$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: C2K5Oi/mgev/COfpoSy4vA9iiMS1KCH+q7irg1C/kzE= Subject key identifier: 8D:A5:9E:BF:43:75:28:E0:2F:1C:EF:C4:80:C8:EA:74:14:D7:13:0D Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 085F Signing time: Wed 14 May 2025 20:49:34 +0000 Manifest this update: Wed 14 May 2025 20:49:34 +0000 Manifest next update: Wed 21 May 2025 20:49:34 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: L9Q1ar/G/yceQj+CIDr1iUc3I5y/L/+sKGT+kebMyQI=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: May 14 20:49:34 2025 GMT Not After : May 21 20:49:34 2025 GMT Subject: CN=682501de-9f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5d:9c:a8:d4:5a:46:ce:4f:a6:6e:c4:5c:97: de:a1:2f:94:94:f9:0f:77:a0:b5:18:e3:5c:9a:5c: ab:1a:69:0a:a2:29:3a:21:b9:4d:a7:b8:3d:cc:a6: e5:10:6d:6b:a1:26:41:29:96:15:ba:45:c5:88:e3: 9e:4c:0f:64:f2:d9:02:87:9c:bc:ac:93:f4:89:07: 8f:13:bc:94:e1:59:b0:3d:f2:d7:43:e7:52:1e:49: 4d:8e:5d:1a:18:72:a9:15:fe:f6:8e:d8:dd:57:75: fc:7b:60:77:36:6c:f8:e8:db:55:d4:3f:90:ae:cf: a5:82:a6:db:18:2b:4f:e0:3c:97:06:4f:4e:f8:35: 1d:eb:5d:f6:a5:3b:37:58:1c:d7:d3:07:e1:4d:62: b7:71:4b:1d:82:a8:ab:56:cb:b1:4c:e3:8c:bb:0c: a1:cc:8c:58:d6:5a:0d:ef:9c:8e:04:cb:73:dc:43: 63:3f:30:e4:fe:e9:4c:20:4a:ff:38:50:81:7c:3f: 39:60:c5:b8:98:75:f8:b4:f5:b7:ef:1c:b7:84:59: ea:d5:b2:43:42:d0:bf:70:52:81:32:b9:2f:1f:16: b0:53:43:e6:cd:2f:f7:90:86:d3:35:eb:71:0b:b6: 87:95:58:da:9e:1e:70:4c:17:1d:1a:60:b0:3a:14: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A5:9E:BF:43:75:28:E0:2F:1C:EF:C4:80:C8:EA:74:14:D7:13:0D X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:1e:46:5a:a2:5f:cd:74:80:f5:69:3b:d3:64:8e:96:3c:e1: 04:89:87:00:c6:d6:f1:02:f4:6b:1e:2a:40:fb:e4:4e:a4:b1: 54:aa:e3:c8:31:d6:b3:2c:47:c9:a8:18:ef:cf:01:01:56:be: ac:b7:78:e7:c8:4f:df:43:0b:13:da:0a:5b:37:6f:9c:46:6d: bb:03:06:b7:16:b9:f2:10:4b:bd:8a:b4:28:15:e4:1d:7e:d0: ad:10:6e:84:cb:07:b8:02:93:49:be:83:7f:aa:0b:49:d3:f2: 3f:c1:45:95:87:48:e4:91:ef:cc:34:d4:e5:35:1c:35:16:ca: 4b:b7:03:61:32:3f:64:4b:46:0a:1c:a2:33:10:f9:1b:27:8e: 85:4c:ba:e1:69:c2:5a:4a:4c:44:7a:cb:d5:09:04:8e:97:3a: ea:1c:04:1f:1b:79:d3:02:44:ba:8d:65:27:34:e2:da:f8:9c: 72:c1:23:9a:5d:1e:3f:fd:ef:bb:5e:23:10:d2:ea:ff:70:eb: c9:32:a6:a3:a2:65:2b:9b:79:2a:5d:42:32:3f:a2:66:88:24: 0a:c9:c1:be:a5:fd:b8:96:c1:13:51:78:a7:28:2b:9e:ae:36: b0:e0:70:5b:f7:76:6b:3c:fc:e5:95:70:c5:a3:63:61:66:bc: 4b:00:17:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwNTE0MjA0OTM0WhcNMjUwNTIxMjA0OTM0WjAYMRYwFAYD VQQDEw02ODI1MDFkZS05ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3F2cqNRaRs5Ppm7EXJfeoS+UlPkPd6C1GONcmlyrGmkKoik6IblNp7g9zKbl EG1roSZBKZYVukXFiOOeTA9k8tkCh5y8rJP0iQePE7yU4VmwPfLXQ+dSHklNjl0a GHKpFf72jtjdV3X8e2B3Nmz46NtV1D+Qrs+lgqbbGCtP4DyXBk9O+DUd6132pTs3 WBzX0wfhTWK3cUsdgqirVsuxTOOMuwyhzIxY1loN75yOBMtz3ENjPzDk/ulMIEr/ OFCBfD85YMW4mHX4tPW37xy3hFnq1bJDQtC/cFKBMrkvHxawU0PmzS/3kIbTNetx C7aHlVjanh5wTBcdGmCwOhQL/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2lnr9D dSjgLxzvxIDI6nQU1xMNMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDHkZaol/NdID1aTvTZI6WPOEEiYcAxtbxAvRrHipA++ROpLFUquPI MdazLEfJqBjvzwEBVr6st3jnyE/fQwsT2gpbN2+cRm27Awa3FrnyEEu9irQoFeQd ftCtEG6Eywe4ApNJvoN/qgtJ0/I/wUWVh0jkke/MNNTlNRw1FspLtwNhMj9kS0YK HKIzEPkbJ46FTLrhacJaSkxEesvVCQSOlzrqHAQfG3nTAkS6jWUnNOLa+JxywSOa XR4//e+7XiMQ0ur/cOvJMqajomUrm3kqXUIyP6JmiCQKycG+pf24lsETUXinKCue rjaw4HBb93ZrPPzllXDFo2NhZrxLABfs -----END CERTIFICATE-----Generated at Thu May 15 13:25:21 2025 by rpki-client