$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: iPz6ZtnoxS4l0daoiMEe/qHc9o18GfijY6UkozlG+ek= Subject key identifier: B5:F2:54:E7:C5:87:49:19:C4:B8:6A:57:AA:9E:4E:76:36:B5:40:DF Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 14AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1490 Signing time: Mon 12 May 2025 16:48:46 +0000 Manifest this update: Mon 12 May 2025 16:48:45 +0000 Manifest next update: Mon 19 May 2025 16:48:45 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: 1KHJe8H00++G7u3IPqnrBUmDCuBuh3T2ExqVSouiWFQ=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: KlBzZE2KV7lzBc+tNUy/mqi1akgFY3Eb2SwhsYFxcBI=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: uMpXCjBvKkjgsvqgftGEXm10xWManwhepg98lroRmbE=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 6D0gW6FWFI2VeP1xT9SYxSMf8UjausKvml76wHWoNrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5294 (0x14ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: May 12 16:48:45 2025 GMT Not After : May 19 16:48:45 2025 GMT Subject: CN=6822266e-4bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:58:f7:c4:63:e6:48:3f:30:f6:69:f4:63: cc:3b:e4:ab:a4:4a:cf:fb:8d:df:23:65:0a:9e:8c: 7f:01:03:80:f3:61:91:8c:7b:76:dd:ba:5a:a9:01: 3c:3b:1b:bb:6e:a3:8a:fa:56:3c:2f:2a:37:90:2b: 98:5d:b1:fe:3b:53:37:a5:82:19:a8:75:c1:03:54: 1c:30:ea:fa:61:70:c6:3f:c5:14:ba:b1:09:b2:33: c3:37:81:29:f7:0d:8a:6a:4e:8d:d1:ad:73:aa:00: 0f:26:03:a1:40:31:b1:2d:69:23:1e:cc:42:4b:e4: 04:58:63:35:13:9c:bc:e7:fa:9b:c5:bd:aa:30:7e: 1a:c7:e2:6f:8a:d6:d0:9f:60:a3:9d:65:f2:c7:18: 45:b8:83:63:fb:c8:20:58:cb:56:34:5b:39:c7:81: fc:b0:73:6e:65:ed:23:4e:cd:97:65:fc:6c:35:89: 67:30:26:7c:25:99:fc:98:77:09:c0:60:ba:25:a7: 6d:a5:a5:02:c1:96:eb:40:eb:67:c1:da:14:6a:1c: 59:38:0c:fa:f7:35:57:7b:f2:a5:10:7e:94:c9:14: d4:20:79:c2:6b:8d:6a:a0:c0:e2:a0:b3:6e:83:58: 21:a4:34:09:e5:27:02:e3:75:0a:b3:25:c0:5c:d6: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F2:54:E7:C5:87:49:19:C4:B8:6A:57:AA:9E:4E:76:36:B5:40:DF X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ec:b6:4a:a4:6a:c9:c3:dc:f4:9c:a9:6c:53:8b:b8:00:55: cc:97:5c:4d:b9:3c:be:b5:fa:75:e4:a8:18:48:18:9c:2e:bb: 05:ef:40:24:c8:3e:65:28:98:5c:59:67:77:d3:82:5e:60:98: d5:bc:e9:86:58:a3:2b:d2:0a:c4:c9:10:e5:f2:29:87:bd:3a: 4c:3f:6e:ba:bc:01:e6:5b:39:e9:4c:35:ec:2d:c0:6e:ad:5b: 63:9d:cc:21:e1:a3:ba:90:cf:25:a8:0c:ae:7d:02:71:1e:7b: 3e:ec:b6:08:97:f2:b6:1c:6a:04:29:af:97:e3:e9:24:b6:9e: 24:aa:0e:63:24:10:7b:87:7a:0f:b0:e6:f1:99:a3:e0:c9:4d: e2:c3:56:60:9e:a8:fa:7c:fd:aa:3d:42:5d:20:f1:9d:2f:69: e0:3e:03:e8:d5:4c:3c:a1:58:90:7c:50:51:ec:8e:bf:1d:c9: 38:75:0a:8d:97:39:af:7c:78:15:2d:da:ea:3c:a2:3a:c5:fd: 12:a2:83:c4:72:68:35:c2:ae:48:b5:01:bc:f6:60:2e:dc:76: b8:49:71:d7:02:9d:0c:1f:7a:e6:04:26:99:ec:66:3b:be:42: 20:b9:4e:f3:e3:fc:c3:29:ce:0e:2a:f1:36:15:1c:c3:99:be: 0f:c1:90:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUwNTEyMTY0ODQ1WhcNMjUwNTE5MTY0ODQ1WjAYMRYwFAYD VQQDEw02ODIyMjY2ZS00YmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0FY98Rj5kg/MPZp9GPMO+SrpErP+43fI2UKnox/AQOA82GRjHt23bpaqQE8 Oxu7bqOK+lY8Lyo3kCuYXbH+O1M3pYIZqHXBA1QcMOr6YXDGP8UUurEJsjPDN4Ep 9w2Kak6N0a1zqgAPJgOhQDGxLWkjHsxCS+QEWGM1E5y85/qbxb2qMH4ax+JvitbQ n2CjnWXyxxhFuINj+8ggWMtWNFs5x4H8sHNuZe0jTs2XZfxsNYlnMCZ8JZn8mHcJ wGC6JadtpaUCwZbrQOtnwdoUahxZOAz69zVXe/KlEH6UyRTUIHnCa41qoMDioLNu g1ghpDQJ5ScC43UKsyXAXNYkWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXyVOfF h0kZxLhqV6qeTnY2tUDfMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn7LZKpGrJw9z0nKlsU4u4AFXMl1xNuTy+tfp15KgYSBicLrsF70Ak yD5lKJhcWWd304JeYJjVvOmGWKMr0grEyRDl8imHvTpMP266vAHmWznpTDXsLcBu rVtjncwh4aO6kM8lqAyufQJxHns+7LYIl/K2HGoEKa+X4+kktp4kqg5jJBB7h3oP sObxmaPgyU3iw1Zgnqj6fP2qPUJdIPGdL2ngPgPo1Uw8oViQfFBR7I6/Hck4dQqN lzmvfHgVLdrqPKI6xf0SooPEcmg1wq5ItQG89mAu3Ha4SXHXAp0MH3rmBCaZ7GY7 vkIguU7z4/zDKc4OKvE2FRzDmb4PwZCA -----END CERTIFICATE-----Generated at Wed May 14 10:46:03 2025 by rpki-client