$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: 1Yb3Lt1kmGstunMtC1cp/aDHtV4qWLCoKacdxAYdboo= Subject key identifier: B5:2D:23:1D:EF:AE:13:4A:13:1C:3A:71:81:D8:D8:30:31:98:B3:32 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 088C Signing time: Fri 04 Apr 2025 20:44:38 +0000 Manifest this update: Fri 04 Apr 2025 20:44:38 +0000 Manifest next update: Fri 11 Apr 2025 20:44:38 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: Oo4pKDkG9LmsPcJSVVGoAzKF9sEz+HDJRFwsRyPwq/Q=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D Validity Not Before: Apr 4 20:44:38 2025 GMT Not After : Apr 11 20:44:38 2025 GMT Subject: CN=67f044b6-2ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:fb:5e:79:4e:23:41:8d:60:fc:9c:3a:5f: 68:be:25:c5:b2:ea:00:e8:d8:89:8e:ea:91:38:2e: 2b:44:89:fb:9f:f9:72:f4:e2:44:2b:24:aa:54:b5: f9:db:40:64:f6:d1:b1:53:0d:55:18:c8:6c:2d:bf: 5a:0c:13:2a:25:7f:c9:a8:20:56:98:f9:7c:4b:1d: 72:48:a4:13:bc:11:49:77:aa:e9:9a:97:f3:32:e0: a9:42:8b:db:6e:fd:bb:5d:04:3a:ba:cc:55:a1:d3: ae:ee:1c:81:7e:9b:7b:36:b4:eb:f4:a1:98:6c:0b: 08:c9:04:27:4f:0c:4c:fd:89:e4:c6:6d:1f:50:af: 02:cc:54:b7:c6:3e:7a:3c:d7:bf:9e:f4:a5:47:be: a2:9a:50:6f:34:50:cf:e9:6f:fe:8a:29:fb:f9:1c: 30:25:1d:b1:5d:6e:de:91:3c:e7:d2:8b:73:9e:e8: a6:7c:70:a7:73:c6:18:99:c0:99:b0:59:d0:f5:19: 2d:8c:47:dc:63:34:2b:a9:50:cc:2b:a1:57:9a:54: cd:be:6f:c3:ea:fd:56:6b:9e:ff:97:c4:30:75:fc: bd:d2:61:5d:28:35:95:20:0f:b1:81:3e:a7:9e:05: 84:26:c7:81:a4:bd:91:7c:8d:39:33:63:3f:90:a1: d9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2D:23:1D:EF:AE:13:4A:13:1C:3A:71:81:D8:D8:30:31:98:B3:32 X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:51:f3:5c:d7:2b:fb:78:44:c4:7f:da:49:ec:4b:a0:2d:7a: 92:01:be:04:5d:e6:0b:6d:03:9d:36:8c:ac:85:8a:3c:03:09: f6:57:a5:f2:7b:90:ec:44:84:60:47:44:7e:47:5f:5e:83:fc: 6d:40:eb:75:48:10:45:df:40:fa:a8:e3:54:64:47:82:89:b2: 01:ef:13:37:f7:00:de:45:71:ce:0e:b1:95:88:6a:fb:f1:b1: 1b:e5:79:37:e3:13:90:c9:a6:78:25:85:44:47:3e:28:e1:4e: 65:60:51:3e:40:b7:c7:39:66:77:35:10:dc:8c:f3:e1:5e:ae: c4:b8:9b:8c:ab:61:1a:56:6f:a2:3d:89:b0:fb:bf:36:c0:29: 76:73:67:7b:d0:7d:5c:8c:97:33:c7:98:1c:57:cc:ba:d8:f6: ce:a0:c9:c6:1e:ca:08:b4:5e:80:cf:ce:39:2c:99:f0:e8:d4: 4a:4a:a8:07:65:d3:f6:54:d9:9d:00:b2:e0:05:5b:23:c6:91: fb:46:fd:06:91:ab:fc:8a:c7:2d:c6:e3:be:06:ce:34:95:bb: ba:fa:dd:95:53:9d:51:58:19:1a:b6:dd:60:8a:69:6b:88:cb: a7:18:6d:95:a2:aa:f5:37:b0:6a:f8:b4:91:47:87:4f:73:0c: 16:70:1c:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjUwNDA0MjA0NDM4WhcNMjUwNDExMjA0NDM4WjAYMRYwFAYD VQQDEw02N2YwNDRiNi0yY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF77XnlOI0GNYPycOl9oviXFsuoA6NiJjuqROC4rRIn7n/ly9OJEKySqVLX5 20Bk9tGxUw1VGMhsLb9aDBMqJX/JqCBWmPl8Sx1ySKQTvBFJd6rpmpfzMuCpQovb bv27XQQ6usxVodOu7hyBfpt7NrTr9KGYbAsIyQQnTwxM/Ynkxm0fUK8CzFS3xj56 PNe/nvSlR76imlBvNFDP6W/+iin7+RwwJR2xXW7ekTzn0otznuimfHCnc8YYmcCZ sFnQ9RktjEfcYzQrqVDMK6FXmlTNvm/D6v1Wa57/l8Qwdfy90mFdKDWVIA+xgT6n ngWEJseBpL2RfI05M2M/kKHZpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUtIx3v rhNKExw6cYHY2DAxmLMyMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxUfNc1yv7eETEf9pJ7EugLXqSAb4EXeYLbQOdNoyshYo8Awn2V6Xy e5DsRIRgR0R+R19eg/xtQOt1SBBF30D6qONUZEeCibIB7xM39wDeRXHODrGViGr7 8bEb5Xk34xOQyaZ4JYVERz4o4U5lYFE+QLfHOWZ3NRDcjPPhXq7EuJuMq2EaVm+i PYmw+782wCl2c2d70H1cjJczx5gcV8y62PbOoMnGHsoItF6Az845LJnw6NRKSqgH ZdP2VNmdALLgBVsjxpH7Rv0Gkav8isctxuO+Bs40lbu6+t2VU51RWBkatt1gimlr iMunGG2Voqr1N7Bq+LSRR4dPcwwWcByf -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:45 2025 by rpki-client