$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: 19ay1u4uSNKjRtOcRSvqQ+OcY8J5hKSg6qjJJY3jbeE= Subject key identifier: E1:88:77:A6:28:3E:BD:2D:2B:62:FB:0E:A1:0B:87:0D:C3:EB:42:05 Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 0F9A Signing time: Fri 16 May 2025 17:46:29 +0000 Manifest this update: Fri 16 May 2025 17:46:28 +0000 Manifest next update: Fri 23 May 2025 17:46:28 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: r7Uf7StK1zBogQ1QWpqsI+kPFky1X9rzOAq3/wBevXM=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=) 4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: May 16 17:46:28 2025 GMT Not After : May 23 17:46:28 2025 GMT Subject: CN=682779f5-9743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:21:f5:0b:c1:41:0b:36:75:63:82:25:85: f7:1a:b3:8c:ea:ea:ba:68:53:4e:e4:51:11:cd:bc: 4b:62:0f:dc:ab:cc:9d:03:e8:c2:d0:6d:84:89:b0: fa:ac:2f:66:09:7a:c3:16:75:d1:94:53:e3:41:5b: 6e:20:2c:ba:8f:21:d5:41:c2:5d:a4:eb:ce:67:24: 4b:bd:fc:51:f9:e7:4c:4b:ce:84:30:1c:8f:3b:33: e4:12:0b:a8:dc:01:59:e3:77:0e:e2:e3:a2:de:cb: 3d:84:0a:5a:da:5f:c2:3d:c5:7e:8b:3b:a0:10:d2: 90:57:1b:6c:d5:ac:89:e1:c4:17:4a:bb:91:f3:4f: de:a7:89:76:ae:2c:ec:c5:3e:1e:7a:16:53:21:c8: 62:75:0f:4a:76:bf:d8:f3:1b:fd:f8:5a:c9:2d:a6: 93:09:cf:59:29:5f:dd:1c:8d:bb:02:1a:03:43:57: 2a:c3:5f:29:0b:fc:9b:22:13:3d:f5:fc:80:c8:25: c8:57:c7:2b:ef:d3:61:f6:7f:3c:db:33:6a:25:2e: 36:23:c7:5f:af:d3:24:95:6d:51:97:7e:66:45:08: e1:ce:cc:4d:24:fc:6a:f7:00:59:70:e5:59:4e:2a: 3e:4a:fb:83:20:db:e6:ef:b2:be:ea:af:40:65:57: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:88:77:A6:28:3E:BD:2D:2B:62:FB:0E:A1:0B:87:0D:C3:EB:42:05 X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e5:cc:11:1d:58:7a:db:8e:b3:49:72:9c:2a:47:c5:72:d9: 71:ba:fa:ff:50:4b:ea:12:7c:30:c7:8a:4a:65:e6:7f:3b:f2: 22:9d:b9:77:80:61:fb:83:ea:6c:36:1d:23:6e:92:1d:b2:4f: 57:1a:f3:e6:f5:3e:08:ad:de:c5:38:71:3e:5f:b1:05:14:50: a7:b7:72:cb:c5:3a:61:0a:b6:fb:88:c0:40:91:91:fa:f1:b9: a0:f5:d5:d8:7d:86:af:d8:21:8f:17:94:da:fc:d6:eb:1f:f4: 35:a6:35:71:ed:3a:7c:ab:fd:4c:50:0c:50:7c:39:06:2f:88: c7:6f:23:31:a5:b2:ca:d7:9d:b4:1e:6e:e3:52:9e:f8:cb:f3: 13:7a:c4:e8:9c:8c:48:e6:fd:06:7f:79:64:67:e5:01:12:d8: 9f:22:51:e2:77:e9:48:b8:53:e3:41:85:ac:d8:24:06:12:81: ba:5a:84:6e:87:b1:12:33:33:d8:b8:1d:11:9e:c3:5a:6b:bc: 59:a4:bf:7a:0c:64:4f:cd:16:46:09:c2:65:36:33:ee:bf:2f: 9f:ef:db:cb:d1:4c:b7:7d:34:c5:15:ed:b5:a4:7a:f9:c3:5b: ee:9d:e8:7b:f2:7d:53:6b:fa:45:dc:fc:29:f2:7f:3b:20:61: a7:76:04:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjUwNTE2MTc0NjI4WhcNMjUwNTIzMTc0NjI4WjAYMRYwFAYD VQQDEw02ODI3NzlmNS05NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqkh9QvBQQs2dWOCJYX3GrOM6uq6aFNO5FERzbxLYg/cq8ydA+jC0G2EibD6 rC9mCXrDFnXRlFPjQVtuICy6jyHVQcJdpOvOZyRLvfxR+edMS86EMByPOzPkEguo 3AFZ43cO4uOi3ss9hApa2l/CPcV+izugENKQVxts1ayJ4cQXSruR80/ep4l2rizs xT4eehZTIchidQ9Kdr/Y8xv9+FrJLaaTCc9ZKV/dHI27AhoDQ1cqw18pC/ybIhM9 9fyAyCXIV8cr79Nh9n882zNqJS42I8dfr9MklW1Rl35mRQjhzsxNJPxq9wBZcOVZ Tio+SvuDINvm77K+6q9AZVeahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGId6Yo Pr0tK2L7DqELhw3D60IFMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW5cwRHVh6246zSXKcKkfFctlxuvr/UEvqEnwwx4pKZeZ/O/Iinbl3 gGH7g+psNh0jbpIdsk9XGvPm9T4Ird7FOHE+X7EFFFCnt3LLxTphCrb7iMBAkZH6 8bmg9dXYfYav2CGPF5Ta/NbrH/Q1pjVx7Tp8q/1MUAxQfDkGL4jHbyMxpbLK1520 Hm7jUp74y/MTesTonIxI5v0Gf3lkZ+UBEtifIlHid+lIuFPjQYWs2CQGEoG6WoRu h7ESMzPYuB0RnsNaa7xZpL96DGRPzRZGCcJlNjPuvy+f79vL0Uy3fTTFFe21pHr5 w1vuneh78n1Ta/pF3Pwp8n87IGGndgSj -----END CERTIFICATE-----Generated at Sat May 17 14:15:27 2025 by rpki-client