$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: aayDQiRt8DwliU7F0vQk9eBPr8mvmq8p+AoI8SbOYyk= Subject key identifier: A4:7D:52:91:44:35:A7:57:D2:08:C8:1B:3F:E6:7E:6D:90:B8:31:98 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 0686 Signing time: Fri 16 May 2025 23:29:22 +0000 Manifest this update: Fri 16 May 2025 23:29:22 +0000 Manifest next update: Fri 23 May 2025 23:29:22 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: aa/m4vfQ7KKc3UOaUOoekOhiNupaGjaVg3t4lDkVICs=) 2: A37112BA16ED11F0B635C562C4F9AE02.roa (hash: rZFiavbY0PAbr2H7+gTs3U67Eq+r4u4v2zqFhLKgsN8=) 3: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: QGMsCxHtn5F+EfUp5uawCMMpfTHEMExN77Hj2Muh93w=) 4: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: +qzxrrbDAbjm5oGRWL2M9bgOfHEjl4iskK+N/J81qak=) 5: 7145DE8C69CE11EF9C04450AC4F9AE02.roa (hash: hSCKbETyEcrfwdR62qLCMoskeNw2yhn+vArByqXZY/4=) 6: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: JtKKxCXridSwy6SJ7Mx9WW/156HamhanSTK24tMN9c0=) 7: 9CDF55D87D6A11EEA59E8C3FC4F9AE02.roa (hash: mDnMAOX1D7nrgDR/qLwtv3995W8fLU9iXorAjw/Tyy8=) 8: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 5LHlWW/HIHhEuVs7lyfpyvCjCxzDLd5MFI+tQXgroXY=) 9: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: i9lNfJhnnW8QvG2a+A3cDgHR8+veJShI1zYY4cZGLCQ=) 10: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: jbI9nyIyGvuuwD7R5pJI5zo/f8yqDWKnyeAgYYtwurY=) 11: 2294C59616EE11F09E906E12C4F9AE02.roa (hash: TAFLRnpDkPX0/1thH6OXxUqfDFzb/4YZ/ueijGni7sU=) 12: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: /zYRYz7hw59PN1H99rZM8/IUYjLUkVgpuVofdR3Vzlc=) 13: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: 3uteNlhKYK6907KykR8gAU+oHBxNf/k9LdbZlDl3X5w=) 14: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: VNTbmafGr2Ck68du6AOcxR3XdT37BiEBd7yF9e6N088=) 15: 2C928134155711F099BFE331C4F9AE02.roa (hash: 47lhJb8uhRs8ieTedrS6V4SnBxu8DNcKDZI2uXa5ZQU=) 16: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: S4VX1CO0OF3+Ep6xnyvx/Uv1NHR9lS+F0nBxbNUE0l8=) 17: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 4PiyophquWuYIG0+K5ceNOm7ogfnJHTsjtfCsP+bCrw=) 18: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: wzpW0H2xl9IMiS2MU8LoO/Pkm6/TTCP+V9WTTRyG49s=) 19: DC5ECE1816EE11F097A64F85C4F9AE02.roa (hash: 3I5NuV8UPYvfsF04ShxS5VeyRR5Sv1yc4MFcSv253Dw=) 20: 9EB8A27A675C11EE81835581C4F9AE02.roa (hash: OEqTkDyc1rPh8C5CXLgkDLbM+SU7rHYFTB3EDRvvg8I=) 21: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: WvwQUH+4dWCkhf9AYHECGHhhbwO1gaxV2Z7Th1HDWV0=) 22: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4=) 23: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: B3UEiEYw2WKPOdrQO2wqkgon16D3Efz81MuIIEKCBB8=) 24: 222E2FAC16EE11F09E906E12C4F9AE02.roa (hash: DoFm6RaZkUNcJGWZuZ/N3Vw0x/Ki25o4uY7ZTpQ6Svw=) 25: 8FC3656CCE6B11EF90AD9413C4F9AE02.roa (hash: gZtWAKAUMwr/x0EQVymUoJL6ChkEmm3s+W09M5NLn7E=) 26: 3DC39FDAE82D11EF86C76B75C4F9AE02.roa (hash: CB42rPIllKFi14OnASR8kG8ELcV0c2sBojJ+pQ7hSCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: May 16 23:29:22 2025 GMT Not After : May 23 23:29:22 2025 GMT Subject: CN=6827ca52-6a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:1b:15:b6:00:03:b0:17:10:72:83:d8:d5: 5e:b1:0f:43:f9:00:ca:0f:74:60:82:7c:be:a6:48: f4:a0:f9:da:ef:11:da:c2:34:c7:f9:be:f2:e2:3c: 51:06:dd:35:f5:44:15:7a:b6:9b:51:84:f5:55:b7: 6c:d6:38:56:37:c0:49:be:c5:af:05:aa:a0:e5:f6: 1c:22:fa:2b:d0:59:84:65:32:01:20:82:59:5f:f8: 55:47:bd:f7:a1:02:b0:89:0c:d3:bf:e2:6f:41:3d: c5:2e:77:22:17:f5:f7:d6:2c:d7:a6:4d:91:ed:ca: 6b:cc:6a:df:08:94:fa:20:fd:ba:15:c2:3b:95:01: c6:33:e4:db:7d:48:48:50:3c:ed:c9:d2:0c:f5:74: 08:99:0b:d3:b4:36:47:85:13:32:04:cf:b3:e2:4f: 50:47:6c:9d:66:f5:03:50:18:93:e9:6a:67:ef:9e: a0:8d:a0:70:26:de:80:33:c2:59:a1:fb:bd:e4:d7: 90:6c:20:55:76:60:ef:72:61:be:6b:bb:44:77:47: b8:4c:e3:79:9a:8f:30:ee:e8:e7:a9:d8:ba:66:a8: 97:45:5d:50:17:01:84:5a:9c:09:69:f4:86:d5:f6: 17:0e:45:a3:7a:89:44:82:1d:0b:d7:37:89:51:5c: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7D:52:91:44:35:A7:57:D2:08:C8:1B:3F:E6:7E:6D:90:B8:31:98 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:51:34:83:86:85:1a:5e:9b:5d:89:6d:ec:6b:8e:3c:42:97: 2e:92:39:ea:02:1e:f9:d8:69:c3:88:21:15:69:88:aa:e2:ad: 4c:2c:7d:52:f8:c0:76:5c:f5:62:4a:66:23:c9:4e:47:df:20: 6c:30:7b:53:67:50:01:66:47:29:40:1e:56:41:aa:ca:10:25: 7c:fc:bf:69:05:67:1c:0e:c2:89:31:5c:75:cb:f6:bb:a8:b7: 5d:09:4d:35:61:68:2c:ef:59:db:af:8b:a8:06:1a:ba:82:0b: 45:3f:6b:b3:8f:2a:94:68:e1:c1:26:60:fa:c1:c2:cc:59:54: ec:73:e7:8e:c4:44:6b:e7:97:47:50:12:9d:21:23:ff:ad:d7: 61:cb:27:84:86:b9:6c:56:9b:5e:6f:3a:19:dc:42:cf:fe:c4: 9c:0b:95:41:48:c5:4d:90:0f:cc:4b:6b:79:11:55:4d:20:a8: 49:49:fb:5f:2a:bc:09:7f:b7:6d:ef:03:c3:f0:e8:ff:8e:af: 96:54:ee:65:2c:44:f0:62:b8:59:0f:9b:95:ad:a5:aa:9f:a1: b7:a3:4f:88:8c:68:64:08:75:71:74:6e:af:e5:5e:02:91:96: 65:36:46:02:d4:65:30:10:be:2e:bf:a4:2e:b8:3c:14:6e:7b: aa:c3:29:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNTE2MjMyOTIyWhcNMjUwNTIzMjMyOTIyWjAYMRYwFAYD VQQDEw02ODI3Y2E1Mi02YTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwekbFbYAA7AXEHKD2NVesQ9D+QDKD3Rggny+pkj0oPna7xHawjTH+b7y4jxR Bt019UQVerabUYT1Vbds1jhWN8BJvsWvBaqg5fYcIvor0FmEZTIBIIJZX/hVR733 oQKwiQzTv+JvQT3FLnciF/X31izXpk2R7cprzGrfCJT6IP26FcI7lQHGM+TbfUhI UDztydIM9XQImQvTtDZHhRMyBM+z4k9QR2ydZvUDUBiT6Wpn756gjaBwJt6AM8JZ ofu95NeQbCBVdmDvcmG+a7tEd0e4TON5mo8w7ujnqdi6ZqiXRV1QFwGEWpwJafSG 1fYXDkWjeolEgh0L1zeJUVzlqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKR9UpFE NadX0gjIGz/mfm2QuDGYMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQUTSDhoUaXptdiW3sa448QpcukjnqAh752GnDiCEVaYiq4q1MLH1S +MB2XPViSmYjyU5H3yBsMHtTZ1ABZkcpQB5WQarKECV8/L9pBWccDsKJMVx1y/a7 qLddCU01YWgs71nbr4uoBhq6ggtFP2uzjyqUaOHBJmD6wcLMWVTsc+eOxERr55dH UBKdISP/rddhyyeEhrlsVptebzoZ3ELP/sScC5VBSMVNkA/MS2t5EVVNIKhJSftf KrwJf7dt7wPD8Oj/jq+WVO5lLETwYrhZD5uVraWqn6G3o0+IjGhkCHVxdG6v5V4C kZZlNkYC1GUwEL4uv6QuuDwUbnuqwynh -----END CERTIFICATE-----Generated at Sat May 17 10:41:01 2025 by rpki-client