$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: FP6HJboYwbLKTcjPouSqaYXvCYjuM0L9j1VjAVEHCw4= Subject key identifier: DE:89:FB:C0:7E:59:97:DB:4E:4B:06:52:F5:9A:67:31:BC:33:AC:1C Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 0158 Signing time: Sat 31 May 2025 03:45:54 +0000 Manifest this update: Sat 31 May 2025 03:45:54 +0000 Manifest next update: Sat 07 Jun 2025 03:45:54 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: GBuNzjuuYWwtBsQqLV2PIo/NLM1EIoN67iwFL52WzEs=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: May 31 03:45:54 2025 GMT Not After : Jun 7 03:45:54 2025 GMT Subject: CN=683a7b72-486d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4b:7c:0a:31:e2:52:5b:d6:d4:6c:11:88:d2: 07:a7:3f:07:99:f6:29:92:a7:04:9d:4c:96:18:1b: cf:19:a9:a4:1e:87:55:b3:5b:dd:31:8b:ba:32:37: 05:78:95:7a:aa:d8:76:ed:b7:4e:f6:cc:ae:ef:4d: fb:1f:92:32:49:1a:bb:67:f5:ce:cf:fb:d8:a9:eb: 1e:88:f2:0b:01:c1:08:d9:0d:83:82:ab:e0:23:19: 28:fe:68:29:8a:1b:1e:1a:fc:0e:fb:80:b8:3f:98: 7f:5f:8a:59:e8:64:eb:dd:1a:4a:f1:5c:e4:b0:2c: 46:62:58:fa:21:77:f6:01:07:a7:65:70:11:7c:68: 75:2e:69:4f:4f:e2:4c:52:f8:94:67:6f:24:2a:eb: 9c:1d:91:40:d7:6e:8d:b7:81:1b:da:eb:d0:cb:30: 83:bf:79:98:0d:4d:1c:43:1c:9d:ab:66:ba:f1:7a: e3:1c:4d:6d:2d:94:62:0b:bb:55:bd:5e:44:d2:12: 74:d6:0b:4f:87:f5:2d:27:45:9e:3a:95:7f:90:93: 2b:93:ed:9a:50:10:38:81:33:e8:ec:9f:db:2d:87: 51:43:07:86:f2:7f:32:74:2f:37:95:64:6f:5d:94: 2e:ff:2d:4e:0a:80:87:c9:14:6a:c6:c4:b1:28:9a: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:89:FB:C0:7E:59:97:DB:4E:4B:06:52:F5:9A:67:31:BC:33:AC:1C X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9a:9f:2f:85:1d:e7:48:7b:89:41:1a:df:f8:29:25:da:bd: 39:c0:5a:c0:a8:3a:39:f2:cb:ff:1b:6b:e3:3b:45:10:8d:75: b4:1d:2a:e4:e2:ab:d9:ff:d9:06:ba:99:79:6f:62:89:5d:21: e1:65:06:f3:c1:c4:ec:6b:2c:43:15:28:4a:4b:57:af:44:01: 70:9e:05:f8:04:7b:90:51:ce:70:44:4d:ca:a4:8a:d2:11:ae: cd:7a:58:2a:d0:95:86:eb:73:da:66:95:cd:75:ac:c9:2a:e0: c8:c2:06:6d:7d:df:60:50:41:3f:5d:af:01:3a:97:0d:c5:48: 75:85:d8:eb:79:3b:d8:b0:ba:b1:be:25:6e:66:82:0b:ac:00: 6a:e0:03:c4:90:73:2d:16:44:b2:a2:d9:75:a6:ab:5c:47:77: 89:8a:96:5c:9f:79:77:13:a5:b2:42:ed:89:54:aa:4c:5e:4e: 25:cb:da:61:95:9f:a3:fa:c7:c5:ec:76:30:0e:f8:be:3b:88: ab:bc:ed:48:b9:57:e1:e1:88:8d:0a:8f:80:f2:b0:2a:7f:75: 41:7d:fe:64:b2:ad:e3:c4:71:a2:65:83:df:a3:8c:c0:02:b8: 88:53:0c:ca:fc:89:03:75:6b:76:5e:41:8f:d9:2e:a3:7f:13: e5:ea:53:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwNTMxMDM0NTU0WhcNMjUwNjA3MDM0NTU0WjAYMRYwFAYD VQQDEw02ODNhN2I3Mi00ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Et8CjHiUlvW1GwRiNIHpz8HmfYpkqcEnUyWGBvPGamkHodVs1vdMYu6MjcF eJV6qth27bdO9syu7037H5IySRq7Z/XOz/vYqeseiPILAcEI2Q2DgqvgIxko/mgp ihseGvwO+4C4P5h/X4pZ6GTr3RpK8VzksCxGYlj6IXf2AQenZXARfGh1LmlPT+JM UviUZ28kKuucHZFA126Nt4Eb2uvQyzCDv3mYDU0cQxydq2a68XrjHE1tLZRiC7tV vV5E0hJ01gtPh/UtJ0WeOpV/kJMrk+2aUBA4gTPo7J/bLYdRQweG8n8ydC83lWRv XZQu/y1OCoCHyRRqxsSxKJp4twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6J+8B+ WZfbTksGUvWaZzG8M6wcMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/mp8vhR3nSHuJQRrf+Ckl2r05wFrAqDo58sv/G2vjO0UQjXW0HSrk 4qvZ/9kGupl5b2KJXSHhZQbzwcTsayxDFShKS1evRAFwngX4BHuQUc5wRE3KpIrS Ea7Nelgq0JWG63PaZpXNdazJKuDIwgZtfd9gUEE/Xa8BOpcNxUh1hdjreTvYsLqx viVuZoILrABq4APEkHMtFkSyotl1pqtcR3eJipZcn3l3E6WyQu2JVKpMXk4ly9ph lZ+j+sfF7HYwDvi+O4irvO1IuVfh4YiNCo+A8rAqf3VBff5ksq3jxHGiZYPfo4zA AriIUwzK/IkDdWt2XkGP2S6jfxPl6lNQ -----END CERTIFICATE-----Generated at Sat May 31 15:47:00 2025 by rpki-client