$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json) Hash identifier: 2VyQIJvVm21wtkH/blWiDk9gzrQCqwWVn2I/RwUGfJ8= Subject key identifier: 3B:94:90:E0:89:5F:60:A0:E9:0C:04:B1:D3:3B:B1:74:C5:B7:E6:C0 Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft Manifest number: E9 Signing time: Thu 17 Apr 2025 04:16:59 +0000 Manifest this update: Thu 17 Apr 2025 04:16:59 +0000 Manifest next update: Thu 24 Apr 2025 04:16:58 +0000 Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: uKtJcFJd1WFFYx7pwCjlbU2T6Fa8EeCGvrZHlPDj1FE=) 2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: Apr 17 04:16:59 2025 GMT Not After : Apr 24 04:16:58 2025 GMT Subject: CN=680080bb-d260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:28:b9:00:7d:db:6f:6f:63:fa:da:67:2e:7f: 7b:9a:d1:7b:9a:f9:36:c4:31:12:8f:2b:2d:9f:66: 4f:9e:84:87:0e:a4:83:3c:f3:1c:2c:d5:9c:05:e4: 02:22:a6:23:68:4d:7f:95:ff:1a:a5:8b:e5:65:04: 6d:87:ff:98:47:78:5b:51:a2:be:25:ff:c8:78:e8: d2:98:08:0b:a8:c7:cf:a6:f9:b1:c7:fb:db:ff:a3: 80:4b:3e:c8:18:d6:6c:87:08:e0:f9:61:d0:4b:70: 05:ff:6a:4f:4e:42:53:05:22:ba:56:d2:1c:d7:26: 87:60:47:3f:03:e5:6a:f3:94:4c:24:31:c2:f8:b0: 3e:b2:56:36:50:0a:8e:10:a9:58:b7:a5:aa:c0:0f: 81:80:85:af:73:8f:44:99:a1:8f:f6:c3:23:60:ae: b1:35:a9:f1:49:30:39:11:75:04:0c:f4:8b:2c:27: 8d:d2:a7:f8:1c:ce:24:60:5a:df:8d:18:28:ea:9a: 23:27:b3:8c:24:22:09:bc:b6:6c:10:c4:ee:42:15: c1:cf:2d:ac:1c:96:26:ca:73:a4:4b:52:76:aa:b7: 00:01:a8:9f:2f:45:1e:1e:17:d3:ee:40:df:ed:2f: c6:91:a4:8a:d4:e8:d6:2b:15:b6:40:8e:58:8c:93: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:94:90:E0:89:5F:60:A0:E9:0C:04:B1:D3:3B:B1:74:C5:B7:E6:C0 X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:b2:33:57:6f:4a:1c:4c:94:7b:09:11:97:87:f6:9a:b7:a4: f7:34:b6:63:93:73:c2:fa:9e:bf:fa:fc:aa:7c:5c:83:08:50: 72:ed:b5:c2:40:2a:ca:fd:3f:e7:d8:fc:38:90:a0:da:58:c3: 66:ca:93:fb:9e:80:67:98:95:c8:5d:6d:9a:52:9b:62:69:44: 4e:43:44:0e:47:04:f5:78:ea:e7:c3:65:5f:31:73:1e:49:fc: 42:06:25:34:36:07:58:16:27:ee:e9:11:c6:b0:86:d3:74:fb: ad:39:23:35:9e:3c:6c:6d:28:66:1f:8a:04:2a:ec:16:d8:78: 38:d8:70:23:28:eb:c1:9f:d9:72:61:f7:76:46:4c:e6:bb:9b: 51:fe:17:59:04:d0:6f:f2:8d:69:f2:c9:ac:88:f6:7d:84:c1: e3:84:c3:0e:13:4c:df:f3:1a:98:0b:f5:b9:d3:2c:6d:2a:eb: e0:82:2d:d4:47:de:83:6e:72:e3:bd:1e:5d:a9:3b:be:67:61: 42:0d:4c:2f:91:43:6c:6d:89:8b:df:ec:51:02:9e:c0:a5:62: f1:b2:37:17:e7:76:31:09:2c:e2:59:ab:8d:b9:53:46:3f:cd: 74:b1:64:e7:2b:09:52:a3:47:6c:af:42:d7:e6:61:db:a6:e9: 8a:26:f0:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC RUY4NzhDQjgwHhcNMjUwNDE3MDQxNjU5WhcNMjUwNDI0MDQxNjU4WjAYMRYwFAYD VQQDEw02ODAwODBiYi1kMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ii5AH3bb29j+tpnLn97mtF7mvk2xDESjystn2ZPnoSHDqSDPPMcLNWcBeQC IqYjaE1/lf8apYvlZQRth/+YR3hbUaK+Jf/IeOjSmAgLqMfPpvmxx/vb/6OASz7I GNZshwjg+WHQS3AF/2pPTkJTBSK6VtIc1yaHYEc/A+Vq85RMJDHC+LA+slY2UAqO EKlYt6WqwA+BgIWvc49EmaGP9sMjYK6xNanxSTA5EXUEDPSLLCeN0qf4HM4kYFrf jRgo6pojJ7OMJCIJvLZsEMTuQhXBzy2sHJYmynOkS1J2qrcAAaifL0UeHhfT7kDf 7S/GkaSK1OjWKxW2QI5YjJMBPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuUkOCJ X2Cg6QwEsdM7sXTFt+bAMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5 eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDwsjNXb0ocTJR7CRGXh/aat6T3NLZjk3PC+p6/+vyqfFyDCFBy7bXC QCrK/T/n2Pw4kKDaWMNmypP7noBnmJXIXW2aUptiaUROQ0QORwT1eOrnw2VfMXMe SfxCBiU0NgdYFifu6RHGsIbTdPutOSM1njxsbShmH4oEKuwW2Hg42HAjKOvBn9ly Yfd2Rkzmu5tR/hdZBNBv8o1p8smsiPZ9hMHjhMMOE0zf8xqYC/W50yxtKuvggi3U R96DbnLjvR5dqTu+Z2FCDUwvkUNsbYmL3+xRAp7ApWLxsjcX53YxCSziWauNuVNG P810sWTnKwlSo0dsr0LX5mHbpumKJvCm -----END CERTIFICATE-----Generated at Fri Apr 18 04:42:08 2025 by rpki-client