$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: RyUwhwRG//8LDr19hzA+gz+dCwsOl9P6H8hZu2cuQ5A= Subject key identifier: EB:1F:66:67:ED:41:06:6A:89:F3:8B:FC:19:68:3C:F8:31:2F:43:B7 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 0150 Signing time: Tue 13 May 2025 03:24:43 +0000 Manifest this update: Tue 13 May 2025 03:24:43 +0000 Manifest next update: Tue 20 May 2025 03:24:43 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: FfAI0lzt0FoU7UQAHKVwINaAEJH908IOh4MH/+VscQ8=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: May 13 03:24:43 2025 GMT Not After : May 20 03:24:43 2025 GMT Subject: CN=6822bb7b-8b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:ad:56:67:a8:bc:70:cd:35:73:3f:a9:3d: 97:a2:02:77:ce:0a:b7:e7:01:ae:e1:e9:97:49:09: 80:b5:82:94:1b:1d:28:4a:1e:cc:3c:06:cf:81:69: 89:8a:2d:8b:41:a1:f1:81:42:98:cd:56:b8:e8:43: 0e:27:96:b2:db:69:d8:60:bf:71:e2:58:3a:6e:27: 63:6f:bd:75:77:99:ae:66:ab:73:8b:e0:ed:16:9f: b6:cb:ab:3d:0c:d2:4e:86:b2:b6:96:ec:b5:cb:32: 06:74:b1:7d:72:0b:d9:43:0a:2b:69:bd:3d:fd:ff: f9:2c:5d:50:35:d7:08:e1:04:dd:74:3f:0d:1e:ec: 0e:f8:b5:a4:f7:d1:b1:23:69:10:5d:16:f4:61:06: f6:c7:a2:2e:c3:a9:6d:4f:5b:c7:2e:79:fc:cb:95: 8b:3a:28:71:3d:d6:7c:f2:f2:6d:d0:10:38:d6:fc: 94:25:45:a2:54:85:53:14:83:6d:40:c0:48:8a:23: 63:bf:e5:22:9a:07:1a:55:d6:d9:14:99:79:e9:e3: dd:8c:c5:19:5d:73:96:d9:b2:38:ab:bd:b1:5f:23: 4f:de:a5:b4:bd:88:f3:3e:97:5b:83:68:32:bd:47: a7:dc:27:3c:c9:d4:d3:ee:45:e0:66:7e:6c:f0:35: 34:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:66:67:ED:41:06:6A:89:F3:8B:FC:19:68:3C:F8:31:2F:43:B7 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:db:63:74:74:7c:5f:ca:c5:6a:da:ed:65:4c:8e:94:26:38: ec:0a:09:21:02:14:3e:68:30:02:98:6e:c6:c8:df:f2:82:ee: fa:3c:0e:5f:f8:22:c4:43:e1:47:64:b2:ec:86:32:f3:87:3d: e0:bd:b7:4e:ac:bc:f1:f5:99:96:b5:3f:03:76:98:a0:db:71: d2:7a:0f:9f:71:05:ce:53:4f:20:d3:bf:06:c4:5f:18:7a:cb: 4c:39:f8:2e:fd:da:68:35:58:a4:0c:a7:ca:5d:8d:42:1d:65: 0f:e9:e4:86:2e:ef:96:a1:80:59:a3:de:fa:60:35:0d:3c:93: 42:fe:04:28:53:d6:dd:b6:7c:5a:11:ea:dd:59:c5:48:0d:68: ca:f7:af:b0:52:96:96:06:08:d3:ea:a2:8a:20:26:25:34:b8: c0:7b:89:c3:83:7f:5c:d5:23:ea:5e:75:e7:db:57:38:9f:2f: b3:e5:cc:a2:c7:51:7d:44:77:bd:3a:9c:2f:81:0f:f7:75:e3: ac:d9:f0:cb:35:f7:20:09:91:aa:e1:a4:be:96:46:7a:8d:f9: eb:dc:8a:72:13:55:36:ae:3a:2d:50:24:9d:21:73:92:9f:0b: 5c:1c:72:93:54:3f:2d:6e:d7:b8:22:49:72:39:e6:6c:b0:ed: c6:c5:a8:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwNTEzMDMyNDQzWhcNMjUwNTIwMDMyNDQzWjAYMRYwFAYD VQQDEw02ODIyYmI3Yi04YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq32tVmeovHDNNXM/qT2XogJ3zgq35wGu4emXSQmAtYKUGx0oSh7MPAbPgWmJ ii2LQaHxgUKYzVa46EMOJ5ay22nYYL9x4lg6bidjb711d5muZqtzi+DtFp+2y6s9 DNJOhrK2luy1yzIGdLF9cgvZQworab09/f/5LF1QNdcI4QTddD8NHuwO+LWk99Gx I2kQXRb0YQb2x6Iuw6ltT1vHLnn8y5WLOihxPdZ88vJt0BA41vyUJUWiVIVTFINt QMBIiiNjv+UimgcaVdbZFJl56ePdjMUZXXOW2bI4q72xXyNP3qW0vYjzPpdbg2gy vUen3Cc8ydTT7kXgZn5s8DU0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsfZmft QQZqifOL/BloPPgxL0O3MB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk22N0dHxfysVq2u1lTI6UJjjsCgkhAhQ+aDACmG7GyN/ygu76PA5f +CLEQ+FHZLLshjLzhz3gvbdOrLzx9ZmWtT8Ddpig23HSeg+fcQXOU08g078GxF8Y estMOfgu/dpoNVikDKfKXY1CHWUP6eSGLu+WoYBZo976YDUNPJNC/gQoU9bdtnxa EerdWcVIDWjK96+wUpaWBgjT6qKKICYlNLjAe4nDg39c1SPqXnXn21c4ny+z5cyi x1F9RHe9OpwvgQ/3deOs2fDLNfcgCZGq4aS+lkZ6jfnr3IpyE1U2rjotUCSdIXOS nwtcHHKTVD8tbte4IklyOeZssO3GxahI -----END CERTIFICATE-----Generated at Tue May 13 12:00:48 2025 by rpki-client