$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: LJIhLOD3fVoztDeTiqXfUc1EqtTm6F9lDB5PyV/+des= Subject key identifier: 66:B2:0B:9C:96:C4:30:99:CA:D1:07:B2:BF:B0:92:50:9D:62:F5:8D Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 09B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 09B0 Signing time: Mon 12 May 2025 19:51:56 +0000 Manifest this update: Mon 12 May 2025 19:51:55 +0000 Manifest next update: Mon 19 May 2025 19:51:55 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: njiXM5Jai7xcemBOvlzx8PUxMdpdZFlKI+wG/sPEsTo=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: May 12 19:51:55 2025 GMT Not After : May 19 19:51:55 2025 GMT Subject: CN=6822515b-fd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:0e:87:5b:9d:06:fa:cd:d9:63:2a:68:45: 07:22:a7:a6:7f:4f:ce:42:6d:c5:af:43:32:a5:84: ca:31:d0:21:f7:0a:0c:3b:60:99:6e:8e:ea:71:07: d2:fc:ff:dc:cf:f3:b3:3b:22:40:b5:f9:33:35:e9: be:2f:1f:5f:c5:a9:cb:2f:a3:7d:1e:d2:33:b1:77: 9c:c0:36:e8:ca:49:d9:b6:83:ff:08:db:22:ad:50: 3e:23:99:cd:86:76:be:d1:c3:03:d3:97:1d:f0:da: 97:c9:c9:61:92:0a:21:55:3b:df:15:cb:db:5b:d5: 17:5f:d1:e2:7c:67:0f:e4:4d:f1:5a:2f:2a:fe:dd: e1:80:92:a9:07:73:30:5e:09:70:58:d7:e4:51:53: 3f:67:ce:06:e8:13:8b:36:68:86:df:d7:a5:d7:6c: e5:56:f7:81:c8:fd:3f:c1:20:0d:14:82:f6:91:c1: 29:be:1e:27:ca:8d:a2:76:4e:97:e0:28:be:73:7c: 67:58:b6:f5:18:5b:c1:2a:4e:f2:48:bb:dc:c3:4a: b9:21:ca:bf:49:3a:e0:ad:79:95:5f:a6:8b:d9:73: f7:39:49:da:ed:a5:7c:e7:0e:99:6a:c3:d5:2e:ec: f1:cd:85:ab:70:2d:7b:39:77:b9:01:6f:d6:68:45: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B2:0B:9C:96:C4:30:99:CA:D1:07:B2:BF:B0:92:50:9D:62:F5:8D X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:05:08:6d:0f:a0:04:16:f1:72:e7:4e:41:67:dc:c6:e8:28: e0:27:6b:04:09:e8:89:3d:dd:fe:92:07:9c:9f:a9:51:e8:3c: dc:b2:52:f7:17:b5:a6:f1:96:97:79:9c:80:b3:4e:ff:3f:80: 9b:cd:6d:87:51:19:57:52:dc:bf:99:cf:7a:c6:21:d7:e4:82: 4b:fb:2c:df:17:44:5d:de:53:ff:a9:23:0e:80:bc:60:fc:47: c3:e2:02:87:da:42:39:0a:74:7b:81:a0:f1:bd:d1:b6:7b:51: d5:28:6b:29:d2:31:d7:51:2c:e4:55:12:a9:8c:0a:a8:ba:62: e5:80:76:6a:66:87:e2:50:39:a7:cc:36:3b:85:39:e1:44:fc: dd:c1:df:fe:71:b1:17:0b:d6:5c:48:4d:98:54:91:f9:2a:a2: 07:ed:37:49:8d:48:04:5d:aa:f6:69:50:d8:5c:2a:99:0c:b8: d9:d7:4c:a6:59:a8:15:b9:5f:59:68:bd:3f:40:a3:5d:2e:8d: 59:0a:1a:e1:5a:ae:94:86:93:b2:99:f9:96:22:a4:bc:f0:c3: aa:bf:0f:e2:47:11:ad:b3:80:cb:61:cb:25:27:ee:a6:2a:4a: 60:31:1c:0b:ee:af:74:2d:c6:42:91:27:de:af:08:a5:4e:8f: 13:a7:9f:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUwNTEyMTk1MTU1WhcNMjUwNTE5MTk1MTU1WjAYMRYwFAYD VQQDEw02ODIyNTE1Yi1mZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xkOh1udBvrN2WMqaEUHIqemf0/OQm3Fr0MypYTKMdAh9woMO2CZbo7qcQfS /P/cz/OzOyJAtfkzNem+Lx9fxanLL6N9HtIzsXecwDboyknZtoP/CNsirVA+I5nN hna+0cMD05cd8NqXyclhkgohVTvfFcvbW9UXX9HifGcP5E3xWi8q/t3hgJKpB3Mw XglwWNfkUVM/Z84G6BOLNmiG39el12zlVveByP0/wSANFIL2kcEpvh4nyo2idk6X 4Ci+c3xnWLb1GFvBKk7ySLvcw0q5Icq/STrgrXmVX6aL2XP3OUna7aV85w6ZasPV LuzxzYWrcC17OXe5AW/WaEWjCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGayC5yW xDCZytEHsr+wklCdYvWNMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhBQhtD6AEFvFy505BZ9zG6CjgJ2sECeiJPd3+kgecn6lR6DzcslL3 F7Wm8ZaXeZyAs07/P4CbzW2HURlXUty/mc96xiHX5IJL+yzfF0Rd3lP/qSMOgLxg /EfD4gKH2kI5CnR7gaDxvdG2e1HVKGsp0jHXUSzkVRKpjAqoumLlgHZqZofiUDmn zDY7hTnhRPzdwd/+cbEXC9ZcSE2YVJH5KqIH7TdJjUgEXar2aVDYXCqZDLjZ10ym WagVuV9ZaL0/QKNdLo1ZChrhWq6UhpOymfmWIqS88MOqvw/iRxGts4DLYcslJ+6m KkpgMRwL7q90LcZCkSferwilTo8Tp5+M -----END CERTIFICATE-----Generated at Wed May 14 17:25:03 2025 by rpki-client