$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: YBeSPueg5OVUe8Yb/5OvdgJxN5C9JdYY/JZsgYc+5Cw= Subject key identifier: 73:E0:25:ED:12:18:F4:15:51:32:E7:C5:8A:28:42:5D:00:BB:F9:D1 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 2E Signing time: Tue 13 May 2025 06:55:38 +0000 Manifest this update: Tue 13 May 2025 06:55:37 +0000 Manifest next update: Tue 20 May 2025 06:55:37 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: F7dfur161I3tblyJ34OA9TN3wuaqxVFj86UeXtsZCYQ=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: May 13 06:55:37 2025 GMT Not After : May 20 06:55:37 2025 GMT Subject: CN=6822ecea-07e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:de:45:fe:29:6f:dc:3b:93:65:43:c9:45: c6:e5:68:01:de:f4:f8:0b:92:c3:86:c6:d1:51:71: a7:8f:95:d3:f9:86:66:6b:7d:9e:e7:4d:eb:19:51: de:84:1f:45:d9:7c:04:d3:fd:eb:d3:d2:00:1b:15: 04:e5:c7:86:e9:44:6d:a3:85:61:e9:f0:32:35:d4: 26:dc:ec:e9:97:08:c6:98:47:0e:99:1b:38:7a:ab: 7f:2c:2f:60:9f:02:7e:1b:d1:14:ca:71:86:bc:e3: 2e:c8:fd:bf:de:53:37:c8:73:42:dd:5d:3f:a8:72: ef:57:59:9c:7d:af:e7:4d:e4:00:f2:f9:39:17:ad: 70:41:34:3c:3e:f3:9f:6c:c7:8d:2b:fe:36:b6:97: 9e:61:92:66:ab:f8:98:e8:57:ec:0e:17:04:87:78: df:df:49:a0:0c:2a:19:87:9f:f9:5b:1c:d4:49:81: 34:d4:42:39:b5:ae:c7:ba:56:55:80:23:6c:be:79: ec:a2:2b:75:80:5e:13:32:14:64:02:85:bd:49:fd: ad:d9:4a:93:9f:e5:99:7b:b5:28:c8:a4:68:8e:e7: 6e:8a:45:59:db:97:0b:f0:08:5f:a5:36:af:ce:c7: 8f:e6:92:e7:b2:19:02:4e:cc:0a:db:9d:62:68:82: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E0:25:ED:12:18:F4:15:51:32:E7:C5:8A:28:42:5D:00:BB:F9:D1 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:ef:c6:bc:82:92:c8:6e:dc:f0:1f:d8:03:9a:d6:c6:4a:25: f1:3a:b7:f4:ec:18:6a:4e:dc:f9:1e:36:5a:ac:b7:ee:a0:07: 5e:83:64:d8:ed:48:ee:01:ec:d3:ec:c7:8d:0d:ba:04:17:23: cd:ce:b0:62:aa:01:ab:f4:af:f6:ca:7a:f3:8d:23:31:e9:04: 74:8b:6e:03:d1:6e:dd:41:16:28:4e:c2:d5:84:8b:5e:e8:d9: 23:97:0a:89:a0:19:a4:2f:d8:1a:5a:72:e3:86:fb:d3:0e:4a: 11:a2:13:ff:a3:3a:0b:2a:c6:11:8e:34:dc:16:72:e1:06:cf: 8e:5b:7a:78:06:36:94:9e:56:5f:6a:69:1c:12:34:bf:0f:2e: c3:bb:6b:19:b1:92:e8:4e:d4:3c:79:f8:ad:80:8d:e1:69:26: 50:20:ee:c6:00:f2:72:24:ce:52:fe:08:16:80:88:e8:53:a7: f7:5f:2c:e2:fa:b2:70:3d:b1:c8:3b:39:64:d6:c4:1d:6e:b8: 87:d8:13:23:69:9b:e0:0e:32:f2:19:be:1c:af:0c:dc:68:b6: db:6e:b0:ce:a0:55:45:f7:46:78:8d:93:28:72:1f:b6:ba:3e: a9:74:54:14:34:c9:f5:f7:d5:8b:d5:18:99:83:fb:33:e8:c1: 37:73:7a:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA1MTMwNjU1MzdaFw0yNTA1MjAwNjU1MzdaMBgxFjAUBgNV BAMTDTY4MjJlY2VhLTA3ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx9d5F/ilv3DuTZUPJRcblaAHe9PgLksOGxtFRcaePldP5hmZrfZ7nTesZUd6E H0XZfATT/evT0gAbFQTlx4bpRG2jhWHp8DI11Cbc7OmXCMaYRw6ZGzh6q38sL2Cf An4b0RTKcYa84y7I/b/eUzfIc0LdXT+ocu9XWZx9r+dN5ADy+TkXrXBBNDw+859s x40r/ja2l55hkmar+JjoV+wOFwSHeN/fSaAMKhmHn/lbHNRJgTTUQjm1rse6VlWA I2y+eeyiK3WAXhMyFGQChb1J/a3ZSpOf5Zl7tSjIpGiO526KRVnblwvwCF+lNq/O x4/mkueyGQJOzArbnWJogpibAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc+Al7RIY 9BVRMufFiihCXQC7+dEwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMbvxryCkshu3PAf2AOa1sZKJfE6t/TsGGpO3PkeNlqst+6gB16DZNjt SO4B7NPsx40NugQXI83OsGKqAav0r/bKevONIzHpBHSLbgPRbt1BFihOwtWEi17o 2SOXComgGaQv2BpacuOG+9MOShGiE/+jOgsqxhGONNwWcuEGz45bengGNpSeVl9q aRwSNL8PLsO7axmxkuhO1Dx5+K2AjeFpJlAg7sYA8nIkzlL+CBaAiOhTp/dfLOL6 snA9scg7OWTWxB1uuIfYEyNpm+AOMvIZvhyvDNxotttusM6gVUX3RniNkyhyH7a6 Pql0VBQ0yfX31YvVGJmD+zPowTdzejI= -----END CERTIFICATE-----Generated at Wed May 14 16:05:03 2025 by rpki-client