$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: c9g3EE44HW9aXSPBJWzZHRCfnfPkzMzYg4Y+V6c0j78= Subject key identifier: C9:9D:F8:58:4A:DA:6E:DB:B0:10:DE:25:72:64:B4:9C:94:93:B6:97 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 46 Signing time: Sun 11 May 2025 06:06:35 +0000 Manifest this update: Sun 11 May 2025 06:06:34 +0000 Manifest next update: Sun 18 May 2025 06:06:34 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: 1/u2T+5+PFj6pwv1FLugYww26DKiv43Q5/5tmZC05uY=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: May 11 06:06:34 2025 GMT Not After : May 18 06:06:34 2025 GMT Subject: CN=68203e6a-f417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8d:8a:dd:06:54:89:16:2d:ae:f3:b2:e8:4b: e5:84:9a:83:12:12:85:57:08:96:26:bb:db:94:0a: 2b:35:47:21:f0:33:19:78:16:02:a0:1d:12:88:84: 13:45:10:0f:40:d7:00:b1:88:8d:d9:0f:85:5b:d9: d1:41:06:e6:6c:2b:e0:60:e1:ca:01:34:75:68:88: 13:57:7b:8d:b3:50:5b:39:db:3e:77:69:74:34:9f: 04:26:b4:56:1e:56:b0:22:56:99:39:41:b9:68:29: b1:c2:e9:6c:5d:2a:28:9d:ea:e4:0d:47:b9:af:37: 92:d8:e8:25:99:71:c2:20:6d:5d:23:ff:af:da:d3: 24:8e:ae:fd:66:27:0f:b9:db:7b:30:8b:39:d1:93: 63:0d:b0:af:53:d0:9c:e6:fa:0f:1f:f2:12:ba:79: 81:e3:80:40:36:67:19:d0:93:82:b9:90:fb:5d:95: 60:e0:60:20:20:97:4d:1d:37:3f:7b:d7:48:05:36: 9a:5d:52:81:30:78:67:b0:c7:f6:81:26:2e:fd:55: e1:ee:80:60:20:57:4f:52:dc:0e:83:35:ab:3d:5d: b6:09:6d:85:c2:a9:33:35:9c:ef:5c:11:f6:0e:5d: ab:86:39:2f:12:78:11:90:5d:ef:9b:99:dd:70:e7: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9D:F8:58:4A:DA:6E:DB:B0:10:DE:25:72:64:B4:9C:94:93:B6:97 X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:cf:64:66:62:dc:30:7c:83:36:95:5c:44:e1:0d:13:4a:4c: 12:dd:c9:43:a2:65:41:72:8f:03:02:59:a2:f3:c3:d4:da:9d: 2f:be:8b:b4:64:76:ab:fd:9e:8d:53:43:52:4d:9b:89:ce:dd: 3d:2b:01:2b:95:4d:9f:75:a6:8a:5e:85:e4:37:56:c2:bf:e9: 9f:c7:ff:e0:1f:ee:97:8c:3a:c0:79:03:ad:46:96:a0:31:cf: 99:d8:31:01:eb:4d:dd:dd:9e:80:08:78:b9:3f:9b:ba:79:c7: 03:7c:70:47:61:df:9e:eb:2f:3a:1c:de:4f:da:82:f5:96:f3: 57:52:da:09:3f:b4:0f:b7:39:b8:af:0d:65:c1:17:3f:55:93: 03:f6:98:c2:22:9b:bf:14:b7:a5:f8:c0:ee:22:0a:b7:51:99: 08:be:63:19:b4:51:09:5f:92:d6:20:b5:d2:74:b1:a2:eb:95: d9:2d:d7:9a:4d:37:01:bd:7b:37:3b:f6:60:33:ba:59:45:4e: af:98:fe:f4:04:50:15:0c:36:53:b2:bd:7c:0d:fe:fe:8d:14: 1b:b5:fc:5b:bf:a8:65:7c:7a:e1:9e:59:7d:08:81:0b:99:40: 8b:1b:1e:20:a8:f6:7e:99:e6:40:26:7d:19:dd:0d:74:0a:d9: 4c:f6:5a:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoNjVBOEQwOEIyRUM4RjQyRDQzQjlBQTdBNDIzNTE3MkJC N0VEMTY2NTAeFw0yNTA1MTEwNjA2MzRaFw0yNTA1MTgwNjA2MzRaMBgxFjAUBgNV BAMTDTY4MjAzZTZhLWY0MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsjYrdBlSJFi2u87LoS+WEmoMSEoVXCJYmu9uUCis1RyHwMxl4FgKgHRKIhBNF EA9A1wCxiI3ZD4Vb2dFBBuZsK+Bg4coBNHVoiBNXe42zUFs52z53aXQ0nwQmtFYe VrAiVpk5QbloKbHC6WxdKiid6uQNR7mvN5LY6CWZccIgbV0j/6/a0ySOrv1mJw+5 23swiznRk2MNsK9T0Jzm+g8f8hK6eYHjgEA2ZxnQk4K5kPtdlWDgYCAgl00dNz97 10gFNppdUoEweGewx/aBJi79VeHugGAgV09S3A6DNas9XbYJbYXCqTM1nO9cEfYO XauGOS8SeBGQXe+bmd1w56VBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyZ34WEra btuwEN4lcmS0nJSTtpcwHwYDVR0jBBgwFoAUZajQiy7I9C1Duap6QjUXK7ftFmUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzY0QkE0QkE4QzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFqUWl5N0k5QzFEdWFwNlFqVVhLN2Z0Rm1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzY0QkE0QkE4QzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMx RHVhcDZRalVYSzdmdEZtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACPPZGZi3DB8gzaVXEThDRNKTBLdyUOiZUFyjwMCWaLzw9TanS++i7Rk dqv9no1TQ1JNm4nO3T0rASuVTZ91popeheQ3VsK/6Z/H/+Af7peMOsB5A61GlqAx z5nYMQHrTd3dnoAIeLk/m7p5xwN8cEdh357rLzoc3k/agvWW81dS2gk/tA+3Obiv DWXBFz9VkwP2mMIim78Ut6X4wO4iCrdRmQi+Yxm0UQlfktYgtdJ0saLrldkt15pN NwG9ezc79mAzullFTq+Y/vQEUBUMNlOyvXwN/v6NFBu1/Fu/qGV8euGeWX0IgQuZ QIsbHiCo9n6Z5kAmfRndDXQK2Uz2WmM= -----END CERTIFICATE-----Generated at Sun May 11 22:37:29 2025 by rpki-client