$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: slH/i6pm7fsEGAPtpp4/uWAFhciFqPd2ub980qPkjAk= Subject key identifier: CF:84:5F:A5:65:9E:1D:81:72:A7:97:D3:F8:42:CA:30:95:81:8F:20 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 243B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 242C Signing time: Fri 16 May 2025 16:01:10 +0000 Manifest this update: Fri 16 May 2025 16:01:10 +0000 Manifest next update: Fri 23 May 2025 16:01:10 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: XxGPqx1KEqPvNoZGd2fPD6DnEfCbbGbcn7NsPcsSOU4=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: 1XjlmfVjZ+/g856KRJ7NU7PVXN/iYERguNmyY4VTdYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9275 (0x243b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: May 16 16:01:10 2025 GMT Not After : May 23 16:01:10 2025 GMT Subject: CN=68276146-6ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:94:73:e4:eb:5b:2e:42:d7:ee:3c:6b:c0: 10:d9:ef:39:40:0c:16:e5:2d:a2:c9:07:6b:76:77: aa:f0:95:c9:27:65:14:35:2b:d1:66:55:89:02:7d: e9:8a:e4:4d:75:8e:d8:3c:95:84:3e:75:ff:95:7a: 2f:88:2a:49:fe:d5:a8:00:29:91:bf:f2:4d:9e:2a: 03:d7:78:99:2a:24:11:a3:8a:17:db:0a:a1:a5:97: f8:06:f2:8e:b5:4f:b1:1f:db:a5:e9:aa:d0:6b:e6: fb:50:9c:a7:b5:35:d3:eb:b5:ab:7b:93:7c:f2:5d: cb:c4:f5:12:e1:97:89:16:21:9b:47:e4:05:4e:03: af:7a:77:5d:ed:6c:52:3a:a1:df:99:c7:f1:df:0b: 50:90:20:30:97:c9:58:b5:51:91:b0:7b:82:e6:e4: 5e:45:53:16:97:e6:d6:11:a9:c4:6b:8d:d3:e9:7c: a7:80:fd:b1:94:04:19:db:4b:64:2e:c8:aa:4b:22: cb:07:32:7e:f7:9c:83:d2:85:24:3b:05:17:ab:fc: ba:33:52:d1:f4:d2:3d:e8:09:2a:0a:63:52:85:a6: 13:5d:3a:24:7b:07:ad:b5:eb:32:28:28:2e:b9:d1: 49:98:02:ae:f4:78:d2:0a:be:8b:75:77:fe:59:9d: d6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:84:5F:A5:65:9E:1D:81:72:A7:97:D3:F8:42:CA:30:95:81:8F:20 X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:37:5a:f8:6c:63:55:b7:e7:0c:7f:83:c0:9f:99:ae:cd: 7c:e8:7a:07:d4:d7:5a:5e:c7:12:da:77:24:bf:8f:0f:38:ee: 59:54:0a:42:f6:93:63:26:03:e8:97:12:86:d9:c3:2b:76:ec: 3a:6e:09:4b:4e:a3:07:ec:74:93:67:35:f3:e6:d7:db:68:45: 74:7f:4c:69:7b:6b:87:0e:79:a8:de:83:65:c9:2b:21:e5:50: 16:2c:35:a7:55:51:1a:48:3c:86:c1:d5:f2:80:21:17:4b:04: f1:e1:b0:64:7f:86:0b:64:8b:b9:98:91:19:d5:79:e3:d5:b7: de:d5:0d:b4:26:7c:91:8f:66:6c:67:17:d1:c1:f1:db:e7:aa: 6e:ff:a1:e2:32:9b:cf:9f:0f:a9:2e:b2:8a:56:10:12:7b:33: f8:6f:6b:01:cc:89:8a:8b:f9:cb:dd:e3:64:32:9d:71:18:7f: 07:f8:df:6f:7f:1d:b1:ec:f5:21:65:3a:c4:6d:21:b8:67:d7: 8c:7a:f9:05:52:46:25:3e:30:a4:8f:d5:f6:ff:f5:2a:2c:21: b2:d5:da:af:35:bb:f1:18:47:95:21:f6:a0:eb:6c:59:41:a4: 06:54:35:7e:93:f4:d8:65:a0:5b:77:c9:2d:6f:d9:5c:7e:c1: 17:d4:c1:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUwNTE2MTYwMTEwWhcNMjUwNTIzMTYwMTEwWjAYMRYwFAYD VQQDEw02ODI3NjE0Ni02ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bCUc+TrWy5C1+48a8AQ2e85QAwW5S2iyQdrdneq8JXJJ2UUNSvRZlWJAn3p iuRNdY7YPJWEPnX/lXoviCpJ/tWoACmRv/JNnioD13iZKiQRo4oX2wqhpZf4BvKO tU+xH9ul6arQa+b7UJyntTXT67Wre5N88l3LxPUS4ZeJFiGbR+QFTgOvendd7WxS OqHfmcfx3wtQkCAwl8lYtVGRsHuC5uReRVMWl+bWEanEa43T6XyngP2xlAQZ20tk LsiqSyLLBzJ+95yD0oUkOwUXq/y6M1LR9NI96AkqCmNShaYTXTokewettesyKCgu udFJmAKu9HjSCr6LdXf+WZ3WQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+EX6Vl nh2BcqeX0/hCyjCVgY8gMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+Tda+GxjVbfnDH+DwJ+Zrs186HoH1NdaXscS2nckv48POO5ZVApC 9pNjJgPolxKG2cMrduw6bglLTqMH7HSTZzXz5tfbaEV0f0xpe2uHDnmo3oNlySsh 5VAWLDWnVVEaSDyGwdXygCEXSwTx4bBkf4YLZIu5mJEZ1Xnj1bfe1Q20JnyRj2Zs ZxfRwfHb56pu/6HiMpvPnw+pLrKKVhASezP4b2sBzImKi/nL3eNkMp1xGH8H+N9v fx2x7PUhZTrEbSG4Z9eMevkFUkYlPjCkj9X2//UqLCGy1dqvNbvxGEeVIfag62xZ QaQGVDV+k/TYZaBbd8ktb9lcfsEX1MFz -----END CERTIFICATE-----Generated at Sat May 17 04:26:03 2025 by rpki-client