$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: juozzjDAfOad7V/bhLzw+KvUhKCQApenzSu+cpRwkDU= Subject key identifier: 4D:F1:EA:00:A1:9A:63:14:EA:17:3E:A3:00:18:72:38:56:B5:F6:8A Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 06ED Signing time: Fri 16 May 2025 22:15:44 +0000 Manifest this update: Fri 16 May 2025 22:15:43 +0000 Manifest next update: Fri 23 May 2025 22:15:43 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: wnMQ2NFS/NQScKgUN7Nq+sWz/eH/pdrPKVKQu1VtTHs=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: May 16 22:15:43 2025 GMT Not After : May 23 22:15:43 2025 GMT Subject: CN=6827b90f-a528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0c:3c:ea:8c:88:8d:fc:19:46:ff:2c:3d:54: 1e:4c:ee:4b:4b:1b:e4:62:b4:b9:a4:a9:c1:26:8e: b0:0f:87:ed:64:d9:c0:f0:c1:1f:f4:5d:d4:ef:60: e7:8e:fa:44:78:43:fe:3f:92:b8:8c:b8:e4:ce:49: ad:66:ff:8c:66:f9:d9:4d:c5:e0:b9:71:72:a3:88: 13:d1:ca:c0:85:23:24:29:1f:c4:09:66:dc:42:25: 9e:63:cc:ae:ac:cb:cd:1f:cb:fa:a7:b2:71:82:05: ad:96:db:a6:31:ca:ed:88:e3:0d:f2:f5:88:fd:ab: 79:49:69:47:f5:04:13:b6:6b:e0:09:6f:52:78:f4: 62:73:e9:eb:4f:d0:19:d2:9a:fa:b4:0b:0b:2a:a4: 8d:b3:f5:fc:f3:ee:ec:6d:e4:56:d4:0a:65:8e:12: 8f:41:f7:2b:02:eb:ac:96:76:02:0a:90:e9:cf:d9: 7e:7a:8f:31:b0:8a:4c:fb:93:34:73:c6:bf:39:de: 86:d9:6c:38:ac:4a:0c:94:4a:74:ad:8e:5c:bc:e8: 1d:32:2b:9b:c1:22:01:40:3b:99:62:51:f8:73:46: 1e:ac:64:79:a6:d0:75:99:cf:a4:0f:97:2f:34:de: ae:f9:bd:76:6c:49:bd:03:68:e0:85:cc:d0:fa:3b: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F1:EA:00:A1:9A:63:14:EA:17:3E:A3:00:18:72:38:56:B5:F6:8A X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:db:6a:78:37:09:8a:d8:f7:a9:e5:cc:33:74:da:c7:66:3d: f5:8c:6b:f5:53:bc:f7:e2:12:ec:13:88:30:89:e8:c6:fd:1f: 79:a2:dc:41:ad:08:54:69:47:a1:7a:01:33:a3:2b:a4:85:8b: fb:32:86:f1:e2:47:ca:1c:f9:6f:80:4a:1b:68:4f:b5:3e:2c: 08:e0:56:ec:8c:39:68:93:99:b6:f0:b1:61:9c:8f:90:1b:29: da:4d:6f:84:02:8b:c8:52:54:7b:82:35:c0:02:83:a8:53:03: 3d:c4:47:0e:e1:58:03:73:d8:2a:f9:86:03:1f:57:25:05:9a: a3:bd:f8:fe:25:f8:f3:be:d2:3c:38:76:2a:6c:90:1e:1a:2d: f8:50:84:40:86:1c:b8:a6:82:6f:17:7b:a0:42:74:2c:21:02: e5:4e:fa:af:60:c1:52:52:f8:dd:cc:7b:21:d5:39:c6:ed:8f: 7a:bb:01:eb:0f:03:95:70:6c:cc:64:a5:44:14:24:24:d0:23: 1f:23:86:76:10:ef:7e:75:6c:fe:69:02:e4:16:92:25:ef:de: ef:35:88:66:5c:34:03:6f:77:db:ce:af:68:c9:57:df:54:a7: 1e:25:3b:c7:36:0d:0d:1e:77:a9:8f:55:56:6e:ec:1c:83:cd: d6:01:99:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUwNTE2MjIxNTQzWhcNMjUwNTIzMjIxNTQzWjAYMRYwFAYD VQQDEw02ODI3YjkwZi1hNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ww86oyIjfwZRv8sPVQeTO5LSxvkYrS5pKnBJo6wD4ftZNnA8MEf9F3U72Dn jvpEeEP+P5K4jLjkzkmtZv+MZvnZTcXguXFyo4gT0crAhSMkKR/ECWbcQiWeY8yu rMvNH8v6p7JxggWtltumMcrtiOMN8vWI/at5SWlH9QQTtmvgCW9SePRic+nrT9AZ 0pr6tAsLKqSNs/X88+7sbeRW1ApljhKPQfcrAuuslnYCCpDpz9l+eo8xsIpM+5M0 c8a/Od6G2Ww4rEoMlEp0rY5cvOgdMiubwSIBQDuZYlH4c0YerGR5ptB1mc+kD5cv NN6u+b12bEm9A2jghczQ+jv/DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3x6gCh mmMU6hc+owAYcjhWtfaKMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt22p4NwmK2Pep5cwzdNrHZj31jGv1U7z34hLsE4gwiejG/R95otxB rQhUaUehegEzoyukhYv7Mobx4kfKHPlvgEobaE+1PiwI4FbsjDlok5m28LFhnI+Q GynaTW+EAovIUlR7gjXAAoOoUwM9xEcO4VgDc9gq+YYDH1clBZqjvfj+JfjzvtI8 OHYqbJAeGi34UIRAhhy4poJvF3ugQnQsIQLlTvqvYMFSUvjdzHsh1TnG7Y96uwHr DwOVcGzMZKVEFCQk0CMfI4Z2EO9+dWz+aQLkFpIl797vNYhmXDQDb3fbzq9oyVff VKceJTvHNg0NHnepj1VWbuwcg83WAZmT -----END CERTIFICATE-----Generated at Sat May 17 00:29:28 2025 by rpki-client