$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json) Hash identifier: NQS+Das87HPWsW/TmHm4iYcNsQnP50C+oP+d6U6KccA= Subject key identifier: 2A:CC:BC:A3:D8:D7:5D:69:14:6B:AA:6B:A1:1D:0D:AE:1B:3D:75:BA Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0B03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft Manifest number: 0AFB Signing time: Fri 30 May 2025 19:32:48 +0000 Manifest this update: Fri 30 May 2025 19:32:48 +0000 Manifest next update: Fri 06 Jun 2025 19:32:48 +0000 Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: hF92W72uEE+yv1XqROCN84bDaLpzO/zHz2LyTusojQE=) 2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: QbUyZORfUsAuIPfZUHLWRtdmTwbA8QqQPT+t+aGRe2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: May 30 19:32:48 2025 GMT Not After : Jun 6 19:32:48 2025 GMT Subject: CN=683a07e0-0386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0e:14:05:b9:05:ab:3b:f3:7e:9e:f3:3a:ae: 79:c3:52:92:b7:af:8b:35:cb:46:af:8d:e1:54:c0: 66:d3:e8:c5:9a:44:1b:89:de:8c:42:28:8d:f4:09: a9:70:d7:d6:b2:7d:c8:b6:b2:27:34:2d:05:a7:b5: 59:d0:e4:e1:9c:7e:ab:65:3d:1a:08:f9:51:80:09: d7:a4:25:b2:e0:c3:ba:a2:b0:96:85:45:1a:b4:eb: 2e:43:ef:45:91:93:f3:4e:61:80:d7:f1:fd:03:62: 80:39:1a:e4:24:e5:08:01:9a:eb:cc:66:89:90:96: 19:56:f9:b6:b7:12:d1:15:44:ff:12:a4:76:d0:48: e0:18:3f:54:46:4b:04:5e:30:d8:a7:cf:74:a4:58: 0a:97:03:26:f4:e2:63:2d:85:a5:ab:ee:fa:f9:1a: d6:f9:f2:63:0c:e8:d6:55:af:c0:92:31:2a:44:a7: 1a:19:9c:a2:96:0d:7e:0f:06:0a:fd:70:ac:89:09: 77:fb:2a:53:9c:0c:8f:08:99:29:1b:86:f0:35:fd: 1d:5a:03:33:de:4b:24:27:f0:0d:1d:f3:ac:e5:29: e6:c5:67:b1:0e:87:50:41:c0:e6:d5:9b:8a:8c:5b: 5c:f5:52:80:77:03:53:57:ef:df:a5:1b:2f:27:20: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CC:BC:A3:D8:D7:5D:69:14:6B:AA:6B:A1:1D:0D:AE:1B:3D:75:BA X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c7:43:1e:d8:95:4b:de:25:60:94:17:16:0e:18:e0:d6:4e: 37:d8:93:4e:53:5a:fb:67:d2:14:2f:70:aa:5d:59:dc:a9:23: 9a:83:53:c0:5c:b8:6e:a7:eb:f5:f7:8c:ed:40:f2:7e:df:6b: 44:4b:a1:f1:4d:d3:5c:5a:06:44:7f:e9:52:23:3a:fe:57:66: 29:d4:8f:b6:1c:11:45:68:19:ee:67:35:bb:31:d7:9f:2f:5a: 25:94:f3:ea:44:68:87:b9:86:97:70:5d:2d:32:cb:90:7c:7f: f8:f3:28:f9:95:3e:4b:b3:88:21:6d:b0:f4:a0:d5:02:e1:59: 64:ee:5c:90:89:b2:e3:54:5a:a4:64:9b:e5:68:83:c9:8d:59: 2b:60:75:db:d6:5a:60:93:b3:b2:dd:32:94:40:e1:49:04:57: ed:af:84:44:fa:c1:a4:4a:72:d6:1c:95:88:7e:17:16:b7:f1: b7:33:89:5a:73:e7:47:f0:38:4b:62:58:fd:1e:a6:dc:77:8e: e0:d8:d3:c8:23:bf:e6:10:54:a8:1b:2d:07:46:7d:fc:de:95: e6:8b:ec:60:71:ae:51:10:f6:0e:d5:20:e1:18:4b:4a:9a:96: 69:07:33:d2:66:b4:a8:27:c1:d7:1d:a8:e6:48:e9:a4:4f:7e: d2:e7:1a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjUwNTMwMTkzMjQ4WhcNMjUwNjA2MTkzMjQ4WjAYMRYwFAYD VQQDEw02ODNhMDdlMC0wMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5g4UBbkFqzvzfp7zOq55w1KSt6+LNctGr43hVMBm0+jFmkQbid6MQiiN9Amp cNfWsn3ItrInNC0Fp7VZ0OThnH6rZT0aCPlRgAnXpCWy4MO6orCWhUUatOsuQ+9F kZPzTmGA1/H9A2KAORrkJOUIAZrrzGaJkJYZVvm2txLRFUT/EqR20EjgGD9URksE XjDYp890pFgKlwMm9OJjLYWlq+76+RrW+fJjDOjWVa/AkjEqRKcaGZyilg1+DwYK /XCsiQl3+ypTnAyPCJkpG4bwNf0dWgMz3kskJ/ANHfOs5SnmxWexDodQQcDm1ZuK jFtc9VKAdwNTV+/fpRsvJyAfrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrMvKPY 111pFGuqa6EdDa4bPXW6MB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2 WmhfdThjTnh0bnNqOGNVdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtx0Me2JVL3iVglBcWDhjg1k432JNOU1r7Z9IUL3CqXVncqSOag1PA XLhup+v194ztQPJ+32tES6HxTdNcWgZEf+lSIzr+V2Yp1I+2HBFFaBnuZzW7Mdef L1ollPPqRGiHuYaXcF0tMsuQfH/48yj5lT5Ls4ghbbD0oNUC4Vlk7lyQibLjVFqk ZJvlaIPJjVkrYHXb1lpgk7Oy3TKUQOFJBFftr4RE+sGkSnLWHJWIfhcWt/G3M4la c+dH8DhLYlj9Hqbcd47g2NPII7/mEFSoGy0HRn383pXmi+xgca5REPYO1SDhGEtK mpZpBzPSZrSoJ8HXHajmSOmkT37S5xoZ -----END CERTIFICATE-----Generated at Sat May 31 17:49:44 2025 by rpki-client