$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: pZP8MgWgD7nkdpzwOouNbNB1Tghkl5HBNNlyHZKV75I= Subject key identifier: 50:DF:C4:23:04:BF:52:0A:5B:CD:BC:82:63:4D:C8:DA:7B:A5:D6:BC Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 0275 Signing time: Sun 11 May 2025 01:13:13 +0000 Manifest this update: Sun 11 May 2025 01:13:12 +0000 Manifest next update: Sun 18 May 2025 01:13:12 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: +7tR9Aw7rBdefrwo94vhxaWguF473MXUVDYLcROy0TQ=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: WqjZAsQr/HLYxK8PcAumByn22k0e0D3wGPxVIBEBQ6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: May 11 01:13:12 2025 GMT Not After : May 18 01:13:12 2025 GMT Subject: CN=681ff9a9-e2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:bb:82:ab:b6:9e:d7:ec:73:aa:ef:64:5d: 56:3d:85:4e:4e:61:59:1a:5d:ec:d2:a7:7b:91:7d: d3:ae:b6:6a:43:44:e4:e1:72:6e:34:03:10:d0:b4: e4:9e:27:a6:14:e1:1e:93:6d:1e:ef:05:52:b3:29: de:fa:a4:9f:fa:66:b7:c2:1a:50:db:06:cf:e2:a9: d3:c9:6d:a2:b2:ad:80:6d:d2:d7:f5:c9:d8:9e:47: 75:1f:00:ec:f5:c0:3b:c7:ec:c2:d5:e1:dc:6c:82: d5:e0:1c:4d:4f:cc:d5:71:f8:27:75:a4:69:56:18: ac:2f:5a:be:9c:56:ab:46:02:91:6a:1f:e8:74:d5: 7b:e8:bc:d5:9f:d1:f6:fe:58:f8:13:db:bc:0b:5d: a2:15:e8:09:d9:d3:a1:f3:d0:af:af:69:98:99:11: 11:2d:6d:74:49:c9:da:c7:67:77:82:52:71:48:50: f2:dc:6f:ee:8c:58:51:5f:21:9f:1b:8f:59:27:6e: 37:59:dc:1c:15:51:9a:69:c4:5e:e6:39:ca:09:d9: 0d:20:fe:a9:6d:8a:31:36:9d:7e:c5:b0:bd:0a:be: ea:de:17:ef:0e:ee:32:dc:a1:12:74:07:4a:8c:27: 15:0d:ea:8c:7f:8f:2c:05:f8:eb:22:9c:ee:aa:4f: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DF:C4:23:04:BF:52:0A:5B:CD:BC:82:63:4D:C8:DA:7B:A5:D6:BC X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0b:94:34:0b:ad:d9:de:28:81:6b:7b:84:d6:39:83:e4:36: 22:c3:a9:c6:90:04:74:21:ef:33:cc:5e:90:35:b5:35:a5:35: 9c:85:f8:61:a0:39:dc:4a:dc:73:10:6c:62:d9:08:73:4b:69: 93:f9:06:c0:96:4d:ad:99:f2:b8:29:f9:a4:49:d0:33:ad:78: 0b:45:a8:ec:84:4e:16:ca:3c:6c:9f:2f:5b:32:a3:3c:5a:7e: 3a:dc:a3:63:20:ff:bb:be:57:a5:69:90:ac:6c:6d:51:05:f4: 70:1d:0b:81:c1:b0:de:37:d3:74:d9:cc:b2:34:b5:bb:67:b3: 4d:fd:0b:fd:5e:47:c7:75:29:e1:18:67:77:dc:fc:e9:a8:d4: 29:19:ce:52:af:04:38:c8:8e:fa:35:27:0e:80:7c:be:e8:c4: 5e:bd:99:b2:e7:74:72:f2:71:6a:d2:04:d1:56:a6:ab:22:6a: 5c:e0:bc:18:b8:23:e2:4e:c0:de:40:69:05:3b:e9:e5:6d:e2: 92:79:56:43:4d:b2:66:3c:ce:64:ef:fa:99:9d:b6:8e:10:63: 68:33:d8:f9:12:23:49:be:0e:08:b6:b0:89:2e:52:d1:b6:92: 0c:89:87:3c:b1:dc:b7:e2:3c:76:02:17:13:0a:ae:b8:c4:f5: 2f:0e:f0:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUwNTExMDExMzEyWhcNMjUwNTE4MDExMzEyWjAYMRYwFAYD VQQDEw02ODFmZjlhOS1lMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9C7gqu2ntfsc6rvZF1WPYVOTmFZGl3s0qd7kX3TrrZqQ0Tk4XJuNAMQ0LTk niemFOEek20e7wVSsyne+qSf+ma3whpQ2wbP4qnTyW2isq2AbdLX9cnYnkd1HwDs 9cA7x+zC1eHcbILV4BxNT8zVcfgndaRpVhisL1q+nFarRgKRah/odNV76LzVn9H2 /lj4E9u8C12iFegJ2dOh89Cvr2mYmRERLW10Scnax2d3glJxSFDy3G/ujFhRXyGf G49ZJ243WdwcFVGaacRe5jnKCdkNIP6pbYoxNp1+xbC9Cr7q3hfvDu4y3KESdAdK jCcVDeqMf48sBfjrIpzuqk/mmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDfxCME v1IKW828gmNNyNp7pda8MB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEC5Q0C63Z3iiBa3uE1jmD5DYiw6nGkAR0Ie8zzF6QNbU1pTWchfhh oDncStxzEGxi2QhzS2mT+QbAlk2tmfK4KfmkSdAzrXgLRajshE4Wyjxsny9bMqM8 Wn463KNjIP+7vlelaZCsbG1RBfRwHQuBwbDeN9N02cyyNLW7Z7NN/Qv9XkfHdSnh GGd33PzpqNQpGc5SrwQ4yI76NScOgHy+6MRevZmy53Ry8nFq0gTRVqarImpc4LwY uCPiTsDeQGkFO+nlbeKSeVZDTbJmPM5k7/qZnbaOEGNoM9j5EiNJvg4ItrCJLlLR tpIMiYc8sdy34jx2AhcTCq64xPUvDvAp -----END CERTIFICATE-----Generated at Mon May 12 18:20:55 2025 by rpki-client