4:55:ac:3f:b9:6a:aa:78:3f: 6f:41:7a:36:12:16:1f:53:2c:6b:87:d8:a8:37:12: 05:d5:a0:9c:f4:21:97:6d:4a:db:be:20:8d:95:4b: 04:76:91:d6:66:63:74:e6:d5:ac:d7:02:59:e9:05: 84:52:aa:1b:a5:81:14:b2:6d:d7:1a:88:64:5e:b5: 33:14:fa:f9:7a:e9:c3:dc:80:00:02:a8:38:be:a5: 4b:6a:ca:95:b7:42:00:e5:cb:72:d7:37:63:df:df: 47:2d:be:8b:77:51:e9:ac:82:22:de:ce:24:7c:d3: 7a:c5:15:a4:84:86:71:aa:e2:8e:39:e6:92:b9:ce: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C3:49:DA:22:B8:AF:80:58:8B:54:D3:0C:17:F2:DB:C1:44:7C:58 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b3:03:36:0e:4b:19:b1:1a:f9:6e:ea:f7:01:b0:4f:06:70: 22:4a:b5:7e:f3:62:a5:c4:b5:fc:b8:e9:71:aa:6d:98:be:13: f5:07:0f:4c:40:03:25:64:08:a2:ac:34:4e:c2:d3:3e:f3:40: 60:71:3d:77:4e:bb:1f:a4:f7:8c:c0:94:50:48:82:7e:d3:26: 4e:20:00:4e:1f:ca:93:0b:cb:4a:69:c9:c5:ca:d9:9f:bd:ba: 3f:2e:4b:d9:19:8e:e0:17:b1:6b:7f:14:a1:2b:d8:dd:ea:95: 64:e9:2b:b3:d0:fe:e0:8c:b7:e9:f4:81:b1:53:59:21:e3:ea: 3d:5b:06:a3:7e:df:f2:14:b1:70:3e:f8:d9:4a:05:1f:39:d8: a9:93:17:52:97:7e:1e:bc:03:b3:12:cd:5a:a6:46:48:f4:76: f5:40:7e:84:9a:66:fd:71:4e:ae:54:90:36:27:da:fb:15:c6: 33:0b:3d:a5:d3:ed:2e:f7:49:80:63:58:1f:47:2d:9e:ef:22: a5:d5:ff:6a:7b:22:0c:93:b7:ac:90:eb:20:7a:36:c1:3b:03: 53:bd:4a:25:fa:98:be:36:b2:d0:fd:ac:2e:16:ee:d4:26:dd: df:69:e9:2d:c6:f4:d6:08:9b:3d:e8:f8:3c:b4:dc:93:52:04: d5:fc:ff:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwNDA1MDM0NzA3WhcNMjUwNDEyMDM0NzA3WjAYMRYwFAYD VQQDEw02N2YwYTdiYi1lNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00rCmS4SFw1aOVL5fWNYcFkhgwOgUcNiTDVOtk3mOBFkKF34VwDxjxGxOu91 ByAh+YqMrUPSCEO15flTnnhS2GRnln0yw3UL2CAxYhlSiI2CiTOrV5BYMyovviD9 FItWMl7hI2tFv44i5HZna995uzva4L2+J41XXVL0ve/0Vaw/uWqqeD9vQXo2EhYf Uyxrh9ioNxIF1aCc9CGXbUrbviCNlUsEdpHWZmN05tWs1wJZ6QWEUqobpYEUsm3X GohkXrUzFPr5eunD3IAAAqg4vqVLasqVt0IA5cty1zdj399HLb6Ld1HprIIi3s4k fNN6xRWkhIZxquKOOeaSuc4v0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbDSdoi uK+AWItU0wwX8tvBRHxYMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWswM2DksZsRr5bur3AbBPBnAiSrV+82KlxLX8uOlxqm2YvhP1Bw9M QAMlZAiirDROwtM+80BgcT13TrsfpPeMwJRQSIJ+0yZOIABOH8qTC8tKacnFytmf vbo/LkvZGY7gF7FrfxShK9jd6pVk6Suz0P7gjLfp9IGxU1kh4+o9Wwajft/yFLFw PvjZSgUfOdipkxdSl34evAOzEs1apkZI9Hb1QH6Emmb9cU6uVJA2J9r7FcYzCz2l 0+0u90mAY1gfRy2e7yKl1f9qeyIMk7eskOsgejbBOwNTvUol+pi+NrLQ/awuFu7U Jt3faektxvTWCJs96Pg8tNyTUgTV/P9a -----END CERTIFICATE-----Generated at Sat Apr 5 19:34:59 2025 by rpki-client