$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: uZOpGv17kbXncbw6X6fXV+pIU4OxRH7K0i8WVIO55d8= Subject key identifier: 0D:94:9D:13:E0:73:4A:DC:00:FB:D0:6A:C0:19:DC:D0:3E:75:C0:EF Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0DCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0DC9 Signing time: Wed 14 May 2025 18:01:35 +0000 Manifest this update: Wed 14 May 2025 18:01:34 +0000 Manifest next update: Wed 21 May 2025 18:01:34 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: Qh+bMOXWLzE8kjnQNv2hso6P2MWYSVkb+XqnU5OsKp0=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: zpjIrqbuu6FZf6yZ6yRXtcMiYEO9icrMtSLSk/Oo5Eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3535 (0xdcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: May 14 18:01:34 2025 GMT Not After : May 21 18:01:34 2025 GMT Subject: CN=6824da7e-25d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:be:c6:55:b9:37:76:7d:4f:e9:65:ab:86: b7:17:74:53:14:3c:5b:03:c9:07:d9:cb:cf:07:40: a8:cf:94:44:88:33:9c:12:0c:f7:e9:eb:dc:f8:71: ab:83:e1:28:4e:48:21:37:10:1a:24:61:0f:a3:88: 7c:97:c7:5f:11:2b:1e:f8:f3:ee:07:b6:1d:d9:ba: b2:af:70:16:c0:75:53:b7:eb:23:4c:73:d2:49:20: b1:b9:53:b6:ec:e1:0e:1c:94:39:77:75:b9:ba:6d: ef:fa:34:77:03:92:b6:32:63:10:c1:08:51:13:a1: 2e:4f:89:43:70:08:c6:22:21:53:93:78:b4:4c:20: 45:38:4b:32:95:6c:dc:79:ec:d9:d9:22:cc:2c:0a: 4d:3a:8b:a8:91:13:38:92:09:50:7e:f3:2e:73:5b: 47:21:ee:dc:0a:dc:f3:65:63:cc:f8:2a:5d:75:0f: 13:6d:ad:e6:f0:5f:68:f2:1e:c3:61:93:cd:30:e2: 5b:1f:43:2c:fd:94:a7:43:e3:14:10:ea:75:e6:71: 1d:3c:13:c9:65:dd:d5:08:ba:87:5d:c0:3c:57:92: 4c:42:5b:9e:27:56:25:ad:eb:fe:42:c4:98:34:b5: b7:38:02:90:e8:32:c8:50:e3:c6:b1:49:45:e2:ea: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:94:9D:13:E0:73:4A:DC:00:FB:D0:6A:C0:19:DC:D0:3E:75:C0:EF X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:95:83:e0:2f:ed:bf:e0:8a:3d:26:20:c6:07:7c:8f:3a:ba: 5d:7f:46:4e:64:2a:b5:76:cf:c8:4e:7b:be:8b:bf:9c:d6:df: 88:19:02:51:1c:50:1c:b7:17:69:93:44:4b:61:af:b7:d1:5d: df:35:47:d5:46:41:9f:22:7c:86:96:a8:0e:09:68:f3:7c:9a: e8:e0:42:26:3b:80:12:d8:42:3f:9c:87:b2:57:70:22:61:95: 21:f1:a0:4e:e8:5a:15:c1:db:b4:06:21:e9:54:af:8e:90:19: e1:70:cd:8d:dd:d7:e8:be:d4:7b:07:51:29:fb:c0:6a:7f:7c: 66:f8:38:f9:bf:72:f1:34:e4:a7:2a:db:37:bd:bf:88:c4:8a: aa:fa:cc:f5:76:ed:ef:2f:7a:4e:5a:87:58:0f:1a:73:0d:a4: 64:9c:54:1e:4a:e3:f1:95:37:4f:d3:ab:a0:64:fa:ab:c5:63: 3c:0b:fc:1f:4a:97:06:1a:a7:46:e8:6d:e9:75:71:9f:78:6a: 92:10:1a:7c:75:34:a0:94:59:1e:fa:0e:f5:3c:e5:da:76:0e: cf:64:2a:18:8b:97:27:02:e1:69:6e:a3:14:9c:83:f6:45:72: 53:78:95:b4:25:30:9f:0f:76:0f:43:e9:25:8d:45:67:1e:b4: 32:70:d9:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUwNTE0MTgwMTM0WhcNMjUwNTIxMTgwMTM0WjAYMRYwFAYD VQQDEw02ODI0ZGE3ZS0yNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD2+xlW5N3Z9T+llq4a3F3RTFDxbA8kH2cvPB0Coz5REiDOcEgz36evc+HGr g+EoTkghNxAaJGEPo4h8l8dfESse+PPuB7Yd2bqyr3AWwHVTt+sjTHPSSSCxuVO2 7OEOHJQ5d3W5um3v+jR3A5K2MmMQwQhRE6EuT4lDcAjGIiFTk3i0TCBFOEsylWzc eezZ2SLMLApNOouokRM4kglQfvMuc1tHIe7cCtzzZWPM+CpddQ8Tba3m8F9o8h7D YZPNMOJbH0Ms/ZSnQ+MUEOp15nEdPBPJZd3VCLqHXcA8V5JMQlueJ1Ylrev+QsSY NLW3OAKQ6DLIUOPGsUlF4upIqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2UnRPg c0rcAPvQasAZ3NA+dcDvMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCulYPgL+2/4Io9JiDGB3yPOrpdf0ZOZCq1ds/ITnu+i7+c1t+IGQJR HFActxdpk0RLYa+30V3fNUfVRkGfInyGlqgOCWjzfJro4EImO4AS2EI/nIeyV3Ai YZUh8aBO6FoVwdu0BiHpVK+OkBnhcM2N3dfovtR7B1Ep+8Bqf3xm+Dj5v3LxNOSn Kts3vb+IxIqq+sz1du3vL3pOWodYDxpzDaRknFQeSuPxlTdP06ugZPqrxWM8C/wf SpcGGqdG6G3pdXGfeGqSEBp8dTSglFke+g71POXadg7PZCoYi5cnAuFpbqMUnIP2 RXJTeJW0JTCfD3YPQ+kljUVnHrQycNnP -----END CERTIFICATE-----Generated at Thu May 15 19:25:27 2025 by rpki-client