$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: iY9hLY4D00hY/xFkiVRvBiel8JsQNbez9sb3lEyrLso= Subject key identifier: 4F:F1:FA:06:5F:27:3F:E5:15:30:0A:83:3C:E4:D4:5A:DB:DA:C1:47 Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 011C Signing time: Wed 14 May 2025 16:56:29 +0000 Manifest this update: Wed 14 May 2025 16:56:29 +0000 Manifest next update: Wed 21 May 2025 16:56:29 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: vBLdfDqqxHg2vGKPnxM4vs+cSIU2whzT+6Mm7buCSH4=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: TReNRUcB9Slmh+4MFPwcv7z0b4ojdmnvbTh9IbkrL54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: May 14 16:56:29 2025 GMT Not After : May 21 16:56:29 2025 GMT Subject: CN=6824cb3d-c8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:e2:77:56:da:bf:08:90:e8:c6:dd:f0:49: c9:db:bb:ca:61:6a:e4:e2:ee:32:f6:e7:d4:54:ce: a1:26:cc:67:49:db:e7:b7:34:80:6c:a6:4c:e3:97: 6a:01:99:27:a1:f1:a3:c0:0f:fb:3e:19:e9:4a:fa: ec:f7:66:f7:db:05:07:80:48:63:c0:d0:d8:b5:f2: c3:62:95:cf:9b:4a:e9:a6:8d:b3:30:c2:d1:ed:b2: 77:10:0b:a2:d4:bd:f0:12:8a:4a:ee:9e:e0:d9:97: 1d:19:8c:bf:96:bf:5f:6c:a3:1b:50:97:12:e8:01: e3:86:69:9c:e6:ef:19:05:af:a1:50:21:2c:72:77: 61:8f:16:5c:8c:a3:0a:29:0c:32:94:d1:c2:e4:53: ff:01:00:16:af:d5:7a:17:b8:93:37:8e:3e:b7:bc: 11:bf:f3:27:4b:d8:11:cf:60:a2:96:9a:0f:69:73: 80:44:60:47:98:fc:38:13:a8:af:f7:23:f2:3a:bc: 17:d8:c3:7e:d1:50:73:ab:04:d7:0e:31:5d:a9:c5: a4:bd:9e:99:76:b8:f4:cd:91:0e:05:11:4e:f5:a7: 10:8a:19:55:b6:5e:ea:29:bf:db:fd:d1:34:34:ac: 07:83:b0:fa:e0:db:53:2b:07:86:cc:76:05:76:86: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F1:FA:06:5F:27:3F:E5:15:30:0A:83:3C:E4:D4:5A:DB:DA:C1:47 X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:31:e3:6d:a3:b0:a9:0f:a4:b9:9a:aa:db:ce:5e:73:c4:85: e4:26:fd:dd:01:36:9f:37:a4:40:25:a5:15:27:5b:e0:38:87: 96:16:6a:80:5d:85:07:7d:d4:52:93:20:e9:30:16:de:6c:72: 51:bc:04:c3:62:9c:14:be:63:4c:e0:51:05:39:de:a1:64:a2: dc:77:ff:7e:89:49:87:d1:ff:ae:e4:11:6f:45:94:d9:7b:45: 0a:17:47:0a:4b:f5:48:35:d3:c7:f7:c6:84:8c:46:17:99:a2: 93:76:c0:06:9d:6f:38:4f:72:cc:b8:ea:7f:68:bc:01:32:e6: 52:49:29:d1:85:58:b8:3f:f5:31:ec:fb:5d:19:b8:81:78:5a: 7b:39:7f:97:cf:23:83:5a:d7:5e:85:b8:3c:18:19:b9:28:96: ff:bd:2e:bc:60:8c:f8:45:db:ba:03:14:a5:fe:13:7d:61:7e: bb:01:ed:1c:95:06:03:cf:d3:47:09:ab:7f:cf:f5:e3:c2:d8: 71:f4:de:07:dc:1a:93:29:bb:d0:e4:ad:92:0f:32:65:55:72: 8a:79:56:74:de:a9:68:8d:ff:5c:eb:e1:a9:2b:23:1c:c0:ee: 96:90:65:c5:89:07:69:a7:02:24:34:99:f6:12:d2:73:90:6d: 28:3b:a4:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjUwNTE0MTY1NjI5WhcNMjUwNTIxMTY1NjI5WjAYMRYwFAYD VQQDEw02ODI0Y2IzZC1jOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsojid1bavwiQ6Mbd8EnJ27vKYWrk4u4y9ufUVM6hJsxnSdvntzSAbKZM45dq AZknofGjwA/7PhnpSvrs92b32wUHgEhjwNDYtfLDYpXPm0rppo2zMMLR7bJ3EAui 1L3wEopK7p7g2ZcdGYy/lr9fbKMbUJcS6AHjhmmc5u8ZBa+hUCEscndhjxZcjKMK KQwylNHC5FP/AQAWr9V6F7iTN44+t7wRv/MnS9gRz2CilpoPaXOARGBHmPw4E6iv 9yPyOrwX2MN+0VBzqwTXDjFdqcWkvZ6Zdrj0zZEOBRFO9acQihlVtl7qKb/b/dE0 NKwHg7D64NtTKweGzHYFdobMXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/x+gZf Jz/lFTAKgzzk1Frb2sFHMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJMeNto7CpD6S5mqrbzl5zxIXkJv3dATafN6RAJaUVJ1vgOIeWFmqA XYUHfdRSkyDpMBbebHJRvATDYpwUvmNM4FEFOd6hZKLcd/9+iUmH0f+u5BFvRZTZ e0UKF0cKS/VINdPH98aEjEYXmaKTdsAGnW84T3LMuOp/aLwBMuZSSSnRhVi4P/Ux 7PtdGbiBeFp7OX+XzyODWtdehbg8GBm5KJb/vS68YIz4Rdu6AxSl/hN9YX67Ae0c lQYDz9NHCat/z/Xjwthx9N4H3BqTKbvQ5K2SDzJlVXKKeVZ03qlojf9c6+GpKyMc wO6WkGXFiQdppwIkNJn2EtJzkG0oO6Tu -----END CERTIFICATE-----Generated at Thu May 15 22:29:03 2025 by rpki-client