$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: tRiI5grtLnCkIuczpyOGqC1+FBwkz1z9/kheIfPYliM= Subject key identifier: 9E:B1:7C:74:44:B1:5B:C2:3F:AD:A6:BD:2B:E4:7D:18:36:87:D9:9E Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 07ED Signing time: Fri 28 Mar 2025 21:11:42 +0000 Manifest this update: Fri 28 Mar 2025 21:11:41 +0000 Manifest next update: Fri 04 Apr 2025 21:11:41 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: SncxzHg8NLOXhKSoS947Q1NZOioK3RqkftAFOlBzF0o=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: OOAGuEy3dNxhof0DuDCrqOBB7Z16rn3wikl56pkPDKs=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: iklcKY1p6cUV63DgFPNd0VTuCZO3jzabdmCYH2W3rsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 21:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68 Validity Not Before: Mar 28 21:11:41 2025 GMT Not After : Apr 4 21:11:41 2025 GMT Subject: CN=67e7108e-e5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:81:cf:2d:ef:b5:62:35:69:37:c1:c5:de: de:8c:1c:bf:d1:28:8b:d8:17:52:81:60:99:0b:19: 0b:de:50:83:3b:8b:89:f0:2d:cc:3e:56:d8:5a:53: a6:b2:ea:32:7f:1a:04:6c:6e:72:c6:e2:5b:c0:76: c6:a3:e9:d3:94:e0:b3:01:88:81:63:00:f9:3a:8b: ee:27:a5:04:e2:ca:fc:6a:5c:c2:d8:26:bc:53:2c: 55:c9:11:ed:4c:be:ac:e0:8a:aa:1a:15:32:0b:f1: 87:6f:80:5f:f4:f6:54:45:f6:2c:76:6f:82:56:a9: 76:d3:ad:cd:b2:88:cc:03:63:bd:3c:f3:8f:58:cf: 96:45:f9:7a:2f:a7:f6:43:ee:66:df:9f:0b:1d:e8: 8f:78:21:71:cb:60:d2:38:cf:21:4c:23:69:ef:64: b0:0b:9f:10:a1:12:61:6d:27:f5:6b:8e:16:6e:85: 61:9a:8e:03:94:bb:7f:32:00:97:59:fd:55:be:a2: 9e:28:ef:d8:b8:a7:25:67:22:64:14:dd:29:ab:38: 6d:ef:13:14:4c:b9:99:d7:b6:58:f5:8f:10:ae:5a: a5:45:46:f0:31:07:0d:d0:90:27:6c:89:57:14:d5: c4:5b:01:3b:e2:e9:52:2c:8f:e9:6a:65:6b:ca:7b: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:7C:74:44:B1:5B:C2:3F:AD:A6:BD:2B:E4:7D:18:36:87:D9:9E X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:41:35:13:66:7b:3b:a8:7e:19:2c:56:76:69:ce:e8:18:31: de:5c:61:6c:9a:66:ef:cb:20:78:1c:f7:54:46:6e:41:87:70: 32:11:53:e8:72:e8:46:81:8d:2e:e9:5b:e7:b0:57:42:dd:de: f8:95:a4:9c:ef:3b:34:80:d0:97:32:1c:0f:96:66:3f:8f:a4: 46:ff:4b:54:9b:04:3d:7b:6b:56:5d:67:5d:3e:0e:9a:b8:25: c8:3a:57:c9:39:9c:06:6d:cf:0c:66:87:e4:ed:e3:a9:fb:ea: 83:9b:15:96:a2:64:7a:7f:d1:36:47:f5:f2:61:63:bf:4d:1a: 70:97:1a:81:68:cc:a2:08:89:0c:15:61:3b:f1:f2:62:eb:57: 9a:5d:52:69:08:7d:ed:da:7c:65:d3:dd:90:a4:13:b3:f4:54: d7:12:a1:cd:03:96:2d:e9:6d:9b:6a:7a:21:3f:7e:d1:37:25: c4:df:41:93:6f:ca:28:b2:c0:09:48:44:40:03:5e:c4:2b:55: 81:80:14:c2:ac:c8:08:d4:ee:fd:80:9f:44:f5:00:55:5f:f0: e9:58:7e:e6:f5:2e:79:08:80:2d:ca:ea:05:9e:f2:8b:8f:1f: da:b7:43:a3:9a:80:a9:14:a5:b2:d1:a7:ad:09:44:c0:fa:7f: 02:42:f2:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUwMzI4MjExMTQxWhcNMjUwNDA0MjExMTQxWjAYMRYwFAYD VQQDEw02N2U3MTA4ZS1lNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9WBzy3vtWI1aTfBxd7ejBy/0SiL2BdSgWCZCxkL3lCDO4uJ8C3MPlbYWlOm suoyfxoEbG5yxuJbwHbGo+nTlOCzAYiBYwD5OovuJ6UE4sr8alzC2Ca8UyxVyRHt TL6s4IqqGhUyC/GHb4Bf9PZURfYsdm+CVql2063NsojMA2O9PPOPWM+WRfl6L6f2 Q+5m358LHeiPeCFxy2DSOM8hTCNp72SwC58QoRJhbSf1a44WboVhmo4DlLt/MgCX Wf1VvqKeKO/YuKclZyJkFN0pqzht7xMUTLmZ17ZY9Y8QrlqlRUbwMQcN0JAnbIlX FNXEWwE74ulSLI/pamVrynu2JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6xfHRE sVvCP62mvSvkfRg2h9meMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4QTUTZns7qH4ZLFZ2ac7oGDHeXGFsmmbvyyB4HPdURm5Bh3AyEVPo cuhGgY0u6VvnsFdC3d74laSc7zs0gNCXMhwPlmY/j6RG/0tUmwQ9e2tWXWddPg6a uCXIOlfJOZwGbc8MZofk7eOp++qDmxWWomR6f9E2R/XyYWO/TRpwlxqBaMyiCIkM FWE78fJi61eaXVJpCH3t2nxl092QpBOz9FTXEqHNA5Yt6W2banohP37RNyXE30GT b8oossAJSERAA17EK1WBgBTCrMgI1O79gJ9E9QBVX/DpWH7m9S55CIAtyuoFnvKL jx/at0OjmoCpFKWy0aetCUTA+n8CQvJ4 -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:49 2025 by rpki-client