$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: XGpBtdk0psl7hJNUrj1RfUTPQkTFJDzDnLHWIeO023c= Subject key identifier: 98:92:02:0A:BF:03:61:95:D0:BA:D3:15:E5:1B:46:0F:E8:BD:A6:76 Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0BCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0BC6 Signing time: Fri 18 Apr 2025 18:56:01 +0000 Manifest this update: Fri 18 Apr 2025 18:56:00 +0000 Manifest next update: Fri 25 Apr 2025 18:56:00 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: T0lUGks58S3JpMo3tpbBbjJaGy2z/Ms+DSGOULWWc0w=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3022 (0xbce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Apr 18 18:56:00 2025 GMT Not After : Apr 25 18:56:00 2025 GMT Subject: CN=6802a040-6b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:52:a6:ea:1d:d9:aa:88:7c:e0:7a:26:2d: 43:a4:f9:66:00:9e:5b:8b:be:7d:68:38:5b:9a:af: 24:45:11:42:09:49:3d:f6:1e:b7:a7:95:a6:c5:5e: 30:c9:4a:af:f0:8a:50:dc:66:63:64:3e:4e:62:b1: 94:d3:0f:1f:e5:ae:a0:45:8c:fb:c6:16:15:92:f0: b8:e1:52:81:92:06:6c:55:d5:37:13:19:15:e8:33: e4:84:d5:fb:92:7b:46:53:f4:20:a3:93:c5:32:d1: 53:f4:b0:7a:69:64:d1:1a:80:2b:0d:98:6c:8e:36: 8f:ed:95:bd:eb:b4:c0:8b:f4:61:05:4c:53:4e:91: c0:db:96:97:cf:23:b2:34:19:26:85:7e:55:e0:9e: 49:d9:f9:17:07:77:ff:7a:a8:c2:99:86:7a:a7:a8: 4f:29:5f:35:17:5b:50:e1:da:1f:13:3a:9b:92:c5: fa:fc:4c:2f:b9:d3:a8:b3:52:a7:79:b0:55:ee:45: ef:e6:ec:15:18:1d:49:7c:c1:cd:2c:33:c3:55:37: 51:14:ee:14:ce:d7:4f:01:6d:fb:f7:51:ff:52:19: 6d:26:ed:8a:8e:43:c4:b4:5e:9f:a7:a7:41:52:f3: 08:c4:a9:62:91:88:2d:0b:91:58:64:fc:b4:ab:1f: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:92:02:0A:BF:03:61:95:D0:BA:D3:15:E5:1B:46:0F:E8:BD:A6:76 X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:be:cd:5f:86:5b:98:33:92:37:dd:71:bb:b5:63:81:c2:56: 86:77:8b:9f:3c:a5:2c:49:02:4e:18:a9:b4:cf:42:5f:c1:81: 39:99:0f:e4:e9:53:02:ca:ad:23:ce:ec:b6:01:1d:40:32:d6: 2e:ba:99:e8:8c:53:1f:2e:2b:46:57:76:93:da:95:f2:d4:af: 1d:a8:f2:47:9f:0c:ab:57:d4:cd:76:e5:b6:cd:34:e0:a1:a4: 92:6d:1b:36:57:6e:68:11:d0:e0:4a:d7:7e:57:15:65:17:93: ee:74:0f:25:c9:ff:e9:3d:9f:cb:b5:ca:e3:9e:20:74:ba:b7: 12:09:51:7c:8f:30:ca:c4:3b:03:59:54:2a:96:21:c5:5a:1a: a9:60:1f:8c:b1:c5:9b:b6:da:bd:53:66:45:24:b7:aa:25:b9: 32:74:e5:1a:e2:de:a0:7f:0c:68:18:42:6c:b1:b1:20:54:61: dc:18:64:83:04:23:b3:33:59:59:68:3e:8b:ca:f2:d4:8f:15: c8:59:8a:16:40:98:b8:ea:15:dd:3e:d3:8a:44:a8:f2:7b:4b: a1:14:9f:8e:8d:60:c4:20:38:6a:c2:31:07:b8:f7:91:96:92: 51:b0:71:6b:b0:0a:8f:08:86:0e:ef:42:7f:7d:fb:e8:16:86: eb:2a:83:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjUwNDE4MTg1NjAwWhcNMjUwNDI1MTg1NjAwWjAYMRYwFAYD VQQDEw02ODAyYTA0MC02YjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEFSpuod2aqIfOB6Ji1DpPlmAJ5bi759aDhbmq8kRRFCCUk99h63p5WmxV4w yUqv8IpQ3GZjZD5OYrGU0w8f5a6gRYz7xhYVkvC44VKBkgZsVdU3ExkV6DPkhNX7 kntGU/Qgo5PFMtFT9LB6aWTRGoArDZhsjjaP7ZW967TAi/RhBUxTTpHA25aXzyOy NBkmhX5V4J5J2fkXB3f/eqjCmYZ6p6hPKV81F1tQ4dofEzqbksX6/EwvudOos1Kn ebBV7kXv5uwVGB1JfMHNLDPDVTdRFO4UztdPAW3791H/UhltJu2KjkPEtF6fp6dB UvMIxKlikYgtC5FYZPy0qx9rBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiSAgq/ A2GV0LrTFeUbRg/ovaZ2MB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEvs1fhluYM5I33XG7tWOBwlaGd4ufPKUsSQJOGKm0z0JfwYE5mQ/k 6VMCyq0jzuy2AR1AMtYuupnojFMfLitGV3aT2pXy1K8dqPJHnwyrV9TNduW2zTTg oaSSbRs2V25oEdDgStd+VxVlF5PudA8lyf/pPZ/LtcrjniB0urcSCVF8jzDKxDsD WVQqliHFWhqpYB+MscWbttq9U2ZFJLeqJbkydOUa4t6gfwxoGEJssbEgVGHcGGSD BCOzM1lZaD6LyvLUjxXIWYoWQJi46hXdPtOKRKjye0uhFJ+OjWDEIDhqwjEHuPeR lpJRsHFrsAqPCIYO70J/ffvoFobrKoNO -----END CERTIFICATE-----Generated at Sat Apr 19 04:46:59 2025 by rpki-client