$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json) Hash identifier: /DF1WndN022cMg9pr0x/MHnTY4ttq+5ig0BIj+uegbI= Subject key identifier: 68:BB:23:2A:95:D9:33:93:B6:68:A7:0B:28:98:23:E5:9B:25:09:18 Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Certificate serial: 1841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft Manifest number: 182A Signing time: Fri 30 May 2025 16:42:40 +0000 Manifest this update: Fri 30 May 2025 16:42:40 +0000 Manifest next update: Fri 06 Jun 2025 16:42:40 +0000 Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: 2siEbHLn5+dC9ek7iiyXMog3Q5oOrWUoF8WmeVDNORY=) 2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: 8IxMRzh5qaWGfk62iyhaPPZa1vR76AhV579NwWq7910=) 3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: we20c5hV82a760VbWZeMcxrJkqzrZ+m6YkUxwCa2cqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6209 (0x1841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Validity Not Before: May 30 16:42:40 2025 GMT Not After : Jun 6 16:42:40 2025 GMT Subject: CN=6839e000-c6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:ab:3e:d1:f5:fd:27:fb:39:97:ed:66:5f: 72:27:5e:88:ba:6d:15:02:7a:c0:08:80:35:bc:3e: 2c:5a:59:af:da:4a:03:d3:11:cb:07:c9:40:b6:2f: eb:72:08:bf:3d:26:45:f3:9a:5d:92:62:51:31:bc: 6c:94:e8:9d:8d:f5:72:3e:57:c5:78:d5:b9:c2:47: 48:66:38:47:ff:7c:24:d6:41:a5:8f:c6:34:7e:11: 54:4e:88:4b:8c:10:ef:62:94:c7:6d:71:7f:af:9e: 94:e7:21:c4:55:10:98:ba:38:4e:27:12:06:4c:26: 4e:00:fe:a3:98:99:35:a7:76:95:16:cf:f9:34:ca: 7e:0a:1f:76:ae:3c:0b:86:1a:c8:65:49:9d:08:37: 65:07:3a:4d:60:4a:75:40:78:86:84:34:5a:84:5a: a6:f6:d3:98:fa:26:01:ee:91:b4:af:22:06:ee:cf: f7:7c:58:5b:7b:be:86:60:68:30:d1:e6:af:2b:ce: 2a:c9:72:ca:6b:34:4a:6a:65:1a:01:56:fd:8b:43: e4:15:e1:15:ae:a9:96:fb:26:81:9b:11:dd:07:77: 18:4c:3b:92:80:99:3f:bf:85:aa:8e:c0:a3:06:fa: 7f:e3:47:1d:23:ca:e7:a0:a5:b8:c6:b0:58:9f:fe: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:23:2A:95:D9:33:93:B6:68:A7:0B:28:98:23:E5:9B:25:09:18 X509v3 Authority Key Identifier: keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:92:e4:12:a3:67:4d:e5:d7:28:27:24:28:4a:23:0d:d5:04: 67:84:94:b5:b6:6e:ff:e5:33:f9:2c:d0:bc:48:fb:70:1b:b8: b9:ab:02:ec:fd:29:21:ed:cc:b0:68:3a:68:3f:66:31:83:f3: 79:6d:8a:f1:ad:79:75:8e:0f:77:18:01:bb:4f:56:a7:b5:e3: 30:f1:6a:36:38:c5:69:24:ff:0e:3f:c1:d5:41:92:3c:b4:ab: aa:12:d4:60:a1:a0:4f:eb:79:42:37:5a:a7:bb:8f:11:dd:48: 8f:bc:9a:06:66:64:a2:cc:9b:2c:13:aa:7f:cd:9f:c4:56:48: fa:e7:87:04:84:4b:b9:46:90:f2:1f:b3:d1:cf:22:b1:62:35: 3e:cd:38:6d:2b:d4:c4:cb:8e:54:19:83:15:55:18:ed:05:f7: 7e:5d:ab:1a:e0:47:ff:35:44:7e:c9:90:b5:ed:1a:6c:30:2a: 7d:36:71:bd:a2:a7:36:f5:18:2a:3d:99:17:3b:e0:61:71:75: 54:db:55:ad:2e:c2:28:6b:11:98:d1:e2:5d:f7:8a:dc:39:ae: 36:56:51:70:bf:bb:f1:45:30:01:b9:45:a8:e3:8f:b0:13:63: 00:84:1a:3c:cb:23:12:44:60:c7:3b:f4:97:70:fc:e6:c2:13: a1:b2:6e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw MTgwMkE5NUMwHhcNMjUwNTMwMTY0MjQwWhcNMjUwNjA2MTY0MjQwWjAYMRYwFAYD VQQDEw02ODM5ZTAwMC1jNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t6rPtH1/Sf7OZftZl9yJ16Ium0VAnrACIA1vD4sWlmv2koD0xHLB8lAti/r cgi/PSZF85pdkmJRMbxslOidjfVyPlfFeNW5wkdIZjhH/3wk1kGlj8Y0fhFUTohL jBDvYpTHbXF/r56U5yHEVRCYujhOJxIGTCZOAP6jmJk1p3aVFs/5NMp+Ch92rjwL hhrIZUmdCDdlBzpNYEp1QHiGhDRahFqm9tOY+iYB7pG0ryIG7s/3fFhbe76GYGgw 0eavK84qyXLKazRKamUaAVb9i0PkFeEVrqmW+yaBmxHdB3cYTDuSgJk/v4WqjsCj Bvp/40cdI8rnoKW4xrBYn/4qbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi7IyqV 2TOTtminCyiYI+WbJQkYMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVENC9CRUM5QUM4MkIwQkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4 Tk8wUnRHcVFyaklCZ0NxVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxkuQSo2dN5dcoJyQoSiMN1QRnhJS1tm7/5TP5LNC8SPtwG7i5qwLs /Skh7cywaDpoP2Yxg/N5bYrxrXl1jg93GAG7T1anteMw8Wo2OMVpJP8OP8HVQZI8 tKuqEtRgoaBP63lCN1qnu48R3UiPvJoGZmSizJssE6p/zZ/EVkj654cEhEu5RpDy H7PRzyKxYjU+zThtK9TEy45UGYMVVRjtBfd+Xasa4Ef/NUR+yZC17RpsMCp9NnG9 oqc29RgqPZkXO+BhcXVU21WtLsIoaxGY0eJd94rcOa42VlFwv7vxRTABuUWo44+w E2MAhBo8yyMSRGDHO/SXcPzmwhOhsm7Y -----END CERTIFICATE-----Generated at Sat May 31 17:16:21 2025 by rpki-client