$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json) Hash identifier: 6Lr1LCbUAZTfgTOLWdBZrfgrBp+mYRfCCADLc2x9Vdk= Subject key identifier: 69:E6:E0:F7:DB:51:83:03:BD:5C:9E:B9:83:25:1D:AC:3A:D8:F7:32 Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft Manifest number: 0418 Signing time: Tue 13 May 2025 00:14:49 +0000 Manifest this update: Tue 13 May 2025 00:14:48 +0000 Manifest next update: Tue 20 May 2025 00:14:48 +0000 Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: jDLeNcSQD0OB7sEDXEQW3CFWfUMUwfQC8+3nSvqRyE0=) 2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Validity Not Before: May 13 00:14:48 2025 GMT Not After : May 20 00:14:48 2025 GMT Subject: CN=68228ef8-e29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:88:d0:46:a7:1d:57:ae:9b:cf:2b:b3:5e:6e: 4f:8c:13:2a:a6:42:9a:5b:15:2b:83:e0:be:e8:a5: 76:fc:3a:93:3c:5c:da:2a:17:25:7a:8f:de:2f:d0: 7e:ad:ad:9f:85:02:3e:22:4c:62:da:e7:90:fd:dd: 5a:88:b5:da:4f:46:91:9f:5d:c7:65:9d:a1:7d:7b: 1a:0c:c8:55:fd:61:6f:d7:93:34:fa:ac:cc:94:82: 3d:aa:aa:39:93:80:9f:63:cd:80:69:40:b4:75:1b: 62:0d:6b:af:9d:b5:37:4f:b9:36:8c:39:53:1b:a6: 41:98:bc:48:f4:d0:41:6c:0d:89:69:f9:7a:f6:4a: 6e:35:a7:45:cd:ba:67:7e:a9:ac:b4:0b:d2:be:8a: ba:5f:2b:c8:04:d9:d6:75:9a:49:6f:be:92:a6:6b: 89:f0:ed:47:8b:b4:b1:37:24:60:ee:0e:00:be:d7: 95:7f:5a:98:51:8c:53:0f:17:ff:f9:14:3e:ff:1c: 73:40:98:88:83:89:2f:4e:45:08:71:3b:6f:f2:13: d1:58:d1:b7:63:2e:26:d9:3b:56:ee:27:36:49:12: b2:3a:24:e4:f2:21:36:f5:6f:78:a7:15:bd:1b:13: f5:ec:82:62:01:1e:d5:c8:f1:23:36:c0:29:70:5f: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E6:E0:F7:DB:51:83:03:BD:5C:9E:B9:83:25:1D:AC:3A:D8:F7:32 X509v3 Authority Key Identifier: keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a2:cb:2d:5c:81:81:6d:37:30:05:2d:b7:48:c0:6a:b2:4a: 45:54:d3:5b:16:3f:5e:d7:67:80:8d:2f:8c:a3:c6:ae:dc:08: a1:ce:38:b5:9e:98:13:da:9f:b8:de:7d:57:1f:bf:08:55:21: c0:4b:8d:f1:5b:61:d6:73:25:6a:d7:64:82:05:4e:3b:22:c1: ac:b2:25:8d:d3:bd:a0:5e:f4:3c:67:f0:c8:a6:a3:b4:3a:10: 21:65:ed:d8:26:be:ab:f5:61:76:2a:90:be:83:4a:96:4b:de: 41:25:41:16:33:7b:31:3c:65:92:9e:b2:ac:cc:c7:23:8e:b1: 3e:b9:9a:13:2f:54:b8:d9:dd:fa:66:79:38:63:75:a1:15:24: bd:eb:12:51:d1:7e:46:24:8e:cb:f0:d8:5c:7e:da:a4:fe:1d: ee:a2:b9:bc:b4:b0:40:78:e0:26:bb:fa:f3:12:f8:bc:1c:45: ea:48:4f:a3:98:8b:22:65:73:1c:ca:c3:6f:a8:6a:44:34:45: e9:dc:27:62:7e:0e:70:ad:23:44:a0:0a:e4:84:48:1d:23:ff: 69:3a:16:cf:37:5a:6f:92:99:7f:6b:c4:f7:ad:7e:94:8e:11: 76:ed:7f:00:6e:6a:4e:93:3d:67:86:a9:f3:7c:93:89:1a:81: 96:e3:4d:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx MkE1NTFDMzgwHhcNMjUwNTEzMDAxNDQ4WhcNMjUwNTIwMDAxNDQ4WjAYMRYwFAYD VQQDEw02ODIyOGVmOC1lMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYjQRqcdV66bzyuzXm5PjBMqpkKaWxUrg+C+6KV2/DqTPFzaKhcleo/eL9B+ ra2fhQI+Ikxi2ueQ/d1aiLXaT0aRn13HZZ2hfXsaDMhV/WFv15M0+qzMlII9qqo5 k4CfY82AaUC0dRtiDWuvnbU3T7k2jDlTG6ZBmLxI9NBBbA2Jafl69kpuNadFzbpn fqmstAvSvoq6XyvIBNnWdZpJb76SpmuJ8O1Hi7SxNyRg7g4AvteVf1qYUYxTDxf/ +RQ+/xxzQJiIg4kvTkUIcTtv8hPRWNG3Yy4m2TtW7ic2SRKyOiTk8iE29W94pxW9 GxP17IJiAR7VyPEjNsApcF/d5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnm4Pfb UYMDvVyeuYMlHaw62PcyMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy bnFzd05HOWlTMk1TcFZIRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBosstXIGBbTcwBS23SMBqskpFVNNbFj9e12eAjS+Mo8au3Aihzji1 npgT2p+43n1XH78IVSHAS43xW2HWcyVq12SCBU47IsGssiWN072gXvQ8Z/DIpqO0 OhAhZe3YJr6r9WF2KpC+g0qWS95BJUEWM3sxPGWSnrKszMcjjrE+uZoTL1S42d36 Znk4Y3WhFSS96xJR0X5GJI7L8Nhcftqk/h3uorm8tLBAeOAmu/rzEvi8HEXqSE+j mIsiZXMcysNvqGpENEXp3Cdifg5wrSNEoArkhEgdI/9pOhbPN1pvkpl/a8T3rX6U jhF27X8AbmpOkz1nhqnzfJOJGoGW402l -----END CERTIFICATE-----Generated at Wed May 14 10:43:19 2025 by rpki-client