$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: 5n5NIWd/cOamEBuKLXznwNfgDCrfYYaE6EtggGH3a5E= Subject key identifier: 7D:A2:B8:E4:4F:57:F3:F3:80:33:E6:C0:65:49:44:DF:82:3D:60:32 Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 01D5 Signing time: Tue 13 May 2025 02:07:51 +0000 Manifest this update: Tue 13 May 2025 02:07:51 +0000 Manifest next update: Tue 20 May 2025 02:07:51 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: /QomzaTi3uGFTojaQQAkl1HYBcygkHp3gBK8lMLfDSY=) 2: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: pgI9v9tBw4JvLouCdhmI8EFq53pssTwtUNiYfyBQjoo=) 3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: 9HMzFEkbx1T0ynaVX6uHWObWXzc9PFPAUjEuMjKZdqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: May 13 02:07:51 2025 GMT Not After : May 20 02:07:51 2025 GMT Subject: CN=6822a977-909d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:66:93:ea:37:78:01:af:05:bf:3d:cf:96: 08:42:97:a8:20:4b:07:38:a3:db:a7:aa:14:be:8a: 20:bb:5a:ab:cc:ba:78:47:6d:7f:cf:73:e1:33:f8: 1c:1d:25:3f:19:af:77:a2:94:67:bd:f3:a7:00:93: b5:99:50:91:78:7b:57:49:14:59:4c:fc:c4:41:a7: c8:d4:65:22:ab:df:8f:89:6f:98:fc:5e:8a:95:2d: 28:6b:b9:56:da:44:ab:1e:57:46:be:24:97:01:d0: 52:e5:52:0a:26:f3:6d:80:9f:55:53:b7:4f:c2:57: f0:54:7c:d5:32:bb:cc:a7:7f:55:8c:15:78:b5:fc: 76:1f:59:bd:85:ea:21:e6:7b:c8:39:0c:4b:6a:66: 50:68:be:f5:6c:5b:e1:3b:17:7c:10:fe:65:0b:54: 6b:1b:19:ce:f2:72:7a:42:ef:d5:cf:be:3e:84:1c: 7c:81:57:c4:40:ce:4d:96:e9:70:98:b8:ed:60:c3: 6d:37:d1:0b:c9:9f:6c:e5:03:7e:83:47:ab:c6:45: bc:97:22:be:54:1e:e7:ec:fe:ed:4d:5c:96:89:65: c8:96:3c:e8:f4:2c:65:d7:64:04:bd:96:93:c1:eb: 47:ce:b4:55:a8:33:e7:3a:b6:73:08:0d:fe:c9:91: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:B8:E4:4F:57:F3:F3:80:33:E6:C0:65:49:44:DF:82:3D:60:32 X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:02:01:d1:e7:e5:b5:43:0b:1a:fb:58:af:d9:a9:45:6f:79: df:cd:b0:d2:ea:11:b2:c4:80:a8:71:84:52:d5:da:6f:93:bb: a1:5c:04:74:70:54:f2:af:a9:3d:dc:2b:09:09:ac:35:77:70: 57:e5:f4:a4:77:38:48:f9:16:62:8a:3c:cb:a2:86:c4:f4:2d: 9a:95:11:9a:52:e1:6b:5d:a9:61:f8:f3:fa:5f:88:3b:34:45: 8c:c8:b4:31:42:8b:ed:ee:a4:f8:de:e9:77:b3:9b:b8:9d:2e: 50:96:a2:68:dc:04:a2:14:0a:55:be:7e:9d:e0:84:15:87:65: 1f:de:1c:1b:c1:6f:66:a7:6d:1e:2c:bd:e5:9b:17:e9:58:0e: 3c:98:1f:c7:0e:c6:8b:23:4c:95:e8:04:6e:0f:5a:3d:f7:0c: 77:a0:43:c6:68:cf:17:4f:f3:1a:ac:41:02:99:bb:91:46:68: f4:9f:dc:e4:f8:ab:d4:b6:a4:b3:cb:e6:14:60:1e:11:e7:16: 27:57:ca:6c:c7:29:40:be:ce:43:63:9d:1f:92:f3:90:55:ae: 03:14:10:83:ea:c9:fe:26:b2:8b:5d:1d:6e:fd:6b:c7:a4:b1: bf:cd:e2:8a:96:42:6d:a0:b4:de:55:07:3b:b1:bf:10:9d:d4: c1:43:1d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjUwNTEzMDIwNzUxWhcNMjUwNTIwMDIwNzUxWjAYMRYwFAYD VQQDEw02ODIyYTk3Ny05MDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3Nmk+o3eAGvBb89z5YIQpeoIEsHOKPbp6oUvoogu1qrzLp4R21/z3PhM/gc HSU/Ga93opRnvfOnAJO1mVCReHtXSRRZTPzEQafI1GUiq9+PiW+Y/F6KlS0oa7lW 2kSrHldGviSXAdBS5VIKJvNtgJ9VU7dPwlfwVHzVMrvMp39VjBV4tfx2H1m9heoh 5nvIOQxLamZQaL71bFvhOxd8EP5lC1RrGxnO8nJ6Qu/Vz74+hBx8gVfEQM5Nlulw mLjtYMNtN9ELyZ9s5QN+g0erxkW8lyK+VB7n7P7tTVyWiWXIljzo9Cxl12QEvZaT wetHzrRVqDPnOrZzCA3+yZEmAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2iuORP V/PzgDPmwGVJRN+CPWAyMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3AgHR5+W1Qwsa+1iv2alFb3nfzbDS6hGyxICocYRS1dpvk7uhXAR0 cFTyr6k93CsJCaw1d3BX5fSkdzhI+RZiijzLoobE9C2alRGaUuFrXalh+PP6X4g7 NEWMyLQxQovt7qT43ul3s5u4nS5QlqJo3ASiFApVvn6d4IQVh2Uf3hwbwW9mp20e LL3lmxfpWA48mB/HDsaLI0yV6ARuD1o99wx3oEPGaM8XT/MarEECmbuRRmj0n9zk +KvUtqSzy+YUYB4R5xYnV8psxylAvs5DY50fkvOQVa4DFBCD6sn+JrKLXR1u/WvH pLG/zeKKlkJtoLTeVQc7sb8QndTBQx2Z -----END CERTIFICATE-----Generated at Tue May 13 13:29:16 2025 by rpki-client