$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: DUpNahn7l3oOhqbWL6nlZdpAJmquK6cDgtFpG5Id5FM= Subject key identifier: AC:5B:2D:DA:B8:10:81:DA:27:C2:7F:74:CD:69:1A:88:17:61:35:9F Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 080C Signing time: Fri 30 May 2025 21:06:31 +0000 Manifest this update: Fri 30 May 2025 21:06:31 +0000 Manifest next update: Fri 06 Jun 2025 21:06:31 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: su/cTWmFzDyiJlo0W7QOgFbQOmQr8NspNeWZH/6ewaI=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: OOAGuEy3dNxhof0DuDCrqOBB7Z16rn3wikl56pkPDKs=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: iklcKY1p6cUV63DgFPNd0VTuCZO3jzabdmCYH2W3rsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: May 30 21:06:31 2025 GMT Not After : Jun 6 21:06:31 2025 GMT Subject: CN=683a1dd7-02e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:b1:97:60:2c:c7:e1:bc:77:3b:8e:26:89: c1:2e:2f:c3:b6:d7:c1:c9:ca:ca:7e:6e:38:6c:e9: f3:a2:54:15:42:b8:7b:5e:d8:1c:da:f1:b1:09:1b: 6d:4a:94:11:7a:4d:d0:6d:f8:0a:c3:49:7d:3e:c2: 53:4d:ce:d1:49:4a:bb:1c:20:cb:41:43:2b:c9:86: f2:44:e1:69:df:d5:b6:45:f0:92:86:1f:e3:e2:48: ee:c4:eb:c4:41:73:86:4a:bc:2b:9b:d6:a9:1e:bb: ad:a4:a8:d2:9b:d7:c7:38:a1:cd:d8:41:ea:cd:3a: cd:77:f1:c3:2f:49:76:f6:53:07:7a:18:0b:f6:72: 30:a5:3c:59:d8:bc:c9:e4:04:79:3b:13:9f:c6:0e: e0:a5:75:ac:3c:54:1d:a9:58:0a:7a:62:96:2d:aa: 9c:c8:2e:cb:2a:90:ed:55:ed:7d:30:99:b3:01:c2: 22:4a:49:53:e1:53:a2:5d:17:74:53:ad:19:73:89: 37:4a:b4:4a:2c:39:33:34:be:38:f1:13:74:46:e9: 9c:08:e9:5e:b4:21:cb:5e:ef:c8:a9:2f:27:a7:1f: bd:e2:cc:19:6a:fc:92:43:f0:67:cc:83:a7:2d:10: bb:de:bf:d0:46:25:f6:4e:08:80:5b:a3:c3:f9:4c: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5B:2D:DA:B8:10:81:DA:27:C2:7F:74:CD:69:1A:88:17:61:35:9F X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8f:66:de:76:45:dd:59:0d:5d:bf:50:29:44:87:6a:13:f2: 8c:85:51:ab:5d:0c:d3:67:2b:9f:a0:cc:f2:fa:40:46:6e:8b: d0:9f:e1:bd:cb:36:18:de:d6:f6:55:47:e6:e1:70:ab:8a:ce: 18:50:79:07:18:b4:06:c9:bb:14:f3:fc:25:50:c9:67:66:62: 35:d9:d9:09:d7:6d:81:65:a8:ae:da:ae:61:7f:36:cc:ff:ca: f6:60:ee:b6:5a:e4:ed:3c:da:69:fa:e6:29:42:1b:83:5b:ba: c6:9f:79:99:81:1c:9c:8c:b3:a4:cd:72:3c:c4:26:6f:db:cf: c8:a6:03:33:cf:2e:94:1f:21:63:2e:89:09:28:15:8a:04:46: 7a:e7:c2:27:43:28:30:1d:0e:43:59:da:31:45:20:6a:73:b1: f8:91:a9:15:1f:89:30:5c:6e:5b:fe:c5:d4:ac:55:80:06:fd: d2:f3:1c:13:30:5f:1d:57:66:f4:ee:e1:5b:2c:a2:e4:8b:67: 6e:a9:a1:e4:72:6a:fb:8b:72:0c:43:92:b0:57:7c:bf:90:64: d0:ac:d5:f5:3f:78:5a:5d:02:38:1c:08:c4:29:bd:13:e0:0d: 67:9d:b4:9c:c1:fe:6d:62:e2:21:50:cb:d0:ec:e3:a3:1c:cc: 57:df:b5:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUwNTMwMjEwNjMxWhcNMjUwNjA2MjEwNjMxWjAYMRYwFAYD VQQDEw02ODNhMWRkNy0wMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeaxl2Asx+G8dzuOJonBLi/DttfBycrKfm44bOnzolQVQrh7Xtgc2vGxCRtt SpQRek3QbfgKw0l9PsJTTc7RSUq7HCDLQUMryYbyROFp39W2RfCShh/j4kjuxOvE QXOGSrwrm9apHrutpKjSm9fHOKHN2EHqzTrNd/HDL0l29lMHehgL9nIwpTxZ2LzJ 5AR5OxOfxg7gpXWsPFQdqVgKemKWLaqcyC7LKpDtVe19MJmzAcIiSklT4VOiXRd0 U60Zc4k3SrRKLDkzNL448RN0RumcCOletCHLXu/IqS8npx+94swZavySQ/BnzIOn LRC73r/QRiX2TgiAW6PD+UzjowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxbLdq4 EIHaJ8J/dM1pGogXYTWfMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvj2bedkXdWQ1dv1ApRIdqE/KMhVGrXQzTZyufoMzy+kBGbovQn+G9 yzYY3tb2VUfm4XCris4YUHkHGLQGybsU8/wlUMlnZmI12dkJ122BZaiu2q5hfzbM /8r2YO62WuTtPNpp+uYpQhuDW7rGn3mZgRycjLOkzXI8xCZv28/IpgMzzy6UHyFj LokJKBWKBEZ658InQygwHQ5DWdoxRSBqc7H4kakVH4kwXG5b/sXUrFWABv3S8xwT MF8dV2b07uFbLKLki2duqaHkcmr7i3IMQ5KwV3y/kGTQrNX1P3haXQI4HAjEKb0T 4A1nnbScwf5tYuIhUMvQ7OOjHMxX37WS -----END CERTIFICATE-----Generated at Sat May 31 17:44:05 2025 by rpki-client