$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: fEXfADqN8A7PG94ahwxMtxHKOyOUQ/WW5z43Ns0gIFw= Subject key identifier: EB:E0:E4:33:2F:29:3B:6F:11:52:09:19:3F:7C:93:5E:08:9C:02:DC Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 026C Signing time: Sat 17 May 2025 01:57:15 +0000 Manifest this update: Sat 17 May 2025 01:57:14 +0000 Manifest next update: Sat 24 May 2025 01:57:14 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: Tl5IaqlvFCOB4B5xuV7tNB+45+E+harj76j+QWqLKFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: May 17 01:57:14 2025 GMT Not After : May 24 01:57:14 2025 GMT Subject: CN=6827ecfa-3644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:53:2b:8f:0c:36:89:dc:95:10:0b:ce:ba: 55:cf:87:d2:b5:0a:19:9e:75:f9:b5:76:2f:b5:57: f8:8c:df:bd:c7:2b:ca:d4:81:4a:60:ef:3d:cf:14: 81:15:10:78:ec:22:06:94:53:d3:61:f7:5f:3a:36: 62:e8:c0:33:ff:44:a0:81:58:3e:da:c9:74:d3:95: 65:63:fa:fa:d6:71:6a:9a:47:03:7d:30:a1:e3:67: bd:1a:c8:ea:da:a7:c1:c8:f9:ff:21:d3:fb:58:5b: f3:32:53:67:5e:60:46:68:da:3f:ac:71:94:0e:26: 27:2b:7f:e1:93:b8:7b:0c:93:78:a7:48:1a:dd:88: ea:a2:06:ac:ae:53:ea:f5:ab:f4:0a:0a:f9:b8:1c: 05:b3:13:51:ad:eb:7d:1e:4c:d5:33:de:23:eb:1b: 72:da:0f:66:ed:ef:df:90:e5:fa:b7:ab:83:95:c1: 9e:b5:a1:44:0c:c0:24:ac:d0:1c:a1:ae:b3:1c:e9: bd:df:e7:21:90:0c:f6:c7:32:67:32:38:a8:0f:61: a9:9d:e3:3c:3b:40:91:6b:28:d1:a7:69:e6:8e:c1: 2a:fd:18:22:a6:ed:af:1f:a9:c6:19:b4:57:80:8b: 0c:16:0e:ed:76:6a:69:72:55:5f:15:78:97:fc:df: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E0:E4:33:2F:29:3B:6F:11:52:09:19:3F:7C:93:5E:08:9C:02:DC X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0c:18:89:33:27:69:cd:54:a7:65:dc:6c:7e:c2:e3:95:65: ae:3d:e7:96:93:cb:31:ab:4f:da:8b:57:ac:3b:71:ef:42:3f: a2:c3:86:96:ea:16:e4:33:25:0f:54:b3:8f:bc:8f:b4:09:6f: 42:1a:23:a1:81:a0:3d:65:5a:d5:1a:01:d9:93:92:e5:04:0c: 97:f4:6f:96:18:51:f6:ed:52:fe:00:7d:1c:20:86:35:db:2b: d0:9d:9a:88:32:a5:bb:f3:d6:71:a5:32:4a:5a:6b:40:f5:b6: d7:bb:d9:c8:4a:d5:e8:9b:62:23:01:0a:d6:d9:8f:ec:31:70: cb:95:cf:c4:3a:3c:19:f3:57:7e:85:d2:01:61:52:d8:c7:7e: c7:59:23:fb:30:57:4c:00:ed:fa:e6:c9:69:a6:63:ff:9a:d7: 83:85:35:65:8a:19:5e:2a:bc:a1:cf:3e:9f:23:02:fc:64:bc: 9c:2f:35:44:fd:3f:30:a7:9c:40:8b:fe:a8:6d:fa:d1:10:5a: d4:5c:99:d7:6f:33:c5:5c:5a:0f:f6:1a:a6:1c:c6:a2:17:33: 7b:ee:4b:36:74:d0:a7:bd:06:4f:bd:af:e9:0e:4d:33:6e:1b: 0d:bb:d0:89:14:01:b1:96:71:0a:7b:3f:cd:6c:f3:16:4a:d1: a1:32:95:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUwNTE3MDE1NzE0WhcNMjUwNTI0MDE1NzE0WjAYMRYwFAYD VQQDEw02ODI3ZWNmYS0zNjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kNTK48MNonclRALzrpVz4fStQoZnnX5tXYvtVf4jN+9xyvK1IFKYO89zxSB FRB47CIGlFPTYfdfOjZi6MAz/0SggVg+2sl005VlY/r61nFqmkcDfTCh42e9Gsjq 2qfByPn/IdP7WFvzMlNnXmBGaNo/rHGUDiYnK3/hk7h7DJN4p0ga3YjqogasrlPq 9av0Cgr5uBwFsxNRret9HkzVM94j6xty2g9m7e/fkOX6t6uDlcGetaFEDMAkrNAc oa6zHOm93+chkAz2xzJnMjioD2GpneM8O0CRayjRp2nmjsEq/Rgipu2vH6nGGbRX gIsMFg7tdmppclVfFXiX/N+PGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvg5DMv KTtvEVIJGT98k14InALcMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8DBiJMydpzVSnZdxsfsLjlWWuPeeWk8sxq0/ai1esO3HvQj+iw4aW 6hbkMyUPVLOPvI+0CW9CGiOhgaA9ZVrVGgHZk5LlBAyX9G+WGFH27VL+AH0cIIY1 2yvQnZqIMqW789ZxpTJKWmtA9bbXu9nIStXom2IjAQrW2Y/sMXDLlc/EOjwZ81d+ hdIBYVLYx37HWSP7MFdMAO365slppmP/mteDhTVlihleKryhzz6fIwL8ZLycLzVE /T8wp5xAi/6obfrREFrUXJnXbzPFXFoP9hqmHMaiFzN77ks2dNCnvQZPva/pDk0z bhsNu9CJFAGxlnEKez/NbPMWStGhMpXP -----END CERTIFICATE-----Generated at Sat May 17 05:45:40 2025 by rpki-client