$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: XrX7W3S23kxpao427iob9JPZAFm+wKefivabSQ7Yv/0= Subject key identifier: F5:BE:B9:E6:55:71:B7:26:FD:11:E7:0A:4B:9B:EE:B6:26:D9:B7:7D Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 0C Signing time: Sat 29 Mar 2025 07:27:35 +0000 Manifest this update: Sat 29 Mar 2025 07:27:34 +0000 Manifest next update: Sat 05 Apr 2025 07:27:34 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: F+4kzR1N8LMiVXe2GxkNpTeMc4Je+vABah8Q7obJdow=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488 Validity Not Before: Mar 29 07:27:34 2025 GMT Not After : Apr 5 07:27:34 2025 GMT Subject: CN=67e7a0e6-b15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:14:c5:60:64:3e:0f:c0:ce:a3:85:25:33:74: 40:a7:e5:f8:2e:05:23:57:16:9d:d6:77:48:90:03: 11:c9:80:df:63:e4:93:0f:42:97:9b:8c:0f:c6:07: 6d:c6:7d:ca:42:f9:5c:51:c7:4a:9b:a5:25:e1:d5: 01:3d:cd:9e:01:53:d2:20:be:01:87:b3:37:f8:6d: 1d:74:48:0e:ac:d9:42:f4:da:64:88:0e:74:5e:c7: c4:21:a5:6a:51:b7:2f:1a:9b:ee:1e:7a:60:8d:54: 00:08:0a:09:f9:51:10:80:98:1d:07:d4:31:d2:9d: e7:46:88:01:b5:cc:e8:b0:ba:90:78:7f:95:85:a1: 91:a4:9a:84:5e:5e:1a:b9:2d:c1:3d:79:cf:44:67: 45:49:7e:66:25:10:c1:43:72:5b:2c:d0:61:32:7a: 19:21:ca:b8:13:7e:1a:39:17:09:52:a9:5f:c6:27: 15:e9:85:59:69:b2:bf:3f:a6:0b:8c:e3:0f:14:8e: 1d:d3:f7:67:8a:78:39:4b:af:30:5b:7c:a1:d4:ba: 1c:1e:f2:eb:58:e5:e3:bf:62:a3:68:76:00:82:f1: 45:6c:68:03:62:70:5e:92:62:72:18:73:3f:62:2d: ee:d1:1e:31:1f:ea:50:44:c8:f4:70:0c:ed:e3:cf: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BE:B9:E6:55:71:B7:26:FD:11:E7:0A:4B:9B:EE:B6:26:D9:B7:7D X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:63:54:7f:0d:41:8c:b0:df:b9:a1:29:69:a2:40:8c:f2:10: ef:a6:78:28:20:78:e3:79:fb:bd:a8:29:7b:24:05:b1:c8:15: 01:e2:81:7e:a7:68:88:5d:9c:7d:86:af:86:f8:2d:ce:6f:93: 4e:0c:26:be:55:c8:c6:1d:0f:42:d4:57:4a:df:3b:8c:3f:2f: e4:33:24:82:d5:b2:eb:56:56:81:5d:16:94:08:a9:30:51:bf: b0:67:ef:08:d0:b8:f3:ec:63:8c:79:fd:bd:eb:31:8d:7d:69: 46:c6:a0:be:1d:a1:0d:7e:f0:d8:95:41:ab:66:61:7a:c4:75: 76:3d:1e:c8:e7:a5:ff:00:43:a9:02:ac:a5:9a:e4:75:ee:95: 76:15:44:61:24:ce:c7:b4:19:49:05:30:c9:74:7c:67:50:d3: e8:4d:31:83:78:c4:9e:41:63:f3:3b:e3:2d:e7:99:f4:5f:56: d3:0a:f5:9c:f9:03:73:de:ef:b0:12:74:88:ac:9b:f0:0d:51: 86:14:b1:1d:65:7f:d6:7e:8b:d1:15:d1:35:41:b3:c2:e7:84: 82:6c:c1:f7:17:64:03:d5:f6:5a:91:bd:0e:aa:67:55:85:30: 3f:f4:8d:2f:8e:56:ef:6a:b1:28:1c:a2:e6:b8:3d:bf:54:09: 35:6e:a5:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTAzMjkwNzI3MzRaFw0yNTA0MDUwNzI3MzRaMBgxFjAUBgNV BAMTDTY3ZTdhMGU2LWIxNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjFMVgZD4PwM6jhSUzdECn5fguBSNXFp3Wd0iQAxHJgN9j5JMPQpebjA/GB23G fcpC+VxRx0qbpSXh1QE9zZ4BU9IgvgGHszf4bR10SA6s2UL02mSIDnRex8QhpWpR ty8am+4eemCNVAAICgn5URCAmB0H1DHSnedGiAG1zOiwupB4f5WFoZGkmoReXhq5 LcE9ec9EZ0VJfmYlEMFDclss0GEyehkhyrgTfho5FwlSqV/GJxXphVlpsr8/pguM 4w8Ujh3T92eKeDlLrzBbfKHUuhwe8utY5eO/YqNodgCC8UVsaANicF6SYnIYcz9i Le7RHjEf6lBEyPRwDO3jz1nFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9b655lVx tyb9EecKS5vutibZt30wHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJjVH8NQYyw37mhKWmiQIzyEO+meCggeON5+72oKXskBbHIFQHigX6n aIhdnH2Gr4b4Lc5vk04MJr5VyMYdD0LUV0rfO4w/L+QzJILVsutWVoFdFpQIqTBR v7Bn7wjQuPPsY4x5/b3rMY19aUbGoL4doQ1+8NiVQatmYXrEdXY9Hsjnpf8AQ6kC rKWa5HXulXYVRGEkzse0GUkFMMl0fGdQ0+hNMYN4xJ5BY/M74y3nmfRfVtMK9Zz5 A3Pe77ASdIism/ANUYYUsR1lf9Z+i9EV0TVBs8LnhIJswfcXZAPV9lqRvQ6qZ1WF MD/0jS+OVu9qsSgcoua4Pb9UCTVupRE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:32:14 2025 by rpki-client