$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: 5s82rYSpwbm6KUkURvv0k74dqx9/3bTT2re8coAq3BM= Subject key identifier: A3:E7:E4:45:62:E9:C2:51:2E:0D:53:07:5B:14:E6:15:67:EE:29:1E Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0158 Signing time: Sat 29 Mar 2025 03:36:04 +0000 Manifest this update: Sat 29 Mar 2025 03:36:03 +0000 Manifest next update: Sat 05 Apr 2025 03:36:03 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: Fr5TO63C55XQ9L67xKeaWAdUvfw6XNw9tbmRy65dQmc=) 2: 6E081C54F59111EF82C2730FC4F9AE02.roa (hash: G2H6xbX1kpZvrgrqRBmiDtFSsouAkAzYF+3SnqgS0HY=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: eyu3cJvMk8x/lB+NzC776MbDc6l8Tfm9D0VXNEV1yIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB Validity Not Before: Mar 29 03:36:03 2025 GMT Not After : Apr 5 03:36:03 2025 GMT Subject: CN=67e76aa3-af05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a1:d1:06:eb:b9:b3:fa:0e:f3:3b:70:b6:5c: f8:63:6a:b8:e8:81:5d:8d:8f:85:63:21:73:d6:4b: a1:56:d3:52:47:7b:21:e2:a6:73:45:20:26:35:4f: 5d:b9:d7:73:1c:1d:d9:2e:e2:53:15:07:59:84:a4: f2:56:3e:f1:e7:6b:62:7d:a2:01:28:3d:3c:dd:f1: d2:e4:39:9c:ce:16:34:26:b6:26:20:e3:09:96:d8: 49:82:ec:19:3b:53:82:a3:b8:98:ec:55:e0:6e:a6: 12:b9:30:ad:ce:8f:c6:0e:b5:9d:e1:ed:21:b3:2f: 96:f0:3d:ae:8b:ba:6f:b0:94:d4:9f:a7:49:70:77: dc:f5:60:bf:4a:c8:56:fe:a9:0e:16:cb:ef:4f:d2: ac:9d:23:fd:ab:22:6d:ee:02:a8:3a:4d:9a:d4:e1: 9d:85:43:4e:55:a1:79:76:f4:23:ed:dd:c1:17:87: b8:a8:4b:15:60:96:c0:da:73:b6:32:e4:4f:38:be: a3:17:37:28:14:a8:b0:36:74:33:62:c2:e9:9c:d3: 42:f7:43:fb:50:ac:a6:d7:92:c3:33:00:e1:50:32: bd:b7:23:b7:e9:6a:a7:cf:84:d1:f1:ef:fe:be:a0: 8a:54:b9:ad:af:6b:44:39:9f:fa:9f:89:c3:6d:54: 55:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E7:E4:45:62:E9:C2:51:2E:0D:53:07:5B:14:E6:15:67:EE:29:1E X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:00:31:4c:e1:2a:e0:8d:e5:1e:47:41:26:67:8f:5a:26:06: f2:4d:5a:9e:71:88:74:3a:0e:34:2a:98:1b:d4:e3:3e:6d:30: 02:b2:ea:27:7b:0e:37:01:20:ba:b9:c7:43:89:04:4c:6a:62: 6a:cc:7c:2d:cc:a0:3b:16:b1:d3:8d:70:48:30:42:25:4d:b2: 7a:42:0f:df:11:b6:d3:6c:16:c4:55:4e:ab:16:75:ca:a2:af: 20:9b:49:98:25:1b:b1:c4:f8:01:7e:94:90:63:4f:a0:f3:eb: 30:06:2b:b0:fa:49:da:1c:4b:fa:d6:a9:f7:b1:e7:26:01:00: cb:12:bf:c9:33:2e:20:4e:58:1e:3f:8f:96:7c:be:59:41:88: 86:6d:5f:a7:52:a2:08:da:2a:15:c7:6e:ea:5a:db:ef:c3:91: 83:ba:0f:24:8b:2b:d6:a8:82:16:3c:0b:54:de:1d:dc:ee:ac: c5:0e:81:b3:ed:09:db:ab:ee:42:e8:c6:f5:48:92:23:77:a0: b1:ec:86:7f:d0:f6:0d:b5:d1:56:91:fb:34:bd:9d:81:33:68: 3d:80:37:4e:66:3a:28:d5:f7:02:70:ac:b8:a2:45:10:10:ec: fc:c9:e6:e2:60:80:5d:aa:65:12:a6:fb:32:62:c6:64:a6:e5: fd:28:a4:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUwMzI5MDMzNjAzWhcNMjUwNDA1MDMzNjAzWjAYMRYwFAYD VQQDEw02N2U3NmFhMy1hZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqHRBuu5s/oO8ztwtlz4Y2q46IFdjY+FYyFz1kuhVtNSR3sh4qZzRSAmNU9d uddzHB3ZLuJTFQdZhKTyVj7x52tifaIBKD083fHS5DmczhY0JrYmIOMJlthJguwZ O1OCo7iY7FXgbqYSuTCtzo/GDrWd4e0hsy+W8D2ui7pvsJTUn6dJcHfc9WC/SshW /qkOFsvvT9KsnSP9qyJt7gKoOk2a1OGdhUNOVaF5dvQj7d3BF4e4qEsVYJbA2nO2 MuRPOL6jFzcoFKiwNnQzYsLpnNNC90P7UKym15LDMwDhUDK9tyO36Wqnz4TR8e/+ vqCKVLmtr2tEOZ/6n4nDbVRV4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPn5EVi 6cJRLg1TB1sU5hVn7ikeMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ADFM4SrgjeUeR0EmZ49aJgbyTVqecYh0Og40Kpgb1OM+bTACsuon ew43ASC6ucdDiQRMamJqzHwtzKA7FrHTjXBIMEIlTbJ6Qg/fEbbTbBbEVU6rFnXK oq8gm0mYJRuxxPgBfpSQY0+g8+swBiuw+knaHEv61qn3secmAQDLEr/JMy4gTlge P4+WfL5ZQYiGbV+nUqII2ioVx27qWtvvw5GDug8kiyvWqIIWPAtU3h3c7qzFDoGz 7Qnbq+5C6Mb1SJIjd6Cx7IZ/0PYNtdFWkfs0vZ2BM2g9gDdOZjoo1fcCcKy4okUQ EOz8yebiYIBdqmUSpvsyYsZkpuX9KKQY -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:13 2025 by rpki-client