$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: z3FKyD8r8dqNx8USVPM7el2dbtcXWzRJfLe4g9NtuXA= Subject key identifier: AA:C3:63:9F:02:7A:D8:64:27:62:34:AF:07:2E:4F:4E:6A:D3:E3:05 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 061C Signing time: Mon 14 Apr 2025 22:29:45 +0000 Manifest this update: Mon 14 Apr 2025 22:29:44 +0000 Manifest next update: Mon 21 Apr 2025 22:29:44 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: pd+vsEgqef+NsCXd5mMXRfTf7SURLO7mOWLkLeEtefo=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 22:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Apr 14 22:29:44 2025 GMT Not After : Apr 21 22:29:44 2025 GMT Subject: CN=67fd8c59-185f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:cf:e6:c0:61:b0:38:5e:99:76:f7:a1:b4: e1:b7:ae:3f:ea:3e:ee:ea:98:c7:60:ba:2c:05:f4: 9f:c4:a3:52:d5:27:0a:9f:98:fb:e6:e1:f2:c4:21: 7e:3c:80:a5:40:4f:75:c8:07:50:58:c2:b7:23:13: 32:a9:37:2f:4a:2e:0e:f5:43:69:c4:34:80:4e:6d: cf:7d:50:81:2f:d6:be:dc:f0:07:a8:f8:5c:65:53: 57:c5:08:b5:08:19:ca:23:9a:ef:f5:f0:40:b2:e0: e3:84:e5:39:db:28:f9:49:00:da:9b:1f:ac:bf:a7: 98:83:cf:5c:43:93:6c:19:69:d3:57:97:e3:cb:d0: 21:43:6a:8b:bc:37:8d:36:2a:27:08:19:40:7a:7f: dd:86:cf:9e:cf:61:9a:78:1b:2b:73:04:fc:18:e9: c2:f1:5e:1f:7a:ee:0a:f9:53:27:43:ca:78:3f:37: a3:1f:1e:bc:b9:92:1a:cf:7a:8d:49:e3:56:7d:fa: 80:16:50:d7:67:6b:6f:e5:ae:dc:05:ac:9a:b5:ed: bc:12:f3:8e:de:2f:12:ef:29:b3:7c:c7:dc:a7:e1: 27:37:5c:b1:c7:2e:06:06:a6:30:1d:f8:30:90:f8: 78:cb:9f:87:d2:df:1a:3c:73:7d:49:c8:aa:7e:ba: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C3:63:9F:02:7A:D8:64:27:62:34:AF:07:2E:4F:4E:6A:D3:E3:05 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d6:ec:70:c9:1e:b5:05:5b:7f:31:e6:2b:fc:04:e9:eb:b0: eb:f0:54:c0:85:d1:33:31:07:d1:10:6f:74:ff:ef:77:a3:9b: 53:00:96:a0:c5:07:0c:3f:e6:d4:25:fb:54:1f:fb:e9:95:5b: 87:6a:b4:09:d8:b2:18:64:27:bf:70:b9:b5:df:cb:f2:6c:d2: b5:b0:25:36:9d:f3:50:cc:37:ac:44:d0:82:ff:4f:6d:a5:4d: 42:09:b4:c2:2d:4e:81:3f:99:8f:1b:15:d3:11:d6:b3:5e:fb: 1c:f9:ff:5e:ff:04:8f:67:c0:0f:ba:96:1d:e8:f8:2d:54:fb: f6:25:da:fb:98:ae:d9:bc:1f:a0:c8:f2:60:3a:89:f3:2a:9a: c0:a7:e7:7a:c0:03:4e:01:da:05:2f:ef:03:9e:40:e5:31:6e: 05:da:6d:64:26:55:5d:c7:17:0c:dc:4d:90:59:6f:82:4a:53: db:9b:2f:ed:24:99:a0:c8:6a:5f:01:80:2e:43:f3:c2:b3:70: 03:fa:98:03:68:c6:54:fb:45:3e:2d:30:8c:08:5d:3b:20:8c: 01:27:a9:48:ed:32:00:ed:7a:d3:ca:10:23:22:a0:97:17:70: 14:d7:ce:21:96:9f:64:80:4c:a2:dc:0c:96:e5:d9:1b:81:cd: 3b:4a:ac:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUwNDE0MjIyOTQ0WhcNMjUwNDIxMjIyOTQ0WjAYMRYwFAYD VQQDEw02N2ZkOGM1OS0xODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CTP5sBhsDhemXb3obTht64/6j7u6pjHYLosBfSfxKNS1ScKn5j75uHyxCF+ PIClQE91yAdQWMK3IxMyqTcvSi4O9UNpxDSATm3PfVCBL9a+3PAHqPhcZVNXxQi1 CBnKI5rv9fBAsuDjhOU52yj5SQDamx+sv6eYg89cQ5NsGWnTV5fjy9AhQ2qLvDeN NionCBlAen/dhs+ez2GaeBsrcwT8GOnC8V4feu4K+VMnQ8p4PzejHx68uZIaz3qN SeNWffqAFlDXZ2tv5a7cBayate28EvOO3i8S7ymzfMfcp+EnN1yxxy4GBqYwHfgw kPh4y5+H0t8aPHN9SciqfrprSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrDY58C ethkJ2I0rwcuT05q0+MFMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+1uxwyR61BVt/MeYr/ATp67Dr8FTAhdEzMQfREG90/+93o5tTAJag xQcMP+bUJftUH/vplVuHarQJ2LIYZCe/cLm138vybNK1sCU2nfNQzDesRNCC/09t pU1CCbTCLU6BP5mPGxXTEdazXvsc+f9e/wSPZ8APupYd6PgtVPv2Jdr7mK7ZvB+g yPJgOonzKprAp+d6wANOAdoFL+8DnkDlMW4F2m1kJlVdxxcM3E2QWW+CSlPbmy/t JJmgyGpfAYAuQ/PCs3AD+pgDaMZU+0U+LTCMCF07IIwBJ6lI7TIA7XrTyhAjIqCX F3AU184hlp9kgEyi3AyW5dkbgc07SqxJ -----END CERTIFICATE-----Generated at Wed Apr 16 22:23:57 2025 by rpki-client