$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: I83vzV5MrBg4kkMN3Y6n/e5VjgyoqJW2l6eWLO574HE= Subject key identifier: 10:8E:1B:D2:98:97:61:E3:AF:EE:28:79:CE:FD:47:51:B0:2F:54:D7 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 61 Signing time: Thu 15 May 2025 06:21:11 +0000 Manifest this update: Thu 15 May 2025 06:21:11 +0000 Manifest next update: Thu 22 May 2025 06:21:11 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: Cgj60eBLkSJmGbeO+g6lqkpkbsaUaGltyax+A1ODn3c=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: pAKMszCIjt6MmJA/GOLnpRTl7JGqEZooCz2JSaSabrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: May 15 06:21:11 2025 GMT Not After : May 22 06:21:11 2025 GMT Subject: CN=682587d7-cb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:ab:34:f5:ff:05:31:b9:10:5f:09:88:91: ee:aa:a8:67:93:1b:7a:42:f2:75:5c:58:02:b4:00: 81:a6:62:ba:e5:6e:bf:b8:39:f9:89:e8:3a:60:6e: 08:36:b5:81:c3:2c:31:1e:cb:91:f9:be:94:36:9e: 41:d1:05:27:2d:12:5d:54:97:d7:3f:64:77:94:92: b6:27:a5:69:5b:1e:fa:d5:d7:9a:52:e7:1b:58:2f: 65:2d:6e:a1:83:55:2d:9a:4c:9c:ee:86:25:1c:58: 63:20:9f:ba:6a:fa:9a:f5:51:98:c5:cc:d4:ad:69: 1a:15:36:59:27:2d:f8:0e:48:bb:4e:74:7b:4e:7a: 7d:65:30:c1:d8:dc:0e:25:be:54:79:94:1d:37:08: 54:07:58:6e:67:9a:c3:6a:46:ed:d0:71:40:3d:55: 9a:54:0a:52:a2:fd:03:83:fc:10:7f:70:78:04:a0: 62:27:30:2d:d9:ff:1f:11:7f:d5:fc:85:b1:07:cc: 96:a7:86:9d:a6:50:f1:1d:c3:a4:2f:7f:2d:cd:22: 04:54:da:9f:ed:4e:50:e1:4e:bc:c5:d9:0d:84:ca: b9:61:81:10:74:6f:66:a3:42:ce:27:23:be:87:a1: fb:ae:01:15:0b:12:1b:b2:db:81:9d:d2:57:3c:56: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8E:1B:D2:98:97:61:E3:AF:EE:28:79:CE:FD:47:51:B0:2F:54:D7 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:34:ce:38:4c:e2:f3:bc:c2:4b:18:19:4a:4c:cd:b5:2b:ff: e2:8e:c7:96:6d:2b:a1:19:e8:00:20:5d:b4:f5:01:8c:41:d4: 74:d9:d2:23:89:e6:1f:ab:bc:00:1e:89:6d:c9:b5:5d:4c:e2: 10:d9:07:12:da:d2:c7:f5:97:ee:f2:ad:ed:a7:e7:88:63:11: 92:5b:07:a6:d9:f9:1c:80:5c:47:37:80:35:d0:94:75:83:bf: d1:c5:11:68:e4:06:88:b4:e5:33:a8:d0:68:7b:ca:a5:7c:04: ee:64:fc:09:e2:d1:6b:81:c4:b8:65:51:74:f4:33:d9:44:c8: d5:c7:b5:60:a6:96:8b:b8:32:11:66:93:5a:c7:29:2f:07:95: 26:d8:a6:08:b6:aa:d8:e1:bd:f0:48:79:6f:65:ca:fc:f3:4d: 92:48:62:f3:a0:3d:0a:3f:29:d5:b0:4b:c8:92:68:6c:a4:26: 8f:76:ac:60:a3:fc:52:11:b4:53:0c:6f:b2:7a:8b:40:d6:c5: d5:23:90:7a:86:04:39:8d:56:a9:a0:f0:1e:e6:26:b5:91:ab: 81:74:cb:01:08:6a:2e:74:73:94:d9:7c:ab:e6:3f:7d:58:9a: c4:1b:1d:9a:07:d3:04:c9:f5:81:d6:9b:d9:8d:ba:c3:3a:ad: bd:ae:65:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTg3RTExMC8GA1UEBRMoQ0Y3OUM2NUY0QjU1MDEwRkIyNUNFNkM0NUI4QzkxOURC MDkzQTMyRDAeFw0yNTA1MTUwNjIxMTFaFw0yNTA1MjIwNjIxMTFaMBgxFjAUBgNV BAMTDTY4MjU4N2Q3LWNiMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Q6s09f8FMbkQXwmIke6qqGeTG3pC8nVcWAK0AIGmYrrlbr+4OfmJ6Dpgbgg2 tYHDLDEey5H5vpQ2nkHRBSctEl1Ul9c/ZHeUkrYnpWlbHvrV15pS5xtYL2UtbqGD VS2aTJzuhiUcWGMgn7pq+pr1UZjFzNStaRoVNlknLfgOSLtOdHtOen1lMMHY3A4l vlR5lB03CFQHWG5nmsNqRu3QcUA9VZpUClKi/QOD/BB/cHgEoGInMC3Z/x8Rf9X8 hbEHzJanhp2mUPEdw6Qvfy3NIgRU2p/tTlDhTrzF2Q2EyrlhgRB0b2ajQs4nI76H ofuuARULEhuy24Gd0lc8VnhbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEI4b0piX YeOv7ih5zv1HUbAvVNcwHwYDVR0jBBgwFoAUz3nGX0tVAQ+yXObEW4yRnbCToy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODdFLzg0MjhCOUU2QTFD RjExRUY4NzhFNjA2MUM0RjlBRTAyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejNuR1gwdFZBUS15WE9iRVc0eVJuYkNUb3kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF ODdFLzg0MjhCOUU2QTFDRjExRUY4NzhFNjA2MUM0RjlBRTAyL3ozbkdYMHRWQVEt eVhPYkVXNHlSbmJDVG95MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABw0zjhM4vO8wksYGUpMzbUr/+KOx5ZtK6EZ6AAgXbT1AYxB1HTZ0iOJ 5h+rvAAeiW3JtV1M4hDZBxLa0sf1l+7yre2n54hjEZJbB6bZ+RyAXEc3gDXQlHWD v9HFEWjkBoi05TOo0Gh7yqV8BO5k/Ani0WuBxLhlUXT0M9lEyNXHtWCmlou4MhFm k1rHKS8HlSbYpgi2qtjhvfBIeW9lyvzzTZJIYvOgPQo/KdWwS8iSaGykJo92rGCj /FIRtFMMb7J6i0DWxdUjkHqGBDmNVqmg8B7mJrWRq4F0ywEIai50c5TZfKvmP31Y msQbHZoH0wTJ9YHWm9mNusM6rb2uZas= -----END CERTIFICATE-----Generated at Thu May 15 19:02:13 2025 by rpki-client