$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: tcrJHndA0imWc9beTabqjA53yU/pUA9z/ndqk50TXIo= Subject key identifier: F0:7D:BF:E8:27:A5:59:0A:5B:5B:D1:D8:C9:AF:2A:7C:7E:E7:CF:DC Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0B0D Signing time: Mon 12 May 2025 19:10:47 +0000 Manifest this update: Mon 12 May 2025 19:10:46 +0000 Manifest next update: Mon 19 May 2025 19:10:46 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: xG6RfEEiByROXIKBljnFAbKXFmfNLPKKb5vvp5/LNNI=) 2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=) 3: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=) 4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=) 5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: May 12 19:10:46 2025 GMT Not After : May 19 19:10:46 2025 GMT Subject: CN=682247b6-b3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:9d:eb:62:89:5d:56:23:d6:8f:0c:b5:68: d1:5d:1d:21:74:19:d1:00:eb:b9:45:4a:36:1f:ef: 9c:1f:84:c6:1e:e5:ac:26:8b:1c:4a:7c:8f:d3:f7: 29:9f:97:be:98:af:59:db:06:3c:2b:c6:65:4e:ba: f1:7b:12:a8:10:b8:f6:28:47:23:59:96:cd:49:83: 3f:15:c1:f3:65:0a:4a:3f:dd:d0:fa:78:cb:3d:96: 1b:30:7e:1a:1e:24:11:e7:c2:52:18:6b:e4:cd:f0: 13:c6:e6:32:98:bb:af:0d:78:b0:b3:a5:54:3b:db: 22:eb:86:d9:42:69:df:e2:36:f1:c4:ee:1f:02:b3: a4:76:b2:4c:af:d1:08:38:e8:ec:3e:7c:b1:a4:a3: 17:e5:4e:75:54:e7:ba:ed:20:b1:10:62:b0:e1:16: 2f:10:b3:9d:ec:0c:c0:a9:8b:af:a4:e2:71:89:cf: 93:ee:4d:4e:fe:69:b9:37:dc:a6:eb:08:66:3e:a1: 1d:bb:01:b1:de:66:13:ae:db:87:54:77:2d:90:aa: 42:e0:96:91:d1:7d:96:4d:58:78:c6:df:c2:60:86: 9d:48:db:50:62:0a:93:7e:9f:0a:31:fd:67:5e:f7: 9d:80:42:d8:5b:34:d9:2c:ad:1b:23:cb:ea:b9:40: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7D:BF:E8:27:A5:59:0A:5B:5B:D1:D8:C9:AF:2A:7C:7E:E7:CF:DC X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:4e:d2:07:4f:09:24:1d:17:36:0d:5e:e5:9e:7c:bf:0b:6f: c7:e5:e6:9b:77:0c:54:82:c1:25:70:ab:57:7d:b8:33:68:55: 4a:bb:bc:32:70:20:62:3b:5a:d6:47:1e:96:f0:69:e3:e1:ba: 8c:9c:a9:a1:e8:c4:f4:db:9b:d3:b4:02:e0:15:80:04:49:33: 4a:b5:2e:3a:ae:5f:d8:cd:ec:eb:36:db:a4:fe:cc:d3:df:f0: 96:85:11:dd:d4:33:ba:4e:09:a1:b0:8c:dc:df:a9:db:ed:29: 58:fd:b9:e0:5c:4b:cb:8a:4d:35:b8:8f:59:b2:92:8f:6e:f8: 92:bc:bd:3d:89:ce:c5:1c:ec:b5:41:bb:20:cc:17:cb:ad:25: 82:f4:69:8b:4c:0d:d2:b2:5b:bd:f9:ad:56:6c:7f:82:ba:27: 25:cd:87:2e:d9:07:1e:21:2f:2d:88:ff:5a:26:7d:fa:e8:83: 9c:b5:59:19:63:91:ab:db:24:41:d3:df:4c:38:9a:30:8b:cc: 80:46:2a:c6:98:06:82:b6:1e:d0:a1:fa:c5:cb:41:04:49:de: 11:51:b7:69:7c:5b:7f:86:ab:54:13:c5:8e:e8:98:cc:55:09: ee:ab:7d:08:76:34:b9:61:8a:b3:73:70:c6:9e:e9:90:a0:0a: ce:55:3e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjUwNTEyMTkxMDQ2WhcNMjUwNTE5MTkxMDQ2WjAYMRYwFAYD VQQDEw02ODIyNDdiNi1iM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaqd62KJXVYj1o8MtWjRXR0hdBnRAOu5RUo2H++cH4TGHuWsJoscSnyP0/cp n5e+mK9Z2wY8K8ZlTrrxexKoELj2KEcjWZbNSYM/FcHzZQpKP93Q+njLPZYbMH4a HiQR58JSGGvkzfATxuYymLuvDXiws6VUO9si64bZQmnf4jbxxO4fArOkdrJMr9EI OOjsPnyxpKMX5U51VOe67SCxEGKw4RYvELOd7AzAqYuvpOJxic+T7k1O/mm5N9ym 6whmPqEduwGx3mYTrtuHVHctkKpC4JaR0X2WTVh4xt/CYIadSNtQYgqTfp8KMf1n XvedgELYWzTZLK0bI8vquUCLRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB9v+gn pVkKW1vR2MmvKnx+58/cMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2TtIHTwkkHRc2DV7lnny/C2/H5eabdwxUgsElcKtXfbgzaFVKu7wy cCBiO1rWRx6W8Gnj4bqMnKmh6MT025vTtALgFYAESTNKtS46rl/YzezrNtuk/szT 3/CWhRHd1DO6TgmhsIzc36nb7SlY/bngXEvLik01uI9ZspKPbviSvL09ic7FHOy1 QbsgzBfLrSWC9GmLTA3Sslu9+a1WbH+CuiclzYcu2QceIS8tiP9aJn366IOctVkZ Y5Gr2yRB099MOJowi8yARirGmAaCth7QofrFy0EESd4RUbdpfFt/hqtUE8WO6JjM VQnuq30IdjS5YYqzc3DGnumQoArOVT7q -----END CERTIFICATE-----Generated at Wed May 14 11:43:44 2025 by rpki-client