$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft File: i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json) Hash identifier: 7HAYpAmHFqb3YlEftUSFrizqRNJYpAp0e8XfPFktF3g= Subject key identifier: 05:CA:89:6D:1F:EA:63:8C:81:06:D6:B4:A1:EA:0E:8E:B2:A0:33:58 Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft Manifest number: 019B Signing time: Tue 15 Apr 2025 02:27:21 +0000 Manifest this update: Tue 15 Apr 2025 02:27:21 +0000 Manifest next update: Tue 22 Apr 2025 02:27:21 +0000 Files and hashes: 1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: DFpxYBW+K4MPo3pNBungpulyHnApwZmioTlEPFuWOMc=) 2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: g7Iu0qsIgHA2DsVqzJPZwAHsWDw0BvGfzGeWjQmEdZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1A8, serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Validity Not Before: Apr 15 02:27:21 2025 GMT Not After : Apr 22 02:27:21 2025 GMT Subject: CN=67fdc409-ce8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:10:a4:4c:e3:b2:26:da:5b:21:71:56:f6: fd:83:23:d6:54:62:19:3e:c3:99:97:af:67:09:eb: 24:a7:57:7a:09:a4:36:14:9a:80:c9:84:50:89:a1: 25:06:af:11:cb:28:df:02:d5:cd:6c:b9:79:14:76: 71:c1:a3:c6:6e:40:d0:e2:f5:29:54:4a:4d:f9:bb: 9d:fd:b9:73:b0:8f:d5:f5:de:8d:42:4a:74:30:43: 39:4c:9c:5a:7a:1e:ad:50:1f:67:4a:74:8c:1e:3b: c8:bf:d2:26:7c:26:de:15:7c:52:b9:bd:59:bc:1e: 8e:97:1f:b5:13:18:95:16:8e:1f:c2:76:0f:68:4b: 86:51:80:5f:f1:8a:6f:0c:8f:d7:77:53:f6:3d:81: 6f:0f:9a:09:4e:08:5c:27:85:38:77:fb:c0:7c:26: c3:5f:5a:cf:70:7b:4f:8f:d9:c8:8a:63:c1:9f:76: cb:4f:27:0e:37:b3:29:d1:77:12:67:d1:6a:ec:18: 26:92:6c:1b:66:b4:73:b4:0c:59:37:f7:7b:04:13: 8e:96:b6:24:a9:a0:be:6c:ae:36:e7:44:86:5c:64: 63:7c:80:f0:37:59:67:75:3b:de:8d:e4:8e:f0:46: e6:fe:f9:4a:11:ba:4c:e7:26:47:6b:de:71:43:ca: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CA:89:6D:1F:EA:63:8C:81:06:D6:B4:A1:EA:0E:8E:B2:A0:33:58 X509v3 Authority Key Identifier: keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:fb:fb:c0:25:d8:7a:bc:d6:68:46:31:fb:f7:40:8b:85:4e: 72:a6:6d:2f:7e:d8:8b:09:21:7d:1d:49:f2:94:a6:c3:b6:94: af:57:de:60:d3:f5:ac:13:e7:52:0c:cf:68:99:90:fb:f1:41: 08:a8:6d:23:dc:cd:fb:74:42:57:74:63:22:77:93:1a:b9:24: 4e:f9:42:b3:c7:0d:f6:b3:eb:ea:d4:ba:d0:70:8a:cd:3f:34: 9a:96:a7:1a:b5:26:e8:2d:d7:4f:cd:48:77:bd:73:66:bf:a3: 3c:b2:b6:83:00:87:75:65:2e:e2:39:3d:b2:39:4a:26:32:49: 9d:a8:b8:3e:10:66:2a:c0:db:92:fe:8a:f6:df:a4:f8:8a:8a: 82:0d:39:a9:a7:8b:f7:1e:59:0f:88:54:ec:86:14:f4:5b:1b: 56:fb:25:17:3f:93:be:17:be:26:78:1a:61:d9:fd:cd:9a:84: 1e:f7:1d:4a:cc:6e:5a:93:fa:05:7d:76:d2:5d:b7:e5:a4:a3: be:80:1c:f7:67:ff:51:8f:ec:4b:80:b0:96:4e:c1:da:3d:79: 46:e1:00:84:3a:4a:62:20:4d:5f:89:b9:a3:22:09:ad:14:b5: 73:47:50:98:2d:99:cf:ca:8d:ac:3e:69:e7:12:c4:53:31:ff: 1b:36:3e:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxQTgxMTAvBgNVBAUTKDhCRUNDMzYzODA3MEE2Qjc5RjZEQ0UyMkEwRTY1QkIy MUUwRDc3MjkwHhcNMjUwNDE1MDIyNzIxWhcNMjUwNDIyMDIyNzIxWjAYMRYwFAYD VQQDEw02N2ZkYzQwOS1jZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQ0QpEzjsibaWyFxVvb9gyPWVGIZPsOZl69nCeskp1d6CaQ2FJqAyYRQiaEl Bq8RyyjfAtXNbLl5FHZxwaPGbkDQ4vUpVEpN+bud/blzsI/V9d6NQkp0MEM5TJxa eh6tUB9nSnSMHjvIv9ImfCbeFXxSub1ZvB6Olx+1ExiVFo4fwnYPaEuGUYBf8Ypv DI/Xd1P2PYFvD5oJTghcJ4U4d/vAfCbDX1rPcHtPj9nIimPBn3bLTycON7Mp0XcS Z9Fq7BgmkmwbZrRztAxZN/d7BBOOlrYkqaC+bK4250SGXGRjfIDwN1lndTvejeSO 8Ebm/vlKEbpM5yZHa95xQ8qkqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXKiW0f 6mOMgQbWtKHqDo6yoDNYMB8GA1UdIwQYMBaAFIvsw2OAcKa3n23OIqDmW7IeDXcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFBOC9BNDBBNzI0QUIx MzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3ByZWZiYzRpb09aYnNoNE5k eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktekRZNEJ3cHJlZmJjNGlvT1pic2g0TmR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFBOC9BNDBBNzI0QUIxMzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3By ZWZiYzRpb09aYnNoNE5keWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu+/vAJdh6vNZoRjH790CLhU5ypm0vftiLCSF9HUnylKbDtpSvV95g 0/WsE+dSDM9omZD78UEIqG0j3M37dEJXdGMid5MauSRO+UKzxw32s+vq1LrQcIrN PzSalqcatSboLddPzUh3vXNmv6M8sraDAId1ZS7iOT2yOUomMkmdqLg+EGYqwNuS /or236T4ioqCDTmpp4v3HlkPiFTshhT0WxtW+yUXP5O+F74meBph2f3NmoQe9x1K zG5ak/oFfXbSXbflpKO+gBz3Z/9Rj+xLgLCWTsHaPXlG4QCEOkpiIE1fibmjIgmt FLVzR1CYLZnPyo2sPmnnEsRTMf8bNj5k -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:09 2025 by rpki-client