$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft File: z64jGpiXN_YdrZV8wk0hNYWBjtw.mft (raw, json) Hash identifier: EGE/GKJ94CWqvpmsHNoEIWFbkRdwdDbsqWqjQACRFqw= Subject key identifier: A0:BB:86:29:D8:82:1A:C3:28:F0:8D:7E:63:5C:C3:E7:31:72:EB:8E Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC Certificate issuer: /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft Manifest number: 0138 Signing time: Sat 29 Mar 2025 03:51:54 +0000 Manifest this update: Sat 29 Mar 2025 03:51:54 +0000 Manifest next update: Sat 05 Apr 2025 03:51:54 +0000 Files and hashes: 1: z64jGpiXN_YdrZV8wk0hNYWBjtw.crl (hash: 1MkgoK5+76ukuiIE2NkyCCGm0rTGZPfB6nxfftiSWMM=) 2: 578C92D62F6611EE9CAFAA58C4F9AE02.roa (hash: Km7Ntr3HPW+9p2/xgcR3/NDs3gM06IRtzM1XksYLFiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F Validity Not Before: Mar 29 03:51:54 2025 GMT Not After : Apr 5 03:51:54 2025 GMT Subject: CN=67e76e5a-ffe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:a4:33:21:b4:6e:20:8b:7b:13:b2:70:c0: 11:31:6a:44:67:b7:ed:49:4f:4b:fd:0e:a8:73:b5: 40:5d:b7:0c:aa:35:ae:d1:94:78:7c:83:aa:69:35: 62:d7:50:09:d7:80:3e:ae:5d:a1:3d:55:a3:62:dd: 21:b3:02:ec:2f:d2:27:35:2c:e5:01:6f:eb:81:2a: be:3b:76:bb:95:f9:4f:8f:24:ee:b9:00:c8:bd:bf: d1:92:a8:61:a9:9b:25:b6:eb:55:a0:67:7b:f7:0d: 28:69:6c:77:8a:30:18:96:54:bc:9c:91:de:5d:49: 15:8d:7d:e6:b6:b5:05:41:6c:43:8a:f4:bb:d3:51: a9:fa:84:7d:3f:da:30:f6:29:87:2b:8f:c8:15:58: be:ea:fd:94:1a:e5:4b:3b:5a:27:cf:29:ea:e4:35: 91:a5:8c:b0:07:ea:99:c5:0f:99:d7:7d:d0:59:67: 78:a6:4d:41:af:34:55:c7:ea:8e:50:8c:03:a2:b9: aa:de:dc:d4:c8:71:18:6b:11:c6:8a:48:31:0c:ff: 1f:47:c8:85:49:70:12:2d:40:66:56:f5:ea:09:83: 16:aa:8e:fc:1c:a2:d7:d1:9d:f5:59:ed:41:ab:37: 02:80:e8:65:d4:b9:8c:fa:d3:29:24:bc:b8:37:1d: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BB:86:29:D8:82:1A:C3:28:F0:8D:7E:63:5C:C3:E7:31:72:EB:8E X509v3 Authority Key Identifier: keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2e:6f:4e:98:77:e9:64:70:51:36:b2:15:a1:4a:04:90:2a: a7:7a:1e:19:15:93:b3:be:eb:28:b3:4e:16:92:98:c4:32:10: bf:bd:d1:f1:ca:c5:f8:28:80:6b:ef:be:11:e9:b6:95:7d:01: ee:bc:12:7b:23:47:5d:d3:d2:ba:d4:2b:5b:d3:21:de:30:78: 5c:a9:97:d2:86:6e:07:16:0d:d7:ed:e4:49:0b:e5:4d:89:22: 27:89:e9:44:a2:c1:0d:7c:c3:b9:80:bf:30:ad:ba:b2:f0:89: 47:46:c3:63:f6:47:35:20:8b:07:93:68:21:7e:c2:74:e9:5a: 66:60:ff:f5:68:86:33:73:5a:c7:fe:b1:eb:06:9a:05:52:b1: 49:01:fd:df:8f:f3:4a:64:44:a6:43:26:ac:56:01:e4:0b:24: ac:e7:15:b6:4c:3e:c1:6e:dc:4e:43:93:69:df:c9:f9:b8:86: 68:33:80:b3:54:44:ec:a6:a8:cc:01:b2:7b:21:45:52:bc:b7: 87:eb:7a:ee:14:a7:5b:4f:7e:41:e1:c1:94:0f:64:d9:9f:da: e7:b6:52:8d:6c:43:c7:99:fe:e0:b9:cc:40:12:3c:e1:f5:dc: ad:5c:59:93:48:9d:a1:07:87:b5:27:bc:c6:88:a8:2d:b4:4b: 40:94:9c:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NUYxMTAvBgNVBAUTKENGQUUyMzFBOTg5NzM3RjYxREFEOTU3Q0MyNEQyMTM1 ODU4MThFREMwHhcNMjUwMzI5MDM1MTU0WhcNMjUwNDA1MDM1MTU0WjAYMRYwFAYD VQQDEw02N2U3NmU1YS1mZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTqkMyG0biCLexOycMARMWpEZ7ftSU9L/Q6oc7VAXbcMqjWu0ZR4fIOqaTVi 11AJ14A+rl2hPVWjYt0hswLsL9InNSzlAW/rgSq+O3a7lflPjyTuuQDIvb/Rkqhh qZsltutVoGd79w0oaWx3ijAYllS8nJHeXUkVjX3mtrUFQWxDivS701Gp+oR9P9ow 9imHK4/IFVi+6v2UGuVLO1onzynq5DWRpYywB+qZxQ+Z133QWWd4pk1BrzRVx+qO UIwDormq3tzUyHEYaxHGikgxDP8fR8iFSXASLUBmVvXqCYMWqo78HKLX0Z31We1B qzcCgOhl1LmM+tMpJLy4Nx18pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC7hinY ghrDKPCNfmNcw+cxcuuOMB8GA1UdIwQYMBaAFM+uIxqYlzf2Ha2VfMJNITWFgY7c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri80MEJCMTU3NDJG NjUxMUVFOTVGREVENTZDNEY5QUUwMi96NjRqR3BpWE5fWWRyWlY4d2swaE5ZV0Jq dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o2NGpHcGlYTl9ZZHJaVjh3azBoTllXQmp0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ1Ri80MEJCMTU3NDJGNjUxMUVFOTVGREVENTZDNEY5QUUwMi96NjRqR3BpWE5f WWRyWlY4d2swaE5ZV0JqdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhLm9OmHfpZHBRNrIVoUoEkCqneh4ZFZOzvusos04WkpjEMhC/vdHx ysX4KIBr774R6baVfQHuvBJ7I0dd09K61Ctb0yHeMHhcqZfShm4HFg3X7eRJC+VN iSInielEosENfMO5gL8wrbqy8IlHRsNj9kc1IIsHk2ghfsJ06VpmYP/1aIYzc1rH /rHrBpoFUrFJAf3fj/NKZESmQyasVgHkCySs5xW2TD7BbtxOQ5Np38n5uIZoM4Cz VETspqjMAbJ7IUVSvLeH63ruFKdbT35B4cGUD2TZn9rntlKNbEPHmf7gucxAEjzh 9dytXFmTSJ2hB4e1J7zGiKgttEtAlJxY -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:03 2025 by rpki-client