$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: 89AwHQz6sXw200TG3o0G9By0Li0+G7slwOjsKYR3sj0= Subject key identifier: 4C:3B:E6:39:AE:43:67:45:F0:63:A8:DA:C8:60:A6:2D:B1:49:2F:EB Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 021F Signing time: Sat 29 Mar 2025 02:12:56 +0000 Manifest this update: Sat 29 Mar 2025 02:12:56 +0000 Manifest next update: Sat 05 Apr 2025 02:12:55 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: ajvHhgUQXB2edt4l3L1OMeKAK2wbYyFvzXCeoCnJEt0=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: pHBuxlD5xQVDJjXkIBgfM6YV4nu0ZIEhZDtze/Saq+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E Validity Not Before: Mar 29 02:12:56 2025 GMT Not After : Apr 5 02:12:55 2025 GMT Subject: CN=67e75728-cb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:71:27:14:8e:18:c6:20:d5:bb:4f:e4:6a: 43:ed:7d:09:e4:62:c2:fe:d3:6f:d5:65:5d:c9:9e: 36:c7:0d:84:95:4c:bb:df:d3:13:10:c1:d9:69:f3: 45:a3:46:5d:32:f5:3f:9a:1d:a7:a7:f8:ee:c3:61: ef:44:44:90:3a:ec:72:44:c9:1d:eb:25:46:53:8a: 9d:d6:30:bb:1f:96:97:78:30:d8:09:06:f0:ca:01: 98:c0:8e:79:4e:90:c8:7e:a4:48:db:70:03:87:7d: 4b:f0:77:12:90:9b:7c:6f:27:cf:57:31:25:76:15: 25:ea:a3:0d:ea:dc:f3:92:c1:80:8c:18:7d:a6:78: 63:a9:b3:fc:ec:4e:9e:a0:a4:20:10:88:a6:97:11: 71:9f:6b:08:93:9c:4b:75:6a:45:84:ec:52:fc:cc: c8:e4:c9:01:e6:fd:30:99:5d:f1:d0:51:6c:3d:e1: 65:61:26:b4:60:da:0b:bc:7b:56:44:f8:76:98:ba: 4b:05:55:f4:64:dd:b5:8b:04:ba:76:97:56:0a:a7: df:03:6c:87:75:d6:8e:97:b6:5c:3b:d0:95:ab:6b: 58:59:9c:1d:48:7c:83:a3:cc:a7:7d:06:65:62:c2: 94:b2:32:3e:c7:f0:d5:7c:33:cb:14:84:ad:63:8c: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3B:E6:39:AE:43:67:45:F0:63:A8:DA:C8:60:A6:2D:B1:49:2F:EB X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:78:e8:19:07:07:6f:34:d4:62:27:bb:fa:04:e8:ed:65:ce: a4:2e:56:19:28:99:93:19:fc:f6:03:b6:f3:42:d5:73:68:c2: 3e:46:da:04:0c:97:f0:bc:fd:49:03:53:46:be:f7:de:01:bd: 6e:67:e6:14:7f:e8:2d:4f:0f:ba:1c:64:d9:49:4f:72:4b:fb: 4d:b6:67:51:b9:b9:6e:86:36:57:4c:72:98:81:71:98:eb:44: 7d:01:99:48:83:8a:78:2a:7c:70:37:f2:12:87:a1:68:2b:d5: f3:8e:e5:78:66:70:34:87:fe:76:f0:65:50:f9:59:70:80:a7: bf:a2:7b:85:72:a4:b1:ea:17:17:63:c2:37:dc:87:51:7b:07: 36:e5:7b:3b:9f:73:3d:87:c3:dd:7e:08:ee:05:8f:8e:6f:67: c0:51:90:0d:9b:e2:27:2d:1f:be:ef:6e:7b:97:3e:8f:f0:32: 61:30:86:a5:af:5b:77:c0:64:e4:b2:88:bf:8d:fa:92:93:d6: 58:9f:cc:d6:0e:53:06:07:00:69:72:27:5c:15:40:79:c8:a2: e8:62:50:bd:a6:c5:a3:0d:92:72:7c:70:36:e9:ab:fd:1f:f3: 8b:2c:bc:2a:00:c6:5c:0c:8b:7c:f5:d7:d4:13:d9:ec:f6:57: f8:47:35:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUwMzI5MDIxMjU2WhcNMjUwNDA1MDIxMjU1WjAYMRYwFAYD VQQDEw02N2U3NTcyOC1jYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ilxJxSOGMYg1btP5GpD7X0J5GLC/tNv1WVdyZ42xw2ElUy739MTEMHZafNF o0ZdMvU/mh2np/juw2HvRESQOuxyRMkd6yVGU4qd1jC7H5aXeDDYCQbwygGYwI55 TpDIfqRI23ADh31L8HcSkJt8byfPVzEldhUl6qMN6tzzksGAjBh9pnhjqbP87E6e oKQgEIimlxFxn2sIk5xLdWpFhOxS/MzI5MkB5v0wmV3x0FFsPeFlYSa0YNoLvHtW RPh2mLpLBVX0ZN21iwS6dpdWCqffA2yHddaOl7ZcO9CVq2tYWZwdSHyDo8ynfQZl YsKUsjI+x/DVfDPLFIStY4z3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEw75jmu Q2dF8GOo2shgpi2xSS/rMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAneOgZBwdvNNRiJ7v6BOjtZc6kLlYZKJmTGfz2A7bzQtVzaMI+RtoE DJfwvP1JA1NGvvfeAb1uZ+YUf+gtTw+6HGTZSU9yS/tNtmdRubluhjZXTHKYgXGY 60R9AZlIg4p4KnxwN/ISh6FoK9XzjuV4ZnA0h/528GVQ+VlwgKe/onuFcqSx6hcX Y8I33IdRewc25Xs7n3M9h8PdfgjuBY+Ob2fAUZANm+InLR++7257lz6P8DJhMIal r1t3wGTksoi/jfqSk9ZYn8zWDlMGBwBpcidcFUB5yKLoYlC9psWjDZJyfHA26av9 H/OLLLwqAMZcDIt89dfUE9ns9lf4RzWT -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:29 2025 by rpki-client