$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft File: i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json) Hash identifier: Op61/UvTE3626ttAjLFPHXqDHYhWR80Uxt/hfaLH0BQ= Subject key identifier: C7:64:76:DA:1D:80:E6:82:8E:4C:E1:C0:6A:C8:86:10:DB:D3:6C:3A Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft Manifest number: 01B8 Signing time: Fri 13 Jun 2025 02:11:08 +0000 Manifest this update: Fri 13 Jun 2025 02:11:08 +0000 Manifest next update: Fri 20 Jun 2025 02:11:08 +0000 Files and hashes: 1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: w5kBPexgyDIrMB0pQ37qOb/xS21a+0FMgZF5f3lMbK8=) 2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: g7Iu0qsIgHA2DsVqzJPZwAHsWDw0BvGfzGeWjQmEdZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1A8, serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Validity Not Before: Jun 13 02:11:08 2025 GMT Not After : Jun 20 02:11:08 2025 GMT Subject: CN=684b88bc-7fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e2:d9:e5:bb:11:04:1d:a4:09:6b:a6:ab:46: 9f:f1:46:75:17:e9:02:91:d0:64:17:37:de:03:13: 17:f2:38:8c:70:b3:88:b6:75:ba:b3:ee:b9:3a:a0: 79:60:a4:a8:20:3a:5f:2c:a8:97:f6:bb:b7:25:7c: a8:eb:92:5a:2d:dd:7e:c9:53:b0:f1:98:d5:9c:7f: b5:a7:5f:2a:01:d0:47:b8:4c:7b:12:f9:2c:d0:14: 46:c7:63:c6:b6:03:c6:01:07:90:27:9d:5e:ef:2f: 4b:ba:b4:07:8a:b5:67:a9:d2:6b:6f:8a:a7:f3:1d: ef:cc:9e:50:e0:a9:1b:c4:89:e3:89:ea:5f:55:77: 27:89:61:ad:03:07:cb:d6:d0:ed:2e:fa:ef:e6:b2: e1:81:d0:96:16:a3:fe:7c:7c:ba:91:38:e0:08:ab: 1d:9c:45:cc:4b:81:2a:27:56:c6:25:11:30:3a:b5: 33:e5:8c:90:b5:53:42:30:c1:f3:20:51:da:c1:e4: 2d:7a:be:9d:cd:7b:35:38:f9:25:de:63:97:76:6c: 49:71:df:9a:18:8d:1d:43:61:4d:3f:2d:fd:37:40: a6:5d:3a:30:b4:66:99:e6:20:b1:7f:98:c2:77:7a: a3:e8:b1:8a:5f:ac:60:50:0d:7d:12:69:cc:fd:f6: 15:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:64:76:DA:1D:80:E6:82:8E:4C:E1:C0:6A:C8:86:10:DB:D3:6C:3A X509v3 Authority Key Identifier: keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2a:27:dc:2e:54:c4:64:22:6b:aa:d1:3e:ff:e1:cd:7d:42: 14:27:d9:74:e1:87:b3:bd:e7:f3:34:e4:1c:cf:04:38:dd:78: b3:75:dd:86:5a:17:56:d8:fc:59:fe:33:e1:31:70:f6:0c:a9: 2b:c1:7e:ba:c1:b2:b3:8b:e5:27:8a:a4:7e:75:8a:df:e0:cd: 31:54:95:7d:aa:c6:99:f8:95:ac:13:b0:06:a4:ae:25:f2:6c: dc:59:c0:e2:dc:e4:f0:b4:91:b7:2f:34:3d:81:3e:a7:98:13: 65:b8:9b:bd:a6:f9:98:d8:05:2c:b6:12:47:cf:f2:79:66:7f: 24:c6:c7:07:a7:9f:8b:37:c3:ee:26:ee:a0:4d:42:07:e5:27: 6e:b1:2b:74:6e:c7:10:f9:6c:41:20:c9:8a:a5:68:ee:b5:b1: 84:74:19:8a:86:27:68:1c:25:f4:e8:32:da:ab:fa:b5:33:74: 5f:6a:a0:ed:42:93:ca:ff:64:1b:91:54:bb:76:4f:71:3e:bf: 7b:67:f1:02:55:47:fa:2d:2f:b9:d3:50:cc:40:eb:eb:7f:9c: 96:b2:b6:77:68:5c:3d:23:10:ec:eb:41:3a:c2:3c:f1:1a:4e: 34:af:90:ed:3d:f8:09:a7:87:b3:e5:99:25:87:57:6d:4c:56: 69:bb:0b:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxQTgxMTAvBgNVBAUTKDhCRUNDMzYzODA3MEE2Qjc5RjZEQ0UyMkEwRTY1QkIy MUUwRDc3MjkwHhcNMjUwNjEzMDIxMTA4WhcNMjUwNjIwMDIxMTA4WjAYMRYwFAYD VQQDEw02ODRiODhiYy03ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OLZ5bsRBB2kCWumq0af8UZ1F+kCkdBkFzfeAxMX8jiMcLOItnW6s+65OqB5 YKSoIDpfLKiX9ru3JXyo65JaLd1+yVOw8ZjVnH+1p18qAdBHuEx7Evks0BRGx2PG tgPGAQeQJ51e7y9LurQHirVnqdJrb4qn8x3vzJ5Q4KkbxInjiepfVXcniWGtAwfL 1tDtLvrv5rLhgdCWFqP+fHy6kTjgCKsdnEXMS4EqJ1bGJREwOrUz5YyQtVNCMMHz IFHaweQter6dzXs1OPkl3mOXdmxJcd+aGI0dQ2FNPy39N0CmXTowtGaZ5iCxf5jC d3qj6LGKX6xgUA19EmnM/fYVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdkdtod gOaCjkzhwGrIhhDb02w6MB8GA1UdIwQYMBaAFIvsw2OAcKa3n23OIqDmW7IeDXcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFBOC9BNDBBNzI0QUIx MzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3ByZWZiYzRpb09aYnNoNE5k eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktekRZNEJ3cHJlZmJjNGlvT1pic2g0TmR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFBOC9BNDBBNzI0QUIxMzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3By ZWZiYzRpb09aYnNoNE5keWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdKifcLlTEZCJrqtE+/+HNfUIUJ9l04YezvefzNOQczwQ43Xizdd2G WhdW2PxZ/jPhMXD2DKkrwX66wbKzi+UniqR+dYrf4M0xVJV9qsaZ+JWsE7AGpK4l 8mzcWcDi3OTwtJG3LzQ9gT6nmBNluJu9pvmY2AUsthJHz/J5Zn8kxscHp5+LN8Pu Ju6gTUIH5SdusSt0bscQ+WxBIMmKpWjutbGEdBmKhidoHCX06DLaq/q1M3RfaqDt QpPK/2QbkVS7dk9xPr97Z/ECVUf6LS+501DMQOvrf5yWsrZ3aFw9IxDs60E6wjzx Gk40r5DtPfgJp4ez5Zklh1dtTFZpuwsE -----END CERTIFICATE-----Generated at Fri Jun 13 14:58:11 2025 by rpki-client