$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: zMDgUSriNXRHIOUx0ZrgQZEe5Cgv7GAzgcDp15q6MqM= Subject key identifier: FC:4D:7E:50:DB:F2:19:DA:27:7D:8B:B3:27:5F:08:15:76:59:DA:D4 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 35 Signing time: Sat 17 May 2025 07:11:00 +0000 Manifest this update: Sat 17 May 2025 07:10:59 +0000 Manifest next update: Sat 24 May 2025 07:10:59 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: eyVBGBABThiC0Ah2x0L204g85JkDtGO1uZYdiJ5qo7w=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: KNC2/s+vZ/9r775F1mGNGMou3oGOdH7k+vpChxT9cqQ=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: zMJUwcQ85fc9WyQBZ4Df3FrM+qiFXLoVLbfqvgsrYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: May 17 07:10:59 2025 GMT Not After : May 24 07:10:59 2025 GMT Subject: CN=68283684-7137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:e7:74:b7:82:a2:16:41:0b:ee:46:c6:01: e3:1b:41:d6:da:b0:6c:6f:e4:21:8e:8b:c8:43:2d: e0:42:34:a6:fe:3f:ea:14:cf:33:8e:87:cc:fa:2d: b3:d9:2c:ea:47:67:df:80:1d:76:7f:df:cb:d1:33: 91:cf:3d:ef:93:3c:9a:b8:a1:82:98:76:06:43:86: a3:32:25:8e:a5:c0:72:cb:c4:7e:a3:58:57:00:2c: d3:92:20:b3:61:cf:04:58:50:4f:be:e1:fd:32:77: b1:af:4e:42:82:00:09:ee:c7:4e:6c:10:47:89:1b: f3:d6:dc:f4:df:26:59:5a:94:ae:a6:c2:25:99:8a: 81:2a:ea:67:b8:0a:16:8c:62:83:f3:4b:fb:11:19: 74:63:1c:8b:28:a5:d9:61:9a:14:7f:50:fa:65:b6: 0b:4f:39:1c:9d:43:19:b1:ef:6b:59:7a:89:ef:26: 11:d0:2e:38:58:62:bd:bb:e1:eb:5b:8a:26:bf:3d: 24:67:3b:40:1e:23:7d:08:2b:e6:42:e7:59:7d:1e: 64:46:9d:f5:1d:ec:91:79:bf:49:37:6e:19:85:be: 01:9c:f4:1d:34:8e:2a:7b:86:8d:a2:aa:63:d9:5e: a3:24:f3:44:93:e0:00:80:e8:de:0a:11:f9:ca:80: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4D:7E:50:DB:F2:19:DA:27:7D:8B:B3:27:5F:08:15:76:59:DA:D4 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1e:23:19:b9:51:53:1f:9c:73:47:57:0e:21:58:2a:f3:b1: 91:2c:80:a5:84:83:be:30:96:71:6b:4e:6c:06:3d:db:87:db: 77:d9:cf:0c:5c:35:47:9e:dc:d3:1a:41:80:d8:b0:ed:57:45: 8b:16:81:70:89:c8:e6:6f:d4:01:b0:6a:40:e5:83:2b:5c:0e: 82:1e:50:53:8b:3e:b9:80:b2:06:c2:f4:0e:03:89:d6:54:64: 0e:f2:08:16:56:f0:b0:35:8a:c0:9d:ec:16:84:e6:34:3d:a7: 20:5d:cd:30:2c:68:b7:10:bc:2f:dd:81:7e:8e:1f:76:d6:3e: 0d:3f:98:cb:3e:00:c2:cf:60:ea:bd:51:59:e3:02:61:ae:55: 91:13:76:0b:3f:e2:ce:c3:80:ea:6d:ac:8e:3f:eb:77:55:2f: b4:1b:85:54:f2:c0:22:af:74:b1:c8:e1:21:cf:24:b4:05:a5: 5f:2b:17:96:b1:b8:df:0e:b2:b4:5b:41:71:d4:c7:ff:da:9d: 6f:94:9a:b8:c7:22:ec:20:2e:89:93:f6:17:e7:e9:3e:fc:1e: f2:97:d2:b4:8e:36:42:9a:0c:4f:13:46:05:1b:2b:92:d0:e8: 86:14:85:cb:ec:d5:0b:f6:4d:ef:c0:3b:f9:54:46:52:49:3c: b6:3e:f0:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA1MTcwNzEwNTlaFw0yNTA1MjQwNzEwNTlaMBgxFjAUBgNV BAMTDTY4MjgzNjg0LTcxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhKed0t4KiFkEL7kbGAeMbQdbasGxv5CGOi8hDLeBCNKb+P+oUzzOOh8z6LbPZ LOpHZ9+AHXZ/38vRM5HPPe+TPJq4oYKYdgZDhqMyJY6lwHLLxH6jWFcALNOSILNh zwRYUE++4f0yd7GvTkKCAAnux05sEEeJG/PW3PTfJllalK6mwiWZioEq6me4ChaM YoPzS/sRGXRjHIsopdlhmhR/UPpltgtPORydQxmx72tZeonvJhHQLjhYYr274etb iia/PSRnO0AeI30IK+ZC51l9HmRGnfUd7JF5v0k3bhmFvgGc9B00jip7ho2iqmPZ XqMk80ST4ACA6N4KEfnKgJ2/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/E1+UNvy GdonfYuzJ18IFXZZ2tQwHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIseIxm5UVMfnHNHVw4hWCrzsZEsgKWEg74wlnFrTmwGPduH23fZzwxc NUee3NMaQYDYsO1XRYsWgXCJyOZv1AGwakDlgytcDoIeUFOLPrmAsgbC9A4DidZU ZA7yCBZW8LA1isCd7BaE5jQ9pyBdzTAsaLcQvC/dgX6OH3bWPg0/mMs+AMLPYOq9 UVnjAmGuVZETdgs/4s7DgOptrI4/63dVL7QbhVTywCKvdLHI4SHPJLQFpV8rF5ax uN8OsrRbQXHUx//anW+UmrjHIuwgLomT9hfn6T78HvKX0rSONkKaDE8TRgUbK5LQ 6IYUhcvs1Qv2Te/AO/lURlJJPLY+8O8= -----END CERTIFICATE-----Generated at Sat May 17 11:30:41 2025 by rpki-client