$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: OFOOUL7+l6TtkiQoNJ3EkSy5JFyzob1+SztJxyoUPwk= Subject key identifier: 17:D0:33:51:D7:E8:D9:AD:59:D8:33:4E:3D:33:70:CB:D2:30:ED:25 Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: 6A Signing time: Tue 13 May 2025 06:12:07 +0000 Manifest this update: Tue 13 May 2025 06:12:06 +0000 Manifest next update: Tue 20 May 2025 06:12:06 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: hYv2WCR6tbxvk4x1uhqz0t4L6Go93/mT+4h8IO6mmsw=) 2: 088C9298981611EFBE510B59C4F9AE02.roa (hash: MvPd2YQI9MOUSpjmUY5DT+pZT/6vsajAX/zCT/ZVYiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: May 13 06:12:06 2025 GMT Not After : May 20 06:12:06 2025 GMT Subject: CN=6822e2b6-7b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:49:b0:25:e8:00:d5:7a:c9:17:e4:11:90: e1:b9:08:e2:e8:a2:52:47:ff:7e:6b:f0:de:6a:80: 93:60:b6:3f:4a:27:5e:ac:1d:e4:3f:7e:28:ab:77: 93:57:64:f2:2e:76:97:e9:e1:b3:65:97:ed:0e:56: f6:2e:23:00:9b:ec:ef:54:ae:e8:da:d9:48:63:12: 68:83:0a:9a:b6:de:2e:5c:d5:c0:0d:50:a9:cc:c0: 17:7b:34:0e:2b:48:67:33:df:f4:1e:9a:ea:23:da: 59:e3:a2:73:f2:6e:b6:15:16:73:04:e7:1c:9b:fd: 5f:58:61:42:5e:29:f5:3a:ee:79:b2:ef:6f:fb:35: cf:ab:2b:97:61:3e:7c:8f:c3:ca:87:c3:aa:b4:a4: 2f:76:af:e5:7f:93:f8:9a:20:fc:76:4c:5f:23:f5: bc:48:34:4a:11:b3:fe:d0:7c:8e:7b:fa:a2:30:84: 43:c7:80:5b:b4:7f:88:cf:f4:78:b8:18:52:a0:78: 2b:b9:fe:a4:d9:d7:26:de:54:ef:91:13:30:6b:ca: 01:84:84:57:ab:d9:17:31:a1:87:d5:6d:5a:d2:1e: 17:a7:77:6d:c0:ed:20:26:8b:2d:99:86:27:e0:07: b4:dc:f0:d4:29:bd:f6:54:f8:41:23:be:59:8b:88: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D0:33:51:D7:E8:D9:AD:59:D8:33:4E:3D:33:70:CB:D2:30:ED:25 X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c1:74:ca:12:87:33:dc:47:86:78:8c:38:5a:24:89:b1:9c: 9d:e6:e3:fd:38:95:b1:44:c5:10:b2:08:2e:ab:7b:d5:9c:04: cb:c6:87:8c:ae:7d:f5:81:25:58:3c:8e:48:f1:e7:d4:21:ce: 22:68:ee:be:8e:c6:76:fb:30:4b:ee:9b:cb:a3:8e:fd:ba:16: 82:68:c5:6a:77:f7:ba:9a:0b:01:1b:c6:2e:cc:03:dc:28:e1: ee:e0:03:b7:82:24:e2:50:48:21:47:70:d8:0d:9d:47:75:2f: 2f:6e:9d:a5:27:e8:8f:74:3c:3f:40:d1:eb:40:72:05:35:28: 05:a0:4f:77:4d:4f:f3:26:35:dd:8f:ba:25:31:54:93:92:6a: 5a:a9:c2:cf:b5:b4:a8:71:cc:a4:2f:1f:c8:13:94:d4:2b:64: 7d:ab:2f:b1:c2:15:2b:ac:23:e0:3b:45:52:7c:58:6d:d5:20: af:08:b1:21:52:a4:13:85:41:6d:c3:78:b4:1a:81:0e:d3:dc: 86:31:e4:3d:ca:b1:b7:f9:89:7a:d5:74:3f:49:f7:3f:09:29: 02:5d:35:e0:d1:b9:6d:34:99:d9:e7:96:aa:6c:cc:72:83:99: 87:7f:4c:9d:5b:e8:14:91:80:9c:d8:91:1c:c4:63:cf:15:19: 1e:96:84:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUM2MjExMC8GA1UEBRMoQ0Y4MDRBNkYzRDg2QTE5NzEzQTRFODg2RDU5N0I0REM2 NDQ1Njg2QTAeFw0yNTA1MTMwNjEyMDZaFw0yNTA1MjAwNjEyMDZaMBgxFjAUBgNV BAMTDTY4MjJlMmI2LTdiODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnnkmwJegA1XrJF+QRkOG5COLoolJH/35r8N5qgJNgtj9KJ16sHeQ/fiird5NX ZPIudpfp4bNll+0OVvYuIwCb7O9Uruja2UhjEmiDCpq23i5c1cANUKnMwBd7NA4r SGcz3/Qemuoj2lnjonPybrYVFnME5xyb/V9YYUJeKfU67nmy72/7Nc+rK5dhPnyP w8qHw6q0pC92r+V/k/iaIPx2TF8j9bxINEoRs/7QfI57+qIwhEPHgFu0f4jP9Hi4 GFKgeCu5/qTZ1ybeVO+REzBrygGEhFer2RcxoYfVbVrSHhend23A7SAmiy2Zhifg B7Tc8NQpvfZU+EEjvlmLiIFHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF9AzUdfo 2a1Z2DNOPTNwy9Iw7SUwHwYDVR0jBBgwFoAUz4BKbz2GoZcTpOiG1Ze03GRFaGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzYyLzg0RjQ2QjY4OTgx NTExRUZBNEJEM0Q1N0M0RjlBRTAyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejRCS2J6MkdvWmNUcE9pRzFaZTAzR1JGYUdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QzYyLzg0RjQ2QjY4OTgxNTExRUZBNEJEM0Q1N0M0RjlBRTAyL3o0QktiejJHb1pj VHBPaUcxWmUwM0dSRmFHby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKrBdMoShzPcR4Z4jDhaJImxnJ3m4/04lbFExRCyCC6re9WcBMvGh4yu ffWBJVg8jkjx59QhziJo7r6Oxnb7MEvum8ujjv26FoJoxWp397qaCwEbxi7MA9wo 4e7gA7eCJOJQSCFHcNgNnUd1Ly9unaUn6I90PD9A0etAcgU1KAWgT3dNT/MmNd2P uiUxVJOSalqpws+1tKhxzKQvH8gTlNQrZH2rL7HCFSusI+A7RVJ8WG3VIK8IsSFS pBOFQW3DeLQagQ7T3IYx5D3Ksbf5iXrVdD9J9z8JKQJdNeDRuW00mdnnlqpszHKD mYd/TJ1b6BSRgJzYkRzEY88VGR6WhBc= -----END CERTIFICATE-----Generated at Wed May 14 14:02:01 2025 by rpki-client