$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: 0UVDTdoKecJq4yH2KqKziZoRmypo6JBrfo1EwO5Lgos= Subject key identifier: B8:21:6F:67:C9:DC:F3:24:79:FB:9B:BD:BD:60:5D:96:7D:CD:40:E0 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2D52 Signing time: Fri 16 May 2025 15:42:23 +0000 Manifest this update: Fri 16 May 2025 15:42:23 +0000 Manifest next update: Fri 23 May 2025 15:42:23 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: 14I0l0KSL1N3GyICgLdlCGWs/0dhDQjaZ2S2w2RlOKo=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11636 (0x2d74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: May 16 15:42:23 2025 GMT Not After : May 23 15:42:23 2025 GMT Subject: CN=68275cdf-a70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:e2:3d:16:98:2f:85:e9:c7:93:6d:21:9b: 72:34:e5:57:4c:ac:78:a1:ef:4a:83:0e:67:ac:c8: ad:67:ba:5e:92:44:e6:5c:f6:a6:39:8c:6b:bf:4f: f9:58:b9:25:33:30:6b:db:11:f3:f7:4c:a3:ac:20: 4e:77:9f:68:d0:51:d1:3e:eb:27:f1:b2:20:89:13: 08:4f:a0:8d:aa:c0:dd:3d:8c:4e:55:73:23:f4:a3: 07:5a:b3:9f:81:86:77:a3:39:12:8f:61:5e:84:d5: b8:4e:b6:09:7d:16:9d:27:fd:88:84:6d:df:da:23: 22:4d:c2:ba:7c:99:8a:66:16:d8:d0:d0:28:62:e1: b6:72:23:dc:07:eb:cb:e3:a4:26:6a:92:17:ac:04: 98:f2:a2:e6:42:f1:b0:12:31:f5:a8:fb:13:03:82: 34:72:f4:a5:81:33:e4:b6:47:77:e4:85:23:00:e7: bd:16:a5:64:7c:2b:d9:84:a7:7a:d6:99:43:c4:d9: 0b:59:db:39:57:c3:39:eb:14:a2:1c:fa:d0:3e:5d: 5b:c7:f8:09:ff:98:65:ed:aa:97:5c:2d:9e:d1:c3: b3:a6:a4:f1:b6:c8:8f:72:e6:a7:4a:e4:a8:b0:54: 0f:50:ff:bc:cb:74:4d:93:e8:63:90:e6:ff:6d:b6: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:21:6F:67:C9:DC:F3:24:79:FB:9B:BD:BD:60:5D:96:7D:CD:40:E0 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:27:1a:50:87:62:e1:e8:56:c7:a0:0a:a7:60:66:25:ed:fe: 93:46:3b:b1:bb:de:d4:b7:a4:a6:55:c2:48:f6:cf:a0:6a:32: b2:75:b2:df:88:3e:a4:1a:f7:36:96:87:0c:dc:d1:ff:e4:3b: 31:60:71:ce:ce:de:af:ea:8e:a2:7f:3a:54:52:55:1f:4a:78: 10:c7:41:f2:b9:ed:39:96:c8:b9:cf:95:f9:aa:6c:09:4d:f4: a3:b9:08:93:9d:f1:0c:96:88:c1:cd:10:bd:32:69:0e:b4:52: 9b:86:03:af:17:08:cd:5a:08:18:30:18:ba:7c:97:6a:dd:17: d4:93:88:da:fa:94:f9:70:21:e9:8a:85:ee:9d:de:7d:b0:ad: 52:5d:16:e2:e8:69:11:ca:df:ed:f8:9e:19:6c:8c:4b:83:2d: 03:34:9f:f4:14:6f:88:d5:cd:09:7b:c1:5b:e4:74:3d:f2:50: 45:7d:1e:4e:26:5f:9f:1e:30:24:6d:17:65:f7:f2:39:7c:d2: d3:85:23:81:7b:49:d9:63:20:36:47:03:3b:66:ed:4f:f4:ee: 15:8e:37:87:50:d3:92:6a:55:1d:bf:ec:72:d3:b7:f3:23:82: d0:86:1e:d4:4a:cf:97:3e:49:8d:42:11:81:d4:72:ca:68:af: cc:fb:71:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwNTE2MTU0MjIzWhcNMjUwNTIzMTU0MjIzWjAYMRYwFAYD VQQDEw02ODI3NWNkZi1hNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SviPRaYL4Xpx5NtIZtyNOVXTKx4oe9Kgw5nrMitZ7pekkTmXPamOYxrv0/5 WLklMzBr2xHz90yjrCBOd59o0FHRPusn8bIgiRMIT6CNqsDdPYxOVXMj9KMHWrOf gYZ3ozkSj2FehNW4TrYJfRadJ/2IhG3f2iMiTcK6fJmKZhbY0NAoYuG2ciPcB+vL 46QmapIXrASY8qLmQvGwEjH1qPsTA4I0cvSlgTPktkd35IUjAOe9FqVkfCvZhKd6 1plDxNkLWds5V8M56xSiHPrQPl1bx/gJ/5hl7aqXXC2e0cOzpqTxtsiPcuanSuSo sFQPUP+8y3RNk+hjkOb/bbYliQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLghb2fJ 3PMkefubvb1gXZZ9zUDgMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdJxpQh2Lh6FbHoAqnYGYl7f6TRjuxu97Ut6SmVcJI9s+gajKydbLf iD6kGvc2locM3NH/5DsxYHHOzt6v6o6ifzpUUlUfSngQx0Hyue05lsi5z5X5qmwJ TfSjuQiTnfEMlojBzRC9MmkOtFKbhgOvFwjNWggYMBi6fJdq3RfUk4ja+pT5cCHp ioXund59sK1SXRbi6GkRyt/t+J4ZbIxLgy0DNJ/0FG+I1c0Je8Fb5HQ98lBFfR5O Jl+fHjAkbRdl9/I5fNLThSOBe0nZYyA2RwM7Zu1P9O4VjjeHUNOSalUdv+xy07fz I4LQhh7USs+XPkmNQhGB1HLKaK/M+3FB -----END CERTIFICATE-----Generated at Sun May 18 16:48:53 2025 by rpki-client