$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: cShpF4iRUd2OX4tJ0DprXBZARv9FHH6gSmHKhZCTCCI= Subject key identifier: D9:B3:E2:1D:A5:6E:B9:2E:18:39:B0:2A:24:75:AB:F5:1C:2E:71:96 Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 080F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 0805 Signing time: Wed 14 May 2025 20:59:35 +0000 Manifest this update: Wed 14 May 2025 20:59:35 +0000 Manifest next update: Wed 21 May 2025 20:59:35 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: EX4N1LbrWZIK40nR/rTvV5xg5BQqrJ3WN9VN4aFFBfA=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: OOAGuEy3dNxhof0DuDCrqOBB7Z16rn3wikl56pkPDKs=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: iklcKY1p6cUV63DgFPNd0VTuCZO3jzabdmCYH2W3rsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2063 (0x80f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: May 14 20:59:35 2025 GMT Not After : May 21 20:59:35 2025 GMT Subject: CN=68250437-0ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:f9:56:9c:28:44:65:9b:a9:a4:f2:77:1c: 59:91:78:3d:d5:9c:37:f9:e4:f4:c5:5d:4c:f6:3b: 13:40:e8:12:f4:38:ad:01:4f:db:1d:1a:16:12:df: a1:ad:8c:f6:1f:a5:62:f8:b5:2e:ea:34:0c:6a:2a: e0:b9:81:2f:aa:98:db:65:29:90:00:bb:7c:f6:1f: fa:ab:e5:90:42:fe:b6:5c:d1:14:78:2e:00:28:5a: 9b:cf:67:cb:b9:07:55:6b:55:1c:c4:9d:7d:c8:68: 91:5b:16:80:de:f7:f4:bf:8c:a7:29:f7:78:c2:81: 30:c9:37:51:d3:00:4a:a1:71:33:62:ee:59:d5:17: d3:fe:45:67:dc:a1:9c:99:fd:2f:42:a1:2f:24:ee: 4b:9c:9d:0f:86:6a:08:42:b0:c8:82:2b:7c:fd:23: cc:4d:bc:b2:2e:52:26:09:9a:60:e5:96:1f:f1:f1: bc:d6:8d:31:a5:0f:68:c5:2e:31:1e:e3:45:00:29: 98:dd:d5:af:f3:0e:6b:49:bc:a4:b3:80:6a:81:96: 30:27:38:b4:66:38:37:b2:4f:03:0e:cf:04:fd:76: 2c:24:83:e6:42:5b:b7:8a:dd:2c:5b:e5:1b:ae:67: 42:f7:57:d4:de:dc:19:e6:ed:ec:57:5b:89:b4:ca: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B3:E2:1D:A5:6E:B9:2E:18:39:B0:2A:24:75:AB:F5:1C:2E:71:96 X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:58:9e:1b:01:09:4b:2c:22:0a:37:d0:c7:42:d1:ef:af:c3: 14:e6:9b:f9:1b:b2:5a:61:4f:ba:5b:8d:b6:00:30:9f:ca:25: c3:0f:8b:f6:ba:23:4b:90:76:91:5c:c0:eb:67:3a:ce:56:f8: 59:c9:f8:a7:66:a1:d9:88:70:72:32:2a:58:42:74:de:f3:da: 05:df:76:b5:3c:e1:55:c9:fd:b1:e8:be:75:fd:82:ff:db:84: 55:29:45:9d:ae:a6:69:56:c4:f0:ef:ae:7f:63:c6:86:b4:ce: 87:aa:6a:e5:b4:9a:17:7a:06:be:93:c0:aa:89:4b:e8:c4:87: 36:aa:09:cc:a5:fe:af:fd:ac:27:74:5f:85:2b:ec:b9:dd:ec: d8:84:2b:8e:0e:1d:1c:d1:6e:f9:6a:3f:bb:da:ea:f0:52:1e: 92:e5:1e:6f:be:61:8b:e0:b1:4e:b5:48:6f:17:31:25:af:60: 38:60:4d:5d:2b:3b:ed:12:8f:86:3b:47:15:38:d3:c6:00:d8: 06:c1:fc:cf:bc:78:7f:0f:36:f2:e8:45:1e:7f:91:31:9e:09: 9e:bd:80:2f:cc:aa:8f:91:e7:ae:49:c7:d0:c5:55:e1:a4:f4: 49:85:55:05:ac:bf:5a:fc:cf:29:89:c5:0a:6e:6f:20:68:14: 76:99:ec:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUwNTE0MjA1OTM1WhcNMjUwNTIxMjA1OTM1WjAYMRYwFAYD VQQDEw02ODI1MDQzNy0wZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAn5VpwoRGWbqaTydxxZkXg91Zw3+eT0xV1M9jsTQOgS9DitAU/bHRoWEt+h rYz2H6Vi+LUu6jQMairguYEvqpjbZSmQALt89h/6q+WQQv62XNEUeC4AKFqbz2fL uQdVa1UcxJ19yGiRWxaA3vf0v4ynKfd4woEwyTdR0wBKoXEzYu5Z1RfT/kVn3KGc mf0vQqEvJO5LnJ0PhmoIQrDIgit8/SPMTbyyLlImCZpg5ZYf8fG81o0xpQ9oxS4x HuNFACmY3dWv8w5rSbyks4BqgZYwJzi0Zjg3sk8DDs8E/XYsJIPmQlu3it0sW+Ub rmdC91fU3twZ5u3sV1uJtMrIaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmz4h2l brkuGDmwKiR1q/UcLnGWMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFWJ4bAQlLLCIKN9DHQtHvr8MU5pv5G7JaYU+6W422ADCfyiXDD4v2 uiNLkHaRXMDrZzrOVvhZyfinZqHZiHByMipYQnTe89oF33a1POFVyf2x6L51/YL/ 24RVKUWdrqZpVsTw765/Y8aGtM6HqmrltJoXega+k8CqiUvoxIc2qgnMpf6v/awn dF+FK+y53ezYhCuODh0c0W75aj+72urwUh6S5R5vvmGL4LFOtUhvFzElr2A4YE1d KzvtEo+GO0cVONPGANgGwfzPvHh/Dzby6EUef5ExngmevYAvzKqPkeeuScfQxVXh pPRJhVUFrL9a/M8picUKbm8gaBR2mexO -----END CERTIFICATE-----Generated at Fri May 16 13:20:25 2025 by rpki-client