$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: AcI6vfHs9buwbQwRVND6SMeybufzYhjJp+ARkuhnEBY= Subject key identifier: AE:62:4C:99:A3:E8:80:73:65:FE:F7:8A:40:FF:14:46:3E:BB:1D:B7 Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 0159 Signing time: Mon 17 Feb 2025 04:50:52 +0000 Manifest this update: Mon 17 Feb 2025 04:50:51 +0000 Manifest next update: Mon 24 Feb 2025 04:50:51 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: SJCnWyoH1hgnAZTK8S6IS+gkEl0wZTElQfTt0HyGYxg=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: wIfWv8k11m2nJjvD9OZyvuvwJHOiHTaCFNkOK+76jZw=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 8Baf5eHeRnNrGmSSDb+55e+ExZ2m5tnzgHIxbW3wB58=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: /e5dKdsxY7i/S5RsJcqyRRAjOevxOXqA06J4ijaW9S8=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: 1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836 Validity Not Before: Feb 17 04:50:51 2025 GMT Not After : Feb 24 04:50:51 2025 GMT Subject: CN=67b2c02b-fbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:53:6a:9f:8c:86:ef:1f:95:e8:13:e6:bd: 40:20:eb:d5:de:36:43:f5:ef:09:1e:ba:00:a7:7a: 21:f9:88:f1:a8:5e:ba:49:db:81:28:cc:9c:19:e0: 36:71:a7:7c:63:b7:4c:fe:5a:cd:b7:cd:c5:8f:76: 92:ee:5e:ff:11:83:79:ee:51:dc:a6:7a:06:67:0f: 57:b0:c6:ef:be:a0:e4:ee:1b:a5:88:4a:90:8e:60: 20:7a:53:45:07:3b:1c:a2:c1:07:15:d2:c2:ca:62: cb:a6:f0:04:5d:db:3f:e9:83:84:4a:57:d6:16:a6: 9e:56:ab:03:d0:82:61:2a:ec:8f:f1:7a:1d:5f:d5: f2:a2:9a:11:7b:e2:4b:c0:25:2e:51:ab:23:0e:08: be:4d:79:48:b5:bf:29:d1:42:0b:c0:94:17:51:18: 86:85:ae:25:4b:30:30:60:41:d4:c8:8a:e0:01:77: 96:a6:5d:fd:75:12:14:e3:25:46:fd:61:ad:f5:e5: d1:0a:c3:c3:87:9a:06:e3:07:25:7a:7c:b0:26:24: f4:7e:2c:b3:18:dc:c2:75:b0:84:42:95:0c:b1:23: 34:95:26:5b:d3:3f:43:01:31:d2:82:d0:03:36:86: 83:1e:37:60:f2:0d:0e:02:6e:18:36:03:c3:81:d9: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:62:4C:99:A3:E8:80:73:65:FE:F7:8A:40:FF:14:46:3E:BB:1D:B7 X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ae:0c:20:0d:e3:45:f0:61:d2:2b:eb:73:5f:0b:63:fc:01: 88:c4:50:94:bf:86:67:58:b9:1d:e2:58:b0:b4:56:84:a5:e4: 64:14:bf:9b:19:fb:bd:de:f2:ad:79:ad:82:76:3b:7e:c4:27: a4:a1:b3:4c:9b:47:11:c1:d8:ab:b1:9b:da:d5:89:40:76:35: 5d:08:0c:45:df:14:d8:d8:64:d7:f5:95:47:f0:73:d6:b7:87: 21:0a:c7:7c:e8:4b:af:5a:36:a1:1a:b3:2b:04:af:8e:c3:85: 33:aa:70:0b:04:39:4b:58:72:d1:8f:a4:9d:8d:a6:55:6d:16: 83:bb:45:48:fd:a1:d3:b0:5f:d0:0f:59:e0:14:61:74:f1:3d: c6:66:68:c6:2c:37:92:51:d3:38:b7:b5:b6:50:96:fb:a1:6b: 0c:b4:77:d6:98:d5:5a:36:ba:0c:e1:60:dc:a3:a7:4d:2a:35: df:7c:a6:88:18:db:06:ca:ee:5d:a3:41:76:9b:4d:4c:12:13: 84:88:8b:38:99:b8:53:51:06:30:92:a8:d0:bb:52:c4:ae:fe: f2:3b:a0:7b:42:ef:c1:79:d0:57:32:35:8a:b2:34:81:ab:02: 5d:94:42:65:71:20:c8:04:c4:18:a2:b1:05:36:39:2c:b7:69: bd:42:2c:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUwMjE3MDQ1MDUxWhcNMjUwMjI0MDQ1MDUxWjAYMRYwFAYD VQQDEw02N2IyYzAyYi1mYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZVTap+Mhu8flegT5r1AIOvV3jZD9e8JHroAp3oh+YjxqF66SduBKMycGeA2 cad8Y7dM/lrNt83Fj3aS7l7/EYN57lHcpnoGZw9XsMbvvqDk7huliEqQjmAgelNF BzscosEHFdLCymLLpvAEXds/6YOESlfWFqaeVqsD0IJhKuyP8XodX9XyopoRe+JL wCUuUasjDgi+TXlItb8p0UILwJQXURiGha4lSzAwYEHUyIrgAXeWpl39dRIU4yVG /WGt9eXRCsPDh5oG4wclenywJiT0fiyzGNzCdbCEQpUMsSM0lSZb0z9DATHSgtAD NoaDHjdg8g0OAm4YNgPDgdlUOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5iTJmj 6IBzZf73ikD/FEY+ux23MB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXrgwgDeNF8GHSK+tzXwtj/AGIxFCUv4ZnWLkd4liwtFaEpeRkFL+b Gfu93vKtea2Cdjt+xCekobNMm0cRwdirsZva1YlAdjVdCAxF3xTY2GTX9ZVH8HPW t4chCsd86EuvWjahGrMrBK+Ow4UzqnALBDlLWHLRj6SdjaZVbRaDu0VI/aHTsF/Q D1ngFGF08T3GZmjGLDeSUdM4t7W2UJb7oWsMtHfWmNVaNroM4WDco6dNKjXffKaI GNsGyu5do0F2m01MEhOEiIs4mbhTUQYwkqjQu1LErv7yO6B7Qu/BedBXMjWKsjSB qwJdlEJlcSDIBMQYorEFNjkst2m9QixP -----END CERTIFICATE-----Generated at Mon Feb 17 07:55:07 2025 by rpki-client