$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json) Hash identifier: cHCpYyabcJzT7hMrNw7YjkLlxIWW54KOYEsUTIa14sk= Subject key identifier: 1E:0E:F0:80:97:1D:82:0E:BB:8E:BD:B2:AF:51:F3:BB:35:B0:C8:CA Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft Manifest number: 04BB Signing time: Sat 31 May 2025 00:11:20 +0000 Manifest this update: Sat 31 May 2025 00:11:19 +0000 Manifest next update: Sat 07 Jun 2025 00:11:19 +0000 Files and hashes: 1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: 4VjbzzdwGoorebOo6hhsFAaDTR7viLVMZ/TcUqaQAqU=) 2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Validity Not Before: May 31 00:11:19 2025 GMT Not After : Jun 7 00:11:19 2025 GMT Subject: CN=683a4928-7e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:e6:cc:92:79:b2:c9:9a:15:c4:08:0c:2e: b3:7a:7e:d8:b3:44:90:10:ca:a2:61:60:51:af:b3: d4:13:4f:8a:89:04:f4:08:2a:58:f1:e8:77:f7:e4: 5b:52:83:45:c0:5d:1e:94:50:32:ab:c9:f0:67:66: ea:a7:d4:b2:64:95:b3:e5:9b:72:f5:75:0d:56:b8: d2:26:f8:1d:69:a7:0e:60:89:8e:b9:6f:57:ba:d1: 0d:ee:95:fd:20:46:44:35:4d:93:8e:fb:cc:ec:6f: 22:77:10:5b:7b:cc:b2:4b:51:a2:21:8e:fe:0f:40: 86:37:f2:41:04:16:59:a3:63:c7:0a:71:f6:3a:75: 12:12:42:46:b4:d9:21:fc:3f:d4:44:e5:97:31:7d: 63:eb:77:59:2b:d5:4f:ba:18:87:9b:e8:f7:8e:70: 5b:6e:09:85:b1:a8:b9:13:44:fb:74:44:dc:5b:31: 6c:28:be:ec:b0:2c:ae:94:5e:57:af:72:ac:5e:da: 5d:8e:33:30:93:89:a7:f1:cc:c2:5d:8b:16:04:d5: 9f:db:c7:51:79:cc:54:fb:30:00:b8:fd:c0:a5:21: 65:54:9c:91:ca:22:60:83:f3:77:ea:2c:73:ea:fb: f9:c0:bd:f8:fb:a6:42:38:3d:aa:02:0c:db:54:49: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0E:F0:80:97:1D:82:0E:BB:8E:BD:B2:AF:51:F3:BB:35:B0:C8:CA X509v3 Authority Key Identifier: keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:84:27:77:c0:74:84:e4:7f:3d:21:2c:d3:86:4f:e9:5e:d8: d3:d0:86:a5:16:4d:1d:59:17:75:4f:2e:14:f3:c2:86:71:08: f8:54:87:52:9a:78:fd:c0:d5:57:5d:db:8f:5d:52:7c:a3:59: 2b:38:dc:e2:f7:29:da:d0:fc:cd:8a:5d:9c:2f:b3:91:1c:93: a8:c0:5f:69:f8:b1:4e:68:29:e8:b3:43:a9:55:4c:5d:8c:1e: a4:b2:c8:61:77:0c:47:7e:21:39:22:39:a4:59:bc:f2:34:1e: f8:68:f0:df:9f:1f:8a:45:67:ec:4f:cd:b5:cc:29:79:4d:d0: a4:ce:e4:71:24:02:97:bd:66:36:4b:d7:58:37:c5:bb:a5:02: 1d:33:03:31:e0:b1:3a:f3:99:a4:69:98:87:7c:7a:01:3a:66: 6e:6a:ac:83:aa:e9:c3:b1:58:fe:ab:75:02:c8:40:15:c3:26: c2:4c:21:54:eb:ae:de:05:de:a7:29:f7:29:8d:f5:ba:4d:42: a6:80:64:67:ef:9c:28:e5:8d:35:99:57:cb:b1:61:28:28:82: 7a:56:f9:9e:4b:26:3a:89:20:96:f6:37:44:e9:f2:97:28:c6: d9:f1:5e:6d:f6:fd:34:69:2c:9f:55:0f:dd:41:cb:d1:65:d8: 30:f0:37:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhEM0FDQ0M2REFB NEM1MThDQjQwHhcNMjUwNTMxMDAxMTE5WhcNMjUwNjA3MDAxMTE5WjAYMRYwFAYD VQQDEw02ODNhNDkyOC03ZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDDmzJJ5ssmaFcQIDC6zen7Ys0SQEMqiYWBRr7PUE0+KiQT0CCpY8eh39+Rb UoNFwF0elFAyq8nwZ2bqp9SyZJWz5Zty9XUNVrjSJvgdaacOYImOuW9XutEN7pX9 IEZENU2TjvvM7G8idxBbe8yyS1GiIY7+D0CGN/JBBBZZo2PHCnH2OnUSEkJGtNkh /D/UROWXMX1j63dZK9VPuhiHm+j3jnBbbgmFsai5E0T7dETcWzFsKL7ssCyulF5X r3KsXtpdjjMwk4mn8czCXYsWBNWf28dRecxU+zAAuP3ApSFlVJyRyiJgg/N36ixz 6vv5wL34+6ZCOD2qAgzbVEmvkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4O8ICX HYIOu469sq9R87s1sMjKMB8GA1UdIwQYMBaAFGfzfFDKM89PUIV406zMbapMUYy0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE3Ri83NjBFMjI4RTM3 REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venowOVFoWGpUck14dHFreFJq TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfTjhVTW96ejA5UWhYalRyTXh0cWt4UmpMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE3Ri83NjBFMjI4RTM3REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venow OVFoWGpUck14dHFreFJqTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVhCd3wHSE5H89ISzThk/pXtjT0IalFk0dWRd1Ty4U88KGcQj4VIdS mnj9wNVXXduPXVJ8o1krONzi9yna0PzNil2cL7ORHJOowF9p+LFOaCnos0OpVUxd jB6ksshhdwxHfiE5IjmkWbzyNB74aPDfnx+KRWfsT821zCl5TdCkzuRxJAKXvWY2 S9dYN8W7pQIdMwMx4LE685mkaZiHfHoBOmZuaqyDqunDsVj+q3UCyEAVwybCTCFU 667eBd6nKfcpjfW6TUKmgGRn75wo5Y01mVfLsWEoKIJ6VvmeSyY6iSCW9jdE6fKX KMbZ8V5t9v00aSyfVQ/dQcvRZdgw8DcC -----END CERTIFICATE-----Generated at Sat May 31 17:32:59 2025 by rpki-client