$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: 9v2DaZylNchw9zuKWjyKsM0lbtZe0xx/hcMzgwVdHHc= Subject key identifier: 29:AD:F1:DD:DA:75:A5:3C:8C:39:F9:D7:B2:13:97:96:28:F3:59:6A Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 08E9 Signing time: Mon 12 May 2025 20:14:40 +0000 Manifest this update: Mon 12 May 2025 20:14:40 +0000 Manifest next update: Mon 19 May 2025 20:14:40 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: Z8ZtKf1RDd4YIt7dz7A+blzQoFZpQHUoHZLOuzDqdzY=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: May 12 20:14:40 2025 GMT Not After : May 19 20:14:40 2025 GMT Subject: CN=682256b0-f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:58:7d:73:af:df:d5:1b:74:10:60:b7:e6: c3:46:e1:47:f6:3c:f7:00:3e:4d:84:d7:88:b6:a4: 8a:1f:98:eb:97:08:38:22:ea:f5:53:f5:36:28:c0: 0d:64:fd:fb:6f:06:dc:78:5c:ff:9a:58:2e:d8:63: d1:54:eb:21:d3:3e:5e:05:43:8b:05:ac:11:e9:89: 7a:de:5a:82:db:c8:fc:c8:a4:ad:26:dc:58:c7:44: 28:23:2d:ee:d0:6d:2d:a2:85:aa:11:74:54:26:a7: 04:e0:90:00:ae:98:b3:e1:a8:17:52:5f:30:34:50: 8a:04:c3:12:ab:36:b3:1f:4c:e0:81:bb:88:06:7e: 16:a7:0c:1b:fe:fe:76:bd:12:fd:51:32:de:69:f1: 98:73:b2:b2:de:c9:6e:99:87:b2:12:02:7d:71:88: ac:df:69:e7:8d:c7:a4:84:83:53:23:58:09:f8:95: 65:7c:aa:23:43:1a:a9:17:54:4f:6a:e1:43:31:ab: 48:06:a1:74:5d:68:32:03:a1:0d:46:eb:23:8a:7d: 8e:fc:dd:fa:dd:96:05:12:28:59:f3:96:07:28:1e: 1e:f8:17:38:77:71:37:d2:fa:32:47:72:5b:c5:19: 86:ce:2c:e5:cf:95:4f:95:3f:bf:f7:c4:3b:bc:ef: b8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:F1:DD:DA:75:A5:3C:8C:39:F9:D7:B2:13:97:96:28:F3:59:6A X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:1b:7f:96:93:9d:12:c6:79:12:e6:2b:1a:2f:20:58:94:c8: 12:b7:30:77:58:84:f2:c8:84:63:c2:8f:b8:63:bd:d8:0e:63: ee:b8:2b:69:6b:ac:c8:b7:08:9f:70:d1:be:38:3e:1f:3f:bf: 92:fc:91:21:83:ee:66:83:28:14:a1:11:aa:38:4f:4f:84:d9: 50:9b:80:73:c6:58:51:90:9a:b5:c5:23:d3:49:c3:84:e7:23: 2a:88:cf:0f:2a:d4:0c:93:da:a2:e3:63:10:00:6b:61:28:2b: 51:fe:a0:21:11:84:ce:32:5f:b7:3a:50:8e:d0:3b:1c:ce:84: 4f:f5:7e:45:3b:4f:11:a0:de:39:53:79:dd:3b:3c:60:8e:f8: f0:5d:29:6a:5d:6e:ce:d9:e4:fb:cb:1d:3e:49:7f:05:de:6d: 8f:ba:49:81:10:90:cd:26:50:7a:a2:eb:66:75:2c:79:a1:ee: 5e:cb:96:d1:cc:6d:f2:0c:d5:b8:fe:06:fc:45:f1:93:a8:1b: 77:b5:1d:5c:c9:d4:81:b1:77:7b:28:29:f4:d4:32:95:4b:a0: 89:34:9f:ae:8f:89:13:e5:e6:ac:1a:78:c1:81:05:26:f1:67: 04:04:de:84:6f:89:3e:14:58:07:5e:68:56:7e:3b:73:ce:ea: f9:22:b2:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUwNTEyMjAxNDQwWhcNMjUwNTE5MjAxNDQwWjAYMRYwFAYD VQQDEw02ODIyNTZiMC1mNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqxYfXOv39UbdBBgt+bDRuFH9jz3AD5NhNeItqSKH5jrlwg4Iur1U/U2KMAN ZP37bwbceFz/mlgu2GPRVOsh0z5eBUOLBawR6Yl63lqC28j8yKStJtxYx0QoIy3u 0G0tooWqEXRUJqcE4JAArpiz4agXUl8wNFCKBMMSqzazH0zggbuIBn4Wpwwb/v52 vRL9UTLeafGYc7Ky3slumYeyEgJ9cYis32nnjcekhINTI1gJ+JVlfKojQxqpF1RP auFDMatIBqF0XWgyA6ENRusjin2O/N363ZYFEihZ85YHKB4e+Bc4d3E30voyR3Jb xRmGzizlz5VPlT+/98Q7vO+45QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmt8d3a daU8jDn517ITl5Yo81lqMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAG3+Wk50SxnkS5isaLyBYlMgStzB3WITyyIRjwo+4Y73YDmPuuCtp a6zItwifcNG+OD4fP7+S/JEhg+5mgygUoRGqOE9PhNlQm4BzxlhRkJq1xSPTScOE 5yMqiM8PKtQMk9qi42MQAGthKCtR/qAhEYTOMl+3OlCO0DsczoRP9X5FO08RoN45 U3ndOzxgjvjwXSlqXW7O2eT7yx0+SX8F3m2PukmBEJDNJlB6outmdSx5oe5ey5bR zG3yDNW4/gb8RfGTqBt3tR1cydSBsXd7KCn01DKVS6CJNJ+uj4kT5easGnjBgQUm 8WcEBN6Eb4k+FFgHXmhWfjtzzur5IrLe -----END CERTIFICATE-----Generated at Tue May 13 20:51:25 2025 by rpki-client