$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: a/4yZ+Dj7IagDXqmGr6ECDbbRzktjpm+Hn/34cTmqiE= Subject key identifier: 61:DE:43:0F:93:48:26:63:FF:67:19:93:4D:54:6C:DA:BC:AE:1C:7C Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 0102 Signing time: Sun 11 May 2025 03:56:55 +0000 Manifest this update: Sun 11 May 2025 03:56:54 +0000 Manifest next update: Sun 18 May 2025 03:56:54 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: WzsCIlW2c3fIJE1vlEEX4QdlzVZCWeoWpAwoDsf3e+M=) 2: 725ED2DC3C3E11EF8E9ED658C4F9AE02.roa (hash: b8Nk35gI73n6vPSPeGhcdp8/EnX7d3C+aJhz3JSGsbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: May 11 03:56:54 2025 GMT Not After : May 18 03:56:54 2025 GMT Subject: CN=68202007-c1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:c3:05:af:26:48:c2:33:5f:d8:10:51:3d: 00:27:4f:4c:c6:af:e0:8f:b3:a4:52:a3:52:d4:f0: 31:77:b4:92:d1:a2:57:de:80:18:ea:b5:c6:2e:b5: 3c:5b:1a:ba:33:4a:c1:f0:ce:f7:b8:b2:ce:05:78: 0a:67:07:d8:d3:fe:81:76:7f:13:b9:6e:0f:10:6c: 32:df:e7:67:1d:1f:90:0c:67:eb:34:86:8c:e8:d9: 24:27:82:2b:71:a3:96:4e:a7:c0:b6:95:f6:54:3d: 49:d4:4f:b3:b1:00:76:08:21:48:9f:0b:26:39:1e: ef:d2:f4:a0:99:62:75:08:47:e9:ab:d1:e3:57:f7: 42:84:0a:1b:58:fd:eb:55:20:67:66:91:51:fb:34: 53:2d:15:82:c7:4c:ae:30:fa:c1:54:ff:df:56:9e: 39:b3:44:8e:21:8a:8d:ac:d3:eb:42:0b:8a:09:cf: 94:c1:1e:90:f9:c3:92:ec:6b:49:2d:72:1c:8e:7f: 81:e3:c4:6e:b0:47:53:05:50:66:84:7b:01:be:30: 9d:b9:bd:33:b9:23:8a:5e:6f:5e:4e:ea:d1:f6:98: 69:17:aa:3b:1f:b6:a7:b5:69:c6:ad:8c:65:4e:54: ec:59:18:d1:41:61:3e:42:76:cb:c1:6e:d7:e3:8f: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DE:43:0F:93:48:26:63:FF:67:19:93:4D:54:6C:DA:BC:AE:1C:7C X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ff:20:20:cd:ba:e8:2e:07:6a:0a:4a:44:8c:e7:7e:78:9e: e8:58:08:d1:cb:62:f1:51:6e:db:dc:f1:46:49:f4:7b:b0:c9: bc:a6:6c:16:ba:56:a2:1d:91:72:8b:cf:59:fe:31:cb:69:e0: 9a:13:d2:10:8c:3e:73:91:59:af:3e:af:36:21:91:6e:ec:e7: 37:23:6f:f7:bd:9a:c2:22:03:7a:f6:03:ed:f8:af:d9:5a:42: 2d:b3:54:c1:94:de:b1:e8:35:83:49:24:21:69:6a:cb:0e:d1: 88:29:d4:df:9b:9b:a6:77:99:7f:ed:3b:5e:07:28:fb:19:e3: b5:cd:3c:db:de:ad:6b:5c:9f:73:b4:dc:18:88:ad:6e:8c:5b: 8f:27:0f:54:15:66:23:aa:c3:b9:eb:30:1f:d6:84:c0:e6:ee: 1a:6f:da:04:92:3d:0b:c5:94:88:28:80:11:ff:18:4f:76:25: 73:3a:42:21:94:0f:d9:46:24:3d:27:42:b8:53:5f:80:23:f8: 4e:3e:a5:f7:05:d9:43:5a:a4:e3:2e:a9:9a:d3:e5:f6:1a:7a: 78:cc:f6:eb:9a:3c:67:4e:e3:d3:1c:e9:52:2a:ed:6a:bb:7f: d6:1e:d0:81:52:6e:d2:c2:b1:66:90:3b:21:85:06:a8:32:c7: 86:c5:53:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjUwNTExMDM1NjU0WhcNMjUwNTE4MDM1NjU0WjAYMRYwFAYD VQQDEw02ODIwMjAwNy1jMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxXDBa8mSMIzX9gQUT0AJ09Mxq/gj7OkUqNS1PAxd7SS0aJX3oAY6rXGLrU8 Wxq6M0rB8M73uLLOBXgKZwfY0/6Bdn8TuW4PEGwy3+dnHR+QDGfrNIaM6NkkJ4Ir caOWTqfAtpX2VD1J1E+zsQB2CCFInwsmOR7v0vSgmWJ1CEfpq9HjV/dChAobWP3r VSBnZpFR+zRTLRWCx0yuMPrBVP/fVp45s0SOIYqNrNPrQguKCc+UwR6Q+cOS7GtJ LXIcjn+B48RusEdTBVBmhHsBvjCdub0zuSOKXm9eTurR9phpF6o7H7antWnGrYxl TlTsWRjRQWE+QnbLwW7X449mnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHeQw+T SCZj/2cZk01UbNq8rhx8MB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI/yAgzbroLgdqCkpEjOd+eJ7oWAjRy2LxUW7b3PFGSfR7sMm8pmwW ulaiHZFyi89Z/jHLaeCaE9IQjD5zkVmvPq82IZFu7Oc3I2/3vZrCIgN69gPt+K/Z WkIts1TBlN6x6DWDSSQhaWrLDtGIKdTfm5umd5l/7TteByj7GeO1zTzb3q1rXJ9z tNwYiK1ujFuPJw9UFWYjqsO56zAf1oTA5u4ab9oEkj0LxZSIKIAR/xhPdiVzOkIh lA/ZRiQ9J0K4U1+AI/hOPqX3BdlDWqTjLqma0+X2Gnp4zPbrmjxnTuPTHOlSKu1q u3/WHtCBUm7SwrFmkDshhQaoMseGxVN7 -----END CERTIFICATE-----Generated at Mon May 12 22:11:51 2025 by rpki-client