$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: BsPYV3LzTKERGTNT2R1vbZjXlP9KL1NohsuPYaVy4yE= Subject key identifier: BD:80:54:76:D7:92:91:86:E7:71:42:01:26:E3:A1:45:23:D4:7A:D5 Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 0318 Signing time: Tue 13 May 2025 00:58:31 +0000 Manifest this update: Tue 13 May 2025 00:58:30 +0000 Manifest next update: Tue 20 May 2025 00:58:30 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: CIZiLdS70p2NIeSPig+dmP17nOjQklGvPV0dBra6hKM=) 2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: nQdK1rGrAZaVn61Rf7mgLuPTTFOBn2cvd3HtJnDtbFM=) 3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: SHxodb2YJuOp3jPVIUdHlVxJnzvRTwIkn0lL5MugVgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Validity Not Before: May 13 00:58:30 2025 GMT Not After : May 20 00:58:30 2025 GMT Subject: CN=68229937-844d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:af:b0:cd:d0:d7:a7:ab:ab:f9:42:f3:04: c8:c9:47:a7:25:3f:3f:d4:b8:ee:eb:60:db:cc:34: d0:5e:d1:1a:f6:4f:e7:89:08:09:92:07:49:13:f4: 27:09:c2:dd:c7:a4:94:ba:31:6e:65:5b:70:ec:8e: 3d:4f:b1:50:62:c7:a9:8d:ba:39:a6:63:8b:48:29: 2c:8f:d1:df:a3:60:5e:c5:e7:0b:4b:c7:9f:f2:2a: 39:86:8e:b8:6b:35:e2:c5:78:de:5b:5d:08:80:a3: 0d:e5:05:c8:fe:f6:4e:11:73:5f:3b:77:12:b6:3e: 2e:9c:ff:86:54:4e:06:73:d5:99:97:97:5a:02:e1: 61:ca:b4:e7:95:80:15:ae:f4:c7:6d:c9:a3:74:0e: 2c:f9:5b:e9:33:72:7a:53:3e:7c:d2:95:3b:5a:aa: e8:c0:36:94:bb:6a:27:ef:17:95:c2:ff:9f:26:9a: 8e:0f:96:d6:3f:10:8a:c8:c2:26:a3:36:d1:e9:aa: 51:2c:90:f3:cf:5b:57:7b:ce:c9:35:06:8c:c0:f4: 59:62:d9:91:5c:42:c7:66:9b:1b:2e:40:ce:a7:8c: d5:ee:4c:95:bd:2f:70:9d:28:9e:f4:d5:e9:36:2c: 5a:f1:6b:fa:8f:54:6e:18:9a:58:8d:4f:40:4c:01: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:80:54:76:D7:92:91:86:E7:71:42:01:26:E3:A1:45:23:D4:7A:D5 X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:79:20:5a:30:bf:c7:0b:d1:6f:eb:df:82:14:d0:70:eb:4d: 23:6a:b0:a5:28:69:ae:41:77:a5:10:c5:fd:f0:07:cc:37:b5: 48:c1:fb:65:df:39:6c:95:d8:cd:32:1d:19:8d:23:4b:da:bf: 1b:7b:21:a7:72:c9:b1:65:d7:bd:d2:fb:e2:65:01:0f:d0:4b: 5d:cc:a9:aa:95:3e:aa:f0:53:72:6d:0b:05:10:9c:d9:7b:48: f6:a4:7f:d6:bd:5a:69:06:c7:59:c9:7d:15:95:54:7f:d1:46: d8:c5:f6:70:72:ee:84:4c:34:02:84:6f:13:73:b4:e5:f0:d4: 87:98:4a:a8:03:49:81:17:66:21:a2:b1:77:9e:31:b0:2a:05: c8:14:5f:19:67:36:a5:d2:b0:15:e5:fa:18:d8:e0:c8:89:05: 6a:74:de:69:71:91:7f:27:10:96:a8:74:0a:2c:d3:f0:fd:a1: fd:9b:3d:fc:a2:e3:63:6a:d9:20:1d:84:4a:51:93:81:16:cc: 39:35:66:a8:c6:e5:0f:57:1d:68:56:75:21:ad:02:4c:82:b0: b5:36:70:74:c8:6f:b6:c7:93:47:1c:31:80:55:eb:87:ae:8d: 3c:5a:ee:6d:d4:44:32:f6:a8:f0:02:96:00:e8:51:ed:f0:38: 3b:b4:5e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjUwNTEzMDA1ODMwWhcNMjUwNTIwMDA1ODMwWjAYMRYwFAYD VQQDEw02ODIyOTkzNy04NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEivsM3Q16erq/lC8wTIyUenJT8/1Lju62DbzDTQXtEa9k/niQgJkgdJE/Qn CcLdx6SUujFuZVtw7I49T7FQYsepjbo5pmOLSCksj9Hfo2BexecLS8ef8io5ho64 azXixXjeW10IgKMN5QXI/vZOEXNfO3cStj4unP+GVE4Gc9WZl5daAuFhyrTnlYAV rvTHbcmjdA4s+VvpM3J6Uz580pU7WqrowDaUu2on7xeVwv+fJpqOD5bWPxCKyMIm ozbR6apRLJDzz1tXe87JNQaMwPRZYtmRXELHZpsbLkDOp4zV7kyVvS9wnSie9NXp Nixa8Wv6j1RuGJpYjU9ATAEvMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2AVHbX kpGG53FCASbjoUUj1HrVMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5eSBaML/HC9Fv69+CFNBw600jarClKGmuQXelEMX98AfMN7VIwftl 3zlsldjNMh0ZjSNL2r8beyGncsmxZde90vviZQEP0EtdzKmqlT6q8FNybQsFEJzZ e0j2pH/WvVppBsdZyX0VlVR/0UbYxfZwcu6ETDQChG8Tc7Tl8NSHmEqoA0mBF2Yh orF3njGwKgXIFF8ZZzal0rAV5foY2ODIiQVqdN5pcZF/JxCWqHQKLNPw/aH9mz38 ouNjatkgHYRKUZOBFsw5NWaoxuUPVx1oVnUhrQJMgrC1NnB0yG+2x5NHHDGAVeuH ro08Wu5t1EQy9qjwApYA6FHt8Dg7tF7w -----END CERTIFICATE-----Generated at Wed May 14 09:19:37 2025 by rpki-client