$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: Bxvn0H+/Bdq2XHWAJQYiBes8lA0KIaa+bZT2g+qf3NY= Subject key identifier: 04:50:BF:50:69:43:7D:2B:1F:86:84:24:CF:6E:D3:A0:24:78:06:88 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 012E Signing time: Mon 21 Apr 2025 03:28:38 +0000 Manifest this update: Mon 21 Apr 2025 03:28:37 +0000 Manifest next update: Mon 28 Apr 2025 03:28:37 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: LlhzYIe1phUEC2l3tF+Tkl7H8l4C4ZOYx6+7nuJQwGo=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Apr 21 03:28:37 2025 GMT Not After : Apr 28 03:28:37 2025 GMT Subject: CN=6805bb65-89fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:47:e2:60:81:64:45:e1:49:6e:da:26:91: c3:bd:27:66:d0:95:1c:d8:9f:c6:93:53:e0:e8:7c: de:65:60:e6:e9:ce:ce:75:86:cc:fa:df:4e:e0:6d: 93:35:bd:7a:a4:c6:c1:14:c9:2f:fd:d1:9f:db:b1: 3d:62:c5:36:ac:3a:22:26:83:25:d5:c6:31:79:83: 23:e8:4f:de:83:11:68:24:44:77:c5:31:3e:6f:da: 68:1b:91:83:2b:d5:44:61:db:87:ac:59:81:68:5e: d1:53:47:32:ce:f4:55:10:06:99:c1:63:70:f8:43: 77:01:47:60:dd:68:16:80:7b:e0:20:2a:39:38:70: a2:00:80:49:74:36:50:97:63:bc:b7:7d:2b:e6:b9: 35:23:f4:04:41:51:d0:a6:70:d6:37:1b:e1:48:a4: e8:6f:52:97:be:55:9e:13:a1:ad:15:99:af:36:ec: 04:26:15:26:d9:98:ea:46:a5:1d:a3:b0:59:c4:fc: 39:66:7f:f9:17:e1:89:4f:40:74:6a:ab:d1:38:a4: f1:1e:d2:de:eb:72:15:bd:e6:d4:c0:52:c1:3a:b9: 45:54:7d:52:8f:1e:10:ae:60:32:0e:1a:cb:63:57: d3:29:96:2d:ba:4a:71:d2:69:7f:9e:6f:03:1d:c6: 81:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:50:BF:50:69:43:7D:2B:1F:86:84:24:CF:6E:D3:A0:24:78:06:88 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:07:7d:6d:de:61:02:de:b8:4e:5b:7b:b3:d9:b7:75:ea:94: e3:0e:18:2b:71:6e:b3:0f:0c:e2:12:0b:45:28:09:4a:24:e2: d9:7b:29:48:59:96:11:c1:00:75:6b:92:ee:38:50:10:61:47: 91:12:49:67:2f:3e:89:33:18:fb:cc:17:b0:96:34:78:04:fe: 50:d7:02:33:a6:49:f6:2b:67:2b:c9:8a:d4:44:0b:ba:e8:e9: a6:69:ae:06:94:90:26:83:f8:96:05:0e:98:22:b7:27:77:af: b9:c6:c7:0f:ae:38:6f:65:99:d4:96:20:94:76:7b:de:f0:c7: b5:81:21:6f:1f:47:22:80:14:bb:6c:37:c6:d7:02:92:b3:f9: fc:ca:e2:0c:d2:2f:57:e0:f5:77:96:02:21:35:fc:d6:50:c4: b7:61:c6:5c:ff:67:29:72:94:fc:10:2f:3d:c4:79:3b:d3:6b: 49:89:d5:a4:71:8e:f0:7e:79:cb:6c:de:b4:ce:f0:b3:f5:75: 64:0a:a3:e6:b7:4d:0c:ef:7b:6f:91:8b:67:da:25:0f:9e:99: f6:a1:a0:2a:99:58:d3:10:35:43:47:93:3c:c5:15:6a:cd:4d: 23:87:75:43:6a:9c:35:a6:2b:30:d3:70:a5:82:57:6b:56:99: a8:5f:10:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjUwNDIxMDMyODM3WhcNMjUwNDI4MDMyODM3WjAYMRYwFAYD VQQDEw02ODA1YmI2NS04OWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSNH4mCBZEXhSW7aJpHDvSdm0JUc2J/Gk1Pg6HzeZWDm6c7OdYbM+t9O4G2T Nb16pMbBFMkv/dGf27E9YsU2rDoiJoMl1cYxeYMj6E/egxFoJER3xTE+b9poG5GD K9VEYduHrFmBaF7RU0cyzvRVEAaZwWNw+EN3AUdg3WgWgHvgICo5OHCiAIBJdDZQ l2O8t30r5rk1I/QEQVHQpnDWNxvhSKTob1KXvlWeE6GtFZmvNuwEJhUm2ZjqRqUd o7BZxPw5Zn/5F+GJT0B0aqvROKTxHtLe63IVvebUwFLBOrlFVH1Sjx4QrmAyDhrL Y1fTKZYtukpx0ml/nm8DHcaBOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARQv1Bp Q30rH4aEJM9u06AkeAaIMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPB31t3mEC3rhOW3uz2bd16pTjDhgrcW6zDwziEgtFKAlKJOLZeylI WZYRwQB1a5LuOFAQYUeREklnLz6JMxj7zBewljR4BP5Q1wIzpkn2K2cryYrURAu6 6Ommaa4GlJAmg/iWBQ6YIrcnd6+5xscPrjhvZZnUliCUdnve8Me1gSFvH0cigBS7 bDfG1wKSs/n8yuIM0i9X4PV3lgIhNfzWUMS3YcZc/2cpcpT8EC89xHk702tJidWk cY7wfnnLbN60zvCz9XVkCqPmt00M73tvkYtn2iUPnpn2oaAqmVjTEDVDR5M8xRVq zU0jh3VDapw1pisw03ClgldrVpmoXxC5 -----END CERTIFICATE-----Generated at Tue Apr 22 12:29:11 2025 by rpki-client