$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json) Hash identifier: ikoHEAbF34V+KkdxalZ/WTYElMjHhw8OZrBzxCZlexQ= Subject key identifier: 8A:CD:12:E1:C5:31:10:77:39:B9:A9:E6:5C:BB:25:7A:2F:72:29:B7 Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft Manifest number: 018C Signing time: Thu 15 May 2025 03:02:27 +0000 Manifest this update: Thu 15 May 2025 03:02:26 +0000 Manifest next update: Thu 22 May 2025 03:02:26 +0000 Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: Xl4NQMA2YkKUHzew2VWJGSXiWNWQch5zrclmTxXAOE4=) 2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: pVr+bUV7osuNpKcdEe2SU8B4kCWvORQSGGyqBngWkWY=) 3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: ou5M00utddUa9B9T2ZjIX4AhXtQUSSATyN+Uf1fiHwE=) 4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: m0+29/xOQkLY0SUQkzyArE5bZt0Gpa6rpxJzQEzTpmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Validity Not Before: May 15 03:02:26 2025 GMT Not After : May 22 03:02:26 2025 GMT Subject: CN=68255943-5427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:69:5f:d8:3e:5d:99:72:e7:f0:f1:44:fc: bd:94:e9:2f:03:90:37:e8:a4:2e:0f:e9:fe:20:a1: 5d:23:f9:37:c8:b7:97:94:c4:d7:8f:77:78:e4:9d: 41:3e:25:15:cd:81:02:2e:ab:63:31:86:0e:27:ea: 86:50:95:71:92:04:5f:d4:5d:8f:e6:d1:d6:33:df: 15:8c:34:d0:11:65:19:77:05:54:c4:47:67:3d:dd: 5c:8c:26:77:d4:7a:51:a9:e9:13:1b:13:75:25:00: 65:ca:2c:a7:e6:f8:9f:ed:e2:f7:6a:16:cc:1f:22: 6a:e9:3c:c4:dc:af:6a:41:15:5c:79:40:38:1c:3b: cb:b3:bf:64:f8:17:d4:e4:ff:a6:89:33:f8:29:9e: b2:54:13:85:9b:6f:34:f3:9d:55:b6:91:10:7b:d2: e5:41:82:89:bf:08:61:f5:4f:85:0a:9d:4c:16:97: 8b:32:5c:e1:48:02:2b:59:37:3a:4a:ea:4e:72:fd: 3f:f2:a5:64:e6:d0:a0:42:ca:4b:58:03:eb:ca:d6: 4f:eb:d0:a6:14:4f:72:cc:03:a2:c5:8f:a7:46:c8: f4:13:99:28:d4:44:ad:6d:4f:2a:53:4f:d9:ac:56: 2f:2a:29:4d:7e:03:04:a1:65:55:2c:36:54:dd:b7: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:12:E1:C5:31:10:77:39:B9:A9:E6:5C:BB:25:7A:2F:72:29:B7 X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:18:86:49:c5:29:da:e5:33:9f:c2:2f:27:86:89:f3:33:f4: 89:7a:ed:e3:76:56:1c:f8:bd:ae:38:26:35:df:b3:ae:81:33: 42:72:32:31:43:17:46:60:11:94:c3:f0:de:42:16:0b:f9:17: e4:56:26:91:62:a7:3a:f9:e0:ef:cf:4c:bb:08:4b:97:ac:8c: 48:a6:c6:03:ff:75:78:3b:9c:ff:ce:ec:3a:65:92:7f:d5:c8: 35:e3:03:31:2b:c2:36:98:75:e0:0b:1c:83:3d:08:d7:b1:f0: dd:80:0a:15:66:a5:e3:5c:35:4d:61:80:17:59:ef:53:32:e9: fe:28:8f:18:2a:be:ef:63:a8:3b:36:f9:21:af:9a:d8:40:1d: 12:fa:db:ee:a1:35:f3:46:04:47:df:b4:fc:3a:22:17:48:ad: cf:5f:b2:1d:2e:e8:56:ae:b4:3e:39:d7:1b:47:37:bf:b8:ef: 18:53:64:10:8c:eb:2f:7d:74:f2:2c:fc:b7:84:9d:8b:da:76: f2:de:c1:3b:df:cd:3a:2f:a0:bf:d4:55:3f:7c:eb:cd:e5:60: 19:fd:33:6a:e0:89:b1:75:c8:71:f1:4c:ac:83:24:b1:5c:8f: 88:b5:64:43:72:ee:8f:82:cd:2a:0e:85:5c:07:56:b7:f5:15: 52:61:4f:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjUwNTE1MDMwMjI2WhcNMjUwNTIyMDMwMjI2WjAYMRYwFAYD VQQDEw02ODI1NTk0My01NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xJpX9g+XZly5/DxRPy9lOkvA5A36KQuD+n+IKFdI/k3yLeXlMTXj3d45J1B PiUVzYECLqtjMYYOJ+qGUJVxkgRf1F2P5tHWM98VjDTQEWUZdwVUxEdnPd1cjCZ3 1HpRqekTGxN1JQBlyiyn5vif7eL3ahbMHyJq6TzE3K9qQRVceUA4HDvLs79k+BfU 5P+miTP4KZ6yVBOFm280851VtpEQe9LlQYKJvwhh9U+FCp1MFpeLMlzhSAIrWTc6 SupOcv0/8qVk5tCgQspLWAPrytZP69CmFE9yzAOixY+nRsj0E5ko1EStbU8qU0/Z rFYvKilNfgMEoWVVLDZU3bd79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrNEuHF MRB3Obmp5ly7JXovcim3MB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2 MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDGIZJxSna5TOfwi8nhonzM/SJeu3jdlYc+L2uOCY137OugTNCcjIx QxdGYBGUw/DeQhYL+RfkViaRYqc6+eDvz0y7CEuXrIxIpsYD/3V4O5z/zuw6ZZJ/ 1cg14wMxK8I2mHXgCxyDPQjXsfDdgAoVZqXjXDVNYYAXWe9TMun+KI8YKr7vY6g7 Nvkhr5rYQB0S+tvuoTXzRgRH37T8OiIXSK3PX7IdLuhWrrQ+OdcbRze/uO8YU2QQ jOsvfXTyLPy3hJ2L2nby3sE73806L6C/1FU/fOvN5WAZ/TNq4Imxdchx8UysgySx XI+ItWRDcu6Pgs0qDoVcB1a39RVSYU9+ -----END CERTIFICATE-----Generated at Fri May 16 23:09:04 2025 by rpki-client