$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json) Hash identifier: knuVkuU6Nb8KfdHb0Dbl1C58FrKxSoTtFdPUGkRQzIc= Subject key identifier: E1:8A:B3:4A:42:AE:8A:CB:78:9E:43:A9:75:AC:0E:A2:3C:8C:F6:A1 Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Certificate serial: 1838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft Manifest number: 1821 Signing time: Mon 12 May 2025 16:28:12 +0000 Manifest this update: Mon 12 May 2025 16:28:12 +0000 Manifest next update: Mon 19 May 2025 16:28:12 +0000 Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: HZ/VVLW5WiD+5f6sYd3HmebQS9EzPI1ZE0OpmcK7N1U=) 2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: 8IxMRzh5qaWGfk62iyhaPPZa1vR76AhV579NwWq7910=) 3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: we20c5hV82a760VbWZeMcxrJkqzrZ+m6YkUxwCa2cqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6200 (0x1838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Validity Not Before: May 12 16:28:12 2025 GMT Not After : May 19 16:28:12 2025 GMT Subject: CN=6822219c-4ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:31:06:bc:22:e3:3d:49:17:94:4d:37:50: d0:36:b4:53:ac:33:02:74:03:78:9d:e8:81:72:e6: 49:90:8b:cc:de:0f:71:2d:41:7d:c1:35:5a:de:76: 5e:43:2f:ba:4f:b2:6b:94:93:5c:6c:f1:1b:a0:b3: b1:7e:f8:1f:48:51:b3:bc:60:2b:fc:67:83:f7:87: ac:2c:25:b1:3d:86:38:2f:e1:20:a4:6f:fb:9b:7b: 62:33:2a:c1:53:e2:f4:e0:7f:2c:64:6a:3b:d5:47: dc:05:59:2a:dc:09:42:b1:6c:e7:33:f4:79:14:94: a1:58:e2:df:fd:d8:86:d8:15:3c:97:a5:23:d4:3c: 56:ab:24:35:6b:d8:99:9c:d1:8c:00:31:0b:e7:d8: b9:09:37:5c:b6:f5:ef:ba:8a:3e:a2:d5:70:e8:01: 5c:99:7a:f1:a5:ff:38:09:57:ac:fe:9f:91:a1:70: 99:e5:2a:2f:8e:34:37:02:1d:4e:6f:ae:72:99:3c: 9e:a1:f3:d3:3f:2c:3d:cf:bd:ed:6c:28:a8:c5:22: 73:0d:52:a6:aa:84:0c:d5:05:e9:d7:8a:a6:bb:d5: d0:bb:3b:92:44:ad:4a:d3:6d:f7:84:da:3a:42:d6: 36:e2:84:d2:9d:a4:e2:25:0c:d9:99:4e:2b:58:e3: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8A:B3:4A:42:AE:8A:CB:78:9E:43:A9:75:AC:0E:A2:3C:8C:F6:A1 X509v3 Authority Key Identifier: keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7c:1c:7b:cf:10:e3:be:15:37:ea:03:4a:8e:10:8a:0e:9a: a0:77:14:0a:8b:4f:11:2e:5d:20:2c:aa:75:a6:9b:09:00:c8: 11:0a:df:b8:83:1a:5f:14:8c:e9:28:b4:a2:61:c0:c1:6a:9f: b8:c0:d7:3b:c3:d1:c4:0d:6d:91:1a:36:aa:26:d4:36:cc:4d: 88:d6:66:29:3d:be:54:50:41:d6:b8:7d:37:89:3b:39:f1:88: 7b:28:09:bf:d1:38:d4:b1:06:58:ec:0a:b5:50:8e:39:13:8d: c2:4e:e0:90:8d:1c:70:cf:b5:ca:55:2b:91:dd:40:10:16:ac: 69:69:53:69:79:af:f5:30:e4:7a:b5:0c:e9:c8:41:a6:c4:fe: f9:32:25:8a:e9:13:2b:8f:b9:ae:e3:c1:cc:05:d8:8a:04:27: 01:5d:23:69:b1:6e:69:72:16:d7:14:2e:ba:ce:8d:7c:de:f5: 88:1a:61:ec:f1:46:23:99:7c:4b:5a:c9:45:ca:bc:be:48:6f: f0:73:59:72:1c:28:16:59:61:e7:12:9f:25:4a:55:e8:9e:81: 74:aa:3b:67:1f:14:ee:51:d5:c2:c2:f4:16:47:a9:4b:61:fc: b8:e1:2c:4f:f4:e1:96:d7:9e:a4:01:0d:11:58:0d:22:59:8c: 8a:c1:45:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw MTgwMkE5NUMwHhcNMjUwNTEyMTYyODEyWhcNMjUwNTE5MTYyODEyWjAYMRYwFAYD VQQDEw02ODIyMjE5Yy00YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46YxBrwi4z1JF5RNN1DQNrRTrDMCdAN4neiBcuZJkIvM3g9xLUF9wTVa3nZe Qy+6T7JrlJNcbPEboLOxfvgfSFGzvGAr/GeD94esLCWxPYY4L+EgpG/7m3tiMyrB U+L04H8sZGo71UfcBVkq3AlCsWznM/R5FJShWOLf/diG2BU8l6Uj1DxWqyQ1a9iZ nNGMADEL59i5CTdctvXvuoo+otVw6AFcmXrxpf84CVes/p+RoXCZ5SovjjQ3Ah1O b65ymTyeofPTPyw9z73tbCioxSJzDVKmqoQM1QXp14qmu9XQuzuSRK1K0233hNo6 QtY24oTSnaTiJQzZmU4rWONBrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGKs0pC rorLeJ5DqXWsDqI8jPahMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVENC9CRUM5QUM4MkIwQkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4 Tk8wUnRHcVFyaklCZ0NxVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJfBx7zxDjvhU36gNKjhCKDpqgdxQKi08RLl0gLKp1ppsJAMgRCt+4 gxpfFIzpKLSiYcDBap+4wNc7w9HEDW2RGjaqJtQ2zE2I1mYpPb5UUEHWuH03iTs5 8Yh7KAm/0TjUsQZY7Aq1UI45E43CTuCQjRxwz7XKVSuR3UAQFqxpaVNpea/1MOR6 tQzpyEGmxP75MiWK6RMrj7mu48HMBdiKBCcBXSNpsW5pchbXFC66zo183vWIGmHs 8UYjmXxLWslFyry+SG/wc1lyHCgWWWHnEp8lSlXonoF0qjtnHxTuUdXCwvQWR6lL Yfy44SxP9OGW156kAQ0RWA0iWYyKwUU6 -----END CERTIFICATE-----Generated at Wed May 14 09:59:32 2025 by rpki-client