$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: j0d0aM+lbGSc9soqqUj5RAiDVVq4VYXCjsLTObsNng8= Subject key identifier: 11:4E:25:2F:FD:A7:B0:B7:94:CC:97:1A:3C:03:12:D3:38:7C:F1:0B Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1AA1 Signing time: Mon 12 May 2025 16:17:09 +0000 Manifest this update: Mon 12 May 2025 16:17:08 +0000 Manifest next update: Mon 19 May 2025 16:17:08 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: PUflR5MjpByCkZh5u4U4L8BuRwKqkge+yjxGNCXDlO8=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: A6xdM14VrnCdwg0TqU0I0zzOpRFsFmCK+agsWkSMQCA=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: vrRUnpBdqM34i5a9Uoksk8sscXoYe/cPgohb+RiQ9YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6862 (0x1ace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: May 12 16:17:08 2025 GMT Not After : May 19 16:17:08 2025 GMT Subject: CN=68221f05-1b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:b3:e4:24:bd:fc:97:53:20:c5:93:93:74: c2:8b:b9:aa:30:3c:c5:38:2a:08:7d:35:7b:e6:7a: 6f:ae:27:57:c8:0c:4b:d9:8b:5a:56:d5:04:81:e6: 5a:4e:0e:8b:8a:ed:4b:5e:bb:75:3d:16:f8:95:d0: 4f:f0:d2:6b:43:fc:f6:b0:60:87:3b:2a:23:dc:fa: a5:6c:24:d6:5a:c6:a3:3c:88:cb:22:cd:74:0e:d1: d3:aa:70:fd:2b:eb:e2:ba:0b:05:64:b6:75:ce:a7: 40:4c:6d:47:58:05:46:c6:eb:e7:b9:5c:7c:88:22: d4:c9:e6:79:1e:cb:c9:e2:80:4b:47:8f:1b:59:64: ca:c2:d5:65:f0:9d:4a:27:fe:0f:19:9b:59:24:15: 22:0a:0f:ba:ea:59:0b:e6:d2:af:1f:e5:6f:fc:1b: c1:e6:af:df:40:99:ec:72:64:d6:5b:6e:44:cf:12: 16:5a:93:8d:d0:19:fb:1b:9d:00:35:07:19:e0:4b: 6e:74:8e:29:34:90:86:70:4a:51:da:78:94:b2:02: 94:4e:c2:43:f5:31:5c:a4:6f:9d:95:e8:12:47:9c: 06:dd:d3:96:7a:10:51:0a:f3:43:79:12:7d:09:93: 11:b6:8d:26:0b:70:cc:0e:2b:90:7d:7d:b7:ea:6a: 4a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4E:25:2F:FD:A7:B0:B7:94:CC:97:1A:3C:03:12:D3:38:7C:F1:0B X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1c:9a:a7:86:86:4e:91:62:c1:46:26:27:92:80:71:89:d8: ca:e4:ca:b8:23:83:44:50:35:e7:6b:3b:56:64:5c:5c:f5:8c: 97:59:d5:51:29:d9:53:ce:4f:43:14:10:39:40:f9:d0:23:b4: c9:7f:cd:cf:11:44:5c:3f:6a:ea:4c:6b:43:29:56:ce:fb:fe: f1:39:f6:a8:63:a2:61:75:b4:97:3b:dd:32:d4:1f:15:cd:f3: 78:c4:db:3d:88:47:c0:1a:46:3e:2b:55:64:9c:82:1d:e4:2e: 83:cc:8b:ff:84:75:c9:07:b8:98:79:f0:60:e3:ea:1b:37:df: 31:66:4a:41:3f:f9:12:68:18:40:a1:cd:79:22:e3:f5:80:d4: 70:26:56:8a:eb:4f:b6:a8:4f:57:18:82:b8:07:69:c6:5d:18: ab:a8:46:b1:34:91:b5:b4:90:9f:27:76:02:0c:ea:05:ad:43: 1f:78:9e:3c:6c:94:a4:12:55:77:03:f2:65:b4:f0:d4:a9:d2: fb:5d:ce:3d:fe:77:6a:f9:e5:b2:3d:6c:07:92:fe:1b:91:a9: 76:e3:08:8b:32:10:db:d8:fc:f7:a9:b9:0b:30:da:2d:aa:ed: e0:89:ad:57:79:94:77:d3:86:a5:13:f9:17:2a:34:8f:a0:9a: f0:71:c9:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUwNTEyMTYxNzA4WhcNMjUwNTE5MTYxNzA4WjAYMRYwFAYD VQQDEw02ODIyMWYwNS0xYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9yz5CS9/JdTIMWTk3TCi7mqMDzFOCoIfTV75npvridXyAxL2YtaVtUEgeZa Tg6Liu1LXrt1PRb4ldBP8NJrQ/z2sGCHOyoj3PqlbCTWWsajPIjLIs10DtHTqnD9 K+viugsFZLZ1zqdATG1HWAVGxuvnuVx8iCLUyeZ5HsvJ4oBLR48bWWTKwtVl8J1K J/4PGZtZJBUiCg+66lkL5tKvH+Vv/BvB5q/fQJnscmTWW25EzxIWWpON0Bn7G50A NQcZ4EtudI4pNJCGcEpR2niUsgKUTsJD9TFcpG+dlegSR5wG3dOWehBRCvNDeRJ9 CZMRto0mC3DMDiuQfX236mpKhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFOJS/9 p7C3lMyXGjwDEtM4fPELMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjHJqnhoZOkWLBRiYnkoBxidjK5Mq4I4NEUDXnaztWZFxc9YyXWdVR KdlTzk9DFBA5QPnQI7TJf83PEURcP2rqTGtDKVbO+/7xOfaoY6JhdbSXO90y1B8V zfN4xNs9iEfAGkY+K1VknIId5C6DzIv/hHXJB7iYefBg4+obN98xZkpBP/kSaBhA oc15IuP1gNRwJlaK60+2qE9XGIK4B2nGXRirqEaxNJG1tJCfJ3YCDOoFrUMfeJ48 bJSkElV3A/JltPDUqdL7Xc49/ndq+eWyPWwHkv4bkal24wiLMhDb2Pz3qbkLMNot qu3gia1XeZR304alE/kXKjSPoJrwcckg -----END CERTIFICATE-----Generated at Tue May 13 02:25:00 2025 by rpki-client