$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft File: znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json) Hash identifier: bKguTUK96tEFjoFqQC5T6HFbi54CWVkdpNlIe7JTb6k= Subject key identifier: B8:60:CE:AE:05:F5:80:0C:84:92:29:D9:2B:3C:58:AB:A3:5E:89:BB Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 Certificate issuer: /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft Manifest number: 0816 Signing time: Mon 12 May 2025 20:43:45 +0000 Manifest this update: Mon 12 May 2025 20:43:45 +0000 Manifest next update: Mon 19 May 2025 20:43:45 +0000 Files and hashes: 1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: MJyD+NKy633xOvdMk4Seubn1toU8ufPtQWCa6tNBu0Y=) 2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: QfQMDJEFyFJctWqY3TUBdj1n9VR5xXThgyit189Rglg=) 3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: x/6buEc3mt0NYc9i/4n+m9cWM6ITkbcO0w+UzTAhQs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Validity Not Before: May 12 20:43:45 2025 GMT Not After : May 19 20:43:45 2025 GMT Subject: CN=68225d81-edb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:60:5c:85:5c:c4:bd:da:0f:ee:c5:94:56: 66:5b:8e:b5:4e:0c:cf:ca:76:1f:f7:73:f8:53:f6: 45:f4:9e:a4:28:6c:ab:59:df:96:2e:a6:15:f1:a2: 4a:bf:dd:ba:81:46:10:54:97:01:6c:d6:cd:9a:14: 96:be:41:de:c6:ed:d2:eb:2e:17:41:fb:b6:08:8a: c8:66:76:92:30:2a:0f:47:a9:89:dd:a2:b1:a3:7a: ad:47:e7:b1:a7:65:cc:94:55:ae:a1:63:31:3d:b5: d4:fa:60:86:38:f3:b5:90:a5:7a:5c:c8:39:60:6e: 78:39:6c:2e:df:90:2c:73:a1:8a:8d:c9:24:de:0f: da:bd:5c:78:5c:0f:6b:ce:a0:9f:69:91:06:6d:8f: d4:71:a8:03:3c:fc:48:de:cc:c4:a2:93:06:28:2e: d6:d0:e7:60:0c:36:2b:6d:e0:3e:09:81:52:d4:34: 5c:12:3e:25:71:7b:d1:39:14:e0:0b:23:95:18:9d: 77:98:dc:a4:c6:a7:7c:31:a3:81:87:41:28:b7:83: 26:4b:73:be:d7:e1:0c:8f:43:f8:0b:bd:b0:80:cf: f2:02:ff:5d:32:c2:e0:06:d1:33:5e:3a:8d:ff:bd: 7f:59:7b:8f:d8:83:f7:bc:3f:75:0e:5a:8f:55:89: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:60:CE:AE:05:F5:80:0C:84:92:29:D9:2B:3C:58:AB:A3:5E:89:BB X509v3 Authority Key Identifier: keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d5:0a:87:95:24:0d:af:9f:f0:6c:c8:c2:f1:3b:2a:57:6f: e7:a5:20:17:3e:6c:9d:eb:82:8d:ca:51:01:ca:e6:50:b1:5a: cf:3b:a3:28:44:15:02:6c:36:b0:f0:eb:48:0c:d5:19:6f:94: 50:16:76:ca:b4:cd:3a:ba:09:c9:d0:a5:0e:a2:79:9a:87:c7: 11:21:5b:94:1e:0a:8d:e2:f4:35:f2:cd:6d:90:02:59:ed:0f: 35:c2:f9:6c:b8:8f:46:e3:4b:17:fd:06:2a:d2:ad:18:63:fd: da:e1:2b:cc:cf:be:90:60:ba:d0:be:61:5a:bc:0c:fb:a4:4c: 9a:a7:98:3d:76:ee:a0:8d:77:20:cb:0a:0a:11:8f:f9:a2:9f: 31:34:00:9d:61:4f:e1:65:95:9b:51:42:be:41:64:12:6d:1d: 8f:5a:3a:0c:08:19:38:06:8c:0e:02:72:cd:3d:a4:7a:7e:7e: 96:5e:15:d4:95:81:c5:90:8f:68:c2:21:a2:7a:b4:34:95:c1: d0:84:e3:d9:2e:77:b5:5d:b5:47:07:0f:29:94:3b:af:95:8c: 9d:cb:05:d9:9e:b2:db:0b:2f:45:46:79:46:08:16:43:89:05: 39:5c:b1:e3:e7:d2:36:90:f3:4a:17:7e:4c:4c:68:24:9a:3d: 8b:27:6a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE NUY5Q0I3MzUwHhcNMjUwNTEyMjA0MzQ1WhcNMjUwNTE5MjA0MzQ1WjAYMRYwFAYD VQQDEw02ODIyNWQ4MS1lZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswhgXIVcxL3aD+7FlFZmW461TgzPynYf93P4U/ZF9J6kKGyrWd+WLqYV8aJK v926gUYQVJcBbNbNmhSWvkHexu3S6y4XQfu2CIrIZnaSMCoPR6mJ3aKxo3qtR+ex p2XMlFWuoWMxPbXU+mCGOPO1kKV6XMg5YG54OWwu35Asc6GKjckk3g/avVx4XA9r zqCfaZEGbY/UcagDPPxI3szEopMGKC7W0OdgDDYrbeA+CYFS1DRcEj4lcXvRORTg CyOVGJ13mNykxqd8MaOBh0Eot4MmS3O+1+EMj0P4C72wgM/yAv9dMsLgBtEzXjqN /71/WXuP2IP3vD91DlqPVYlNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhgzq4F 9YAMhJIp2Ss8WKujXom7MB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTQxNS9CQzY2MTA2RUREOTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2 SFB3MFdNVFI2UWpWLWN0elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA11QqHlSQNr5/wbMjC8TsqV2/npSAXPmyd64KNylEByuZQsVrPO6Mo RBUCbDaw8OtIDNUZb5RQFnbKtM06ugnJ0KUOonmah8cRIVuUHgqN4vQ18s1tkAJZ 7Q81wvlsuI9G40sX/QYq0q0YY/3a4SvMz76QYLrQvmFavAz7pEyap5g9du6gjXcg ywoKEY/5op8xNACdYU/hZZWbUUK+QWQSbR2PWjoMCBk4BowOAnLNPaR6fn6WXhXU lYHFkI9owiGierQ0lcHQhOPZLne1XbVHBw8plDuvlYydywXZnrLbCy9FRnlGCBZD iQU5XLHj59I2kPNKF35MTGgkmj2LJ2rC -----END CERTIFICATE-----Generated at Tue May 13 19:08:04 2025 by rpki-client