$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json) Hash identifier: ZQ+6VClRDHHGFjOquKB6Xoki+TXvHLY9cxgIClKWT0g= Subject key identifier: FE:16:DF:BB:CD:7F:7D:2B:64:15:1E:75:DD:03:1A:27:00:48:EA:27 Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft Manifest number: 017C Signing time: Tue 13 May 2025 03:05:10 +0000 Manifest this update: Tue 13 May 2025 03:05:09 +0000 Manifest next update: Tue 20 May 2025 03:05:09 +0000 Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: X2rCFApw3jrR3EeXZ3z/51+eftmacBEcDjJVRwixcDY=) 2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: poEtgPZtcpiKYKdYhV9CVGAapseARodx6sLWBCWZ/Pg=) 3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: RgZyk1M0eEMoNtFOvPy85ZKQKHabcvIY9dY7CkjXass=) 4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: 34mVt8KDeQIiFh5q4FQNM2/Hz6nw+/aMWnc/7Wb1lCk=) 5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: PFCyjZSOpcMocZlkABMSTW0YSTJDAjKzZb80gKogztE=) 6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: S8OAyRRDBlpW325PGxmAZWgYigEamJ2scEiQ4nUj0ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Validity Not Before: May 13 03:05:09 2025 GMT Not After : May 20 03:05:09 2025 GMT Subject: CN=6822b6e6-dd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:d5:58:d9:ef:a6:fa:38:ea:ee:a2:c2:b9: c9:90:a7:b5:c3:c2:2d:ba:1d:2d:c5:40:c7:e0:85: 27:d1:fe:b1:f8:7d:eb:a3:bf:cf:02:f8:74:37:35: b1:6b:0e:37:08:a7:c6:c4:94:d9:ce:5a:b2:90:61: 04:05:e2:f9:86:39:cc:e5:0d:d4:6c:28:60:b9:9e: 08:b9:1e:b0:08:ce:0d:51:f9:73:68:40:b5:1a:b8: dc:04:d2:63:0e:e4:fd:0b:1c:a8:9c:65:25:79:36: 6e:a4:7c:3a:e6:f5:69:2f:e3:e6:25:6c:8a:4e:2b: f3:c8:47:6b:50:0f:49:28:6d:a7:f0:e7:4e:1c:57: f5:b1:a5:7b:fa:99:7a:75:31:a6:b7:ae:8e:04:99: c0:37:48:27:a3:63:bd:af:80:2d:01:47:29:86:7d: 6e:54:14:52:78:b6:5e:69:b8:59:42:be:79:09:60: 3f:d7:ba:99:1d:e3:29:e7:75:a9:db:d6:b1:72:1a: 2e:c8:7d:34:df:21:92:e8:5f:db:e8:60:7b:2d:7b: 65:be:0a:ab:a1:2c:ae:0d:35:80:26:35:27:1b:ae: 73:cf:aa:3e:cf:4c:bc:68:8a:17:45:d2:b3:a4:ea: 1d:75:a6:a7:9d:a8:09:9d:ea:b8:b0:13:e1:2e:52: dd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:DF:BB:CD:7F:7D:2B:64:15:1E:75:DD:03:1A:27:00:48:EA:27 X509v3 Authority Key Identifier: keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3e:96:6c:12:da:cb:8a:41:d6:3e:4c:55:f5:12:a2:07:19: d8:8c:3d:60:d0:72:15:0e:95:bb:a8:1c:de:c6:49:a4:44:8c: 9e:fc:e1:bc:05:c0:8f:bd:6c:60:73:8c:03:6c:e3:8b:89:71: a0:d2:00:61:0f:37:33:4e:2b:1d:0c:e0:90:ee:47:13:d1:79: 31:c8:e8:7a:28:6b:eb:c4:80:a0:44:6d:08:69:20:58:c2:eb: 47:c3:9d:2a:d6:ca:89:c1:83:69:78:62:d7:98:8b:58:ea:51: 9b:0e:4f:3d:a6:13:42:2e:66:7f:75:e2:15:b4:b9:85:b4:bc: 76:fc:cd:66:f9:a2:0f:f4:b2:b5:f7:f6:9b:77:5d:f9:c9:5d: 71:6d:a6:bc:d4:59:bd:ce:46:cc:38:9f:d1:d5:ec:2b:96:8c: c5:94:90:28:37:d5:4c:aa:f6:4b:5b:88:31:df:d9:3c:09:d9: 8c:f0:94:47:b5:c5:a1:27:bf:86:5d:52:c3:08:06:d6:9e:45: 86:f1:1f:f0:e9:a2:5e:28:d3:21:8e:b7:1f:33:c4:87:86:86: e9:a6:aa:ba:6b:5c:59:1f:6c:fa:11:26:b4:0f:2f:27:9f:c6: bc:dd:ae:63:3b:d9:5b:d6:56:55:e3:a2:4e:50:ea:b2:38:0f: 1b:30:5d:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3 NDYxOTkzODMwHhcNMjUwNTEzMDMwNTA5WhcNMjUwNTIwMDMwNTA5WjAYMRYwFAYD VQQDEw02ODIyYjZlNi1kZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugDVWNnvpvo46u6iwrnJkKe1w8Ituh0txUDH4IUn0f6x+H3ro7/PAvh0NzWx aw43CKfGxJTZzlqykGEEBeL5hjnM5Q3UbChguZ4IuR6wCM4NUflzaEC1GrjcBNJj DuT9CxyonGUleTZupHw65vVpL+PmJWyKTivzyEdrUA9JKG2n8OdOHFf1saV7+pl6 dTGmt66OBJnAN0gno2O9r4AtAUcphn1uVBRSeLZeabhZQr55CWA/17qZHeMp53Wp 29axchouyH003yGS6F/b6GB7LXtlvgqroSyuDTWAJjUnG65zz6o+z0y8aIoXRdKz pOoddaannagJneq4sBPhLlLdfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4W37vN f30rZBUedd0DGicASOonMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4 UjRMbWYyWV9QQmwwWVprNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbPpZsEtrLikHWPkxV9RKiBxnYjD1g0HIVDpW7qBzexkmkRIye/OG8 BcCPvWxgc4wDbOOLiXGg0gBhDzczTisdDOCQ7kcT0XkxyOh6KGvrxICgRG0IaSBY wutHw50q1sqJwYNpeGLXmItY6lGbDk89phNCLmZ/deIVtLmFtLx2/M1m+aIP9LK1 9/abd135yV1xbaa81Fm9zkbMOJ/R1ewrlozFlJAoN9VMqvZLW4gx39k8CdmM8JRH tcWhJ7+GXVLDCAbWnkWG8R/w6aJeKNMhjrcfM8SHhobppqq6a1xZH2z6ESa0Dy8n n8a83a5jO9lb1lZV46JOUOqyOA8bMF3b -----END CERTIFICATE-----Generated at Thu May 15 03:36:27 2025 by rpki-client