$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft File: z0dmQoBPz_nXCSiWNYNV1awA6nM.mft (raw, json) Hash identifier: srMDgFNpDfCsIsqKSdtbuId0MbeRVwhq/bdhJicSRko= Subject key identifier: F6:F3:E9:99:AF:1D:30:8C:BC:A7:21:9E:FA:59:92:32:96:74:B4:B5 Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 Certificate issuer: /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft Manifest number: 0136 Signing time: Sun 11 May 2025 03:18:29 +0000 Manifest this update: Sun 11 May 2025 03:18:28 +0000 Manifest next update: Sun 18 May 2025 03:18:28 +0000 Files and hashes: 1: z0dmQoBPz_nXCSiWNYNV1awA6nM.crl (hash: yiOtA1FfNa4e5I6E8VHLsBLDiNDLEZ6kPeQllI+xvnM=) 2: 49467E2251BB11EEA3C7487DC4F9AE02.roa (hash: 1BeURRtwvSUrpkIj6xn/5BXwfH6TF/4NRVSxl/lQeog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAD4, serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Validity Not Before: May 11 03:18:28 2025 GMT Not After : May 18 03:18:28 2025 GMT Subject: CN=68201704-8d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:c8:ec:15:bd:5d:df:45:db:d1:26:f1:f6: 5e:4d:11:a9:e3:f1:50:49:40:84:b2:38:1e:27:f0: 45:e9:42:f2:b9:aa:10:e4:a6:b5:11:eb:a8:0d:4b: f3:38:c7:00:de:e7:f9:d6:22:7f:5d:17:85:ea:1e: 65:f4:7a:d5:e6:10:df:6d:27:2d:d1:f4:9e:4c:ff: 32:65:60:9e:27:23:03:b2:57:d9:0b:b2:d6:98:0e: f0:23:2f:00:18:26:20:4c:33:8c:3e:ea:ee:51:5b: 4d:98:51:de:1b:ab:1f:48:78:07:c2:04:f4:7b:8f: 6b:51:a9:f1:94:c8:7d:27:8a:ce:44:32:55:c4:96: 06:b4:75:c4:0e:37:87:aa:b7:ee:e3:ec:d9:dc:2d: 2e:3e:a9:4f:19:1a:61:51:e1:00:f6:c7:42:f7:6d: 55:57:e6:cc:c7:d9:0f:b9:81:c3:db:3d:60:ec:6c: 60:81:5b:f8:9c:db:31:91:12:af:d4:32:65:2f:3e: 66:04:4d:2d:bb:3a:7d:2a:19:9a:d2:3e:da:b0:ee: 59:2b:69:32:d5:04:2f:bc:fc:50:2a:8c:87:38:b7: 77:42:fb:87:9c:f5:6c:15:b2:74:b4:f1:c4:bc:46: 40:4b:3a:22:2a:fd:cb:b7:11:cd:bf:09:fb:b3:a2: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:E9:99:AF:1D:30:8C:BC:A7:21:9E:FA:59:92:32:96:74:B4:B5 X509v3 Authority Key Identifier: keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:73:62:9d:bc:16:d8:ac:3a:1d:b8:c1:c9:e5:87:52:24:4d: b6:50:51:23:fb:0e:9b:92:ff:9f:ed:4b:2c:84:1f:31:35:a1: 62:47:b6:c5:d0:23:61:c3:10:22:e7:43:38:2a:1d:b4:8d:62: b3:ed:d0:dc:58:e5:5a:1b:5a:dd:0b:3c:ce:a5:5f:ca:85:9b: cc:5a:4e:49:54:60:8d:7b:8c:36:96:9a:d2:b1:fa:31:ff:03: 8a:e9:a1:9c:28:37:8e:6d:6c:06:2f:6d:d9:1e:eb:77:8f:54: 6d:b0:6c:d5:d6:98:fd:e9:07:6b:ce:45:cd:6f:99:b1:35:4d: c0:e8:da:98:d5:48:64:1e:ae:95:02:c8:cf:17:13:d8:d7:92: 33:1e:f2:d0:60:1b:81:76:65:0e:84:35:d1:76:86:a6:99:c3: b8:49:c0:f2:9a:59:8c:d6:7c:4a:f9:f6:b3:12:7c:72:b2:02: d8:01:1f:07:1c:42:a2:e5:88:87:0e:ed:28:e4:d7:46:45:61: 04:f3:bd:65:e8:2b:c6:5f:11:00:4d:a7:80:d4:60:44:67:e7: f0:26:7b:bb:a0:8a:a7:37:13:32:a6:bf:35:35:1d:e8:c5:8e: 3b:b1:5c:89:b9:96:ba:55:30:3e:44:8a:d1:c7:a9:d7:38:54: 14:e3:ba:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBRDQxMTAvBgNVBAUTKENGNDc2NjQyODA0RkNGRjlENzA5Mjg5NjM1ODM1NUQ1 QUMwMEVBNzMwHhcNMjUwNTExMDMxODI4WhcNMjUwNTE4MDMxODI4WjAYMRYwFAYD VQQDEw02ODIwMTcwNC04ZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JLI7BW9Xd9F29Em8fZeTRGp4/FQSUCEsjgeJ/BF6ULyuaoQ5Ka1EeuoDUvz OMcA3uf51iJ/XReF6h5l9HrV5hDfbSct0fSeTP8yZWCeJyMDslfZC7LWmA7wIy8A GCYgTDOMPuruUVtNmFHeG6sfSHgHwgT0e49rUanxlMh9J4rORDJVxJYGtHXEDjeH qrfu4+zZ3C0uPqlPGRphUeEA9sdC921VV+bMx9kPuYHD2z1g7GxggVv4nNsxkRKv 1DJlLz5mBE0tuzp9Khma0j7asO5ZK2ky1QQvvPxQKoyHOLd3QvuHnPVsFbJ0tPHE vEZASzoiKv3LtxHNvwn7s6KsewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbz6Zmv HTCMvKchnvpZkjKWdLS1MB8GA1UdIwQYMBaAFM9HZkKAT8/51wkoljWDVdWsAOpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFENC8wREQ4Rjc5RTUx QkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpfblhDU2lXTllOVjFhd0E2 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owZG1Rb0JQel9uWENTaVdOWU5WMWF3QTZuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFENC8wREQ4Rjc5RTUxQkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpf blhDU2lXTllOVjFhd0E2bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPc2KdvBbYrDoduMHJ5YdSJE22UFEj+w6bkv+f7UsshB8xNaFiR7bF 0CNhwxAi50M4Kh20jWKz7dDcWOVaG1rdCzzOpV/KhZvMWk5JVGCNe4w2lprSsfox /wOK6aGcKDeObWwGL23ZHut3j1RtsGzV1pj96QdrzkXNb5mxNU3A6NqY1UhkHq6V AsjPFxPY15IzHvLQYBuBdmUOhDXRdoammcO4ScDymlmM1nxK+fazEnxysgLYAR8H HEKi5YiHDu0o5NdGRWEE871l6CvGXxEATaeA1GBEZ+fwJnu7oIqnNxMypr81NR3o xY47sVyJuZa6VTA+RIrRx6nXOFQU47qt -----END CERTIFICATE-----Generated at Mon May 12 17:58:11 2025 by rpki-client