$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json) Hash identifier: LxISRFBCGntAcvlynZMpzJ07hyI7fhdqdNapM85knCo= Subject key identifier: 11:64:C9:5E:3F:70:78:25:DB:3F:AD:CF:D6:F5:D9:7B:2B:A5:6C:B7 Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft Manifest number: 05D5 Signing time: Mon 12 May 2025 22:46:40 +0000 Manifest this update: Mon 12 May 2025 22:46:40 +0000 Manifest next update: Mon 19 May 2025 22:46:40 +0000 Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: NGEdPBfYAwePx2TFoooEBlc5KbThZH+yPZVgZDcqbos=) 2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Validity Not Before: May 12 22:46:40 2025 GMT Not After : May 19 22:46:40 2025 GMT Subject: CN=68227a50-2974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:bb:fe:86:24:e3:81:ce:67:26:1f:45:18: 0a:cf:b7:58:48:55:ca:6f:99:c6:e5:80:b3:24:8c: c8:eb:87:66:76:96:b7:dd:ce:54:a4:01:08:8d:79: 06:c4:a8:88:01:93:81:7a:8d:ae:39:ca:3d:49:b8: 28:1e:b3:16:10:f6:a6:22:4c:14:52:8c:d7:8d:75: 14:97:73:6b:dc:0e:08:8d:1a:a4:86:c7:66:7c:66: 32:1f:64:d2:99:01:37:59:6d:fc:03:a2:d8:de:55: d8:91:4f:ab:d0:f1:d5:6c:8e:93:e9:89:5a:2d:3a: f5:4f:7d:b7:3b:12:90:a1:a8:2b:5f:12:ae:40:52: c8:2f:e9:1d:9a:1d:6f:91:bd:ee:99:14:03:89:82: a6:8d:84:34:fc:71:d5:4a:ce:9d:27:3d:37:2f:05: 71:fa:8f:e2:fb:12:11:c4:10:f7:e9:81:39:f3:77: eb:76:78:9a:88:9d:06:d3:66:c8:2b:e3:51:63:f0: a4:83:5b:f3:8f:30:0a:5d:c2:b4:94:c6:33:ae:62: ae:e5:10:ca:2a:90:3c:83:47:f3:25:9e:7a:ee:3a: b9:cc:01:f5:68:7a:62:17:7a:2f:ff:77:96:e5:39: ec:cc:a8:5e:c6:71:18:4a:13:b3:dc:5e:7b:a3:e4: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:C9:5E:3F:70:78:25:DB:3F:AD:CF:D6:F5:D9:7B:2B:A5:6C:B7 X509v3 Authority Key Identifier: keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:fd:58:37:01:16:65:61:dc:88:06:f3:3f:77:8f:ad:23:d5: 26:0e:02:48:17:73:7e:4f:10:4e:3a:3c:82:1a:a5:1c:f0:2d: 44:0c:6f:79:b2:81:dd:65:65:15:1e:c0:13:c7:e0:5b:c9:a8: 44:a5:1d:0c:49:8f:90:61:a8:23:d0:d1:23:e9:29:ee:19:e2: bc:3c:66:46:ba:b8:7b:da:22:ff:85:b9:f9:8f:89:36:3f:d6: 5c:fc:2c:57:ca:55:8f:16:f9:49:4c:af:27:a6:6d:ce:9f:80: 37:f1:86:3e:19:9d:ea:7a:21:04:ae:4f:00:11:87:e3:2e:51: a5:11:ec:0b:17:b4:6e:e7:a9:98:ed:63:b3:18:72:b1:b1:48: 26:45:d9:26:19:5b:ed:c3:cd:7c:e3:c6:f1:61:e1:e3:17:cf: 24:ec:7e:40:f8:d2:4a:7b:67:b3:23:c0:83:59:34:13:a7:b1: 11:90:d8:02:60:b6:e7:6d:38:90:5d:6d:fe:bf:60:7d:ff:4c: 52:3b:b9:cd:7f:6f:a2:84:68:be:c4:c2:e2:a7:99:c9:e0:6b: b1:d0:10:e2:0f:76:f2:9c:19:4e:e6:d1:58:ef:89:26:cd:5d: 14:54:15:b0:59:d8:d4:12:69:a7:23:c2:28:fc:d2:f7:c0:5a: f6:3a:f6:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlBRkQ3MjQ4REJF RjBFNjlBODYwHhcNMjUwNTEyMjI0NjQwWhcNMjUwNTE5MjI0NjQwWjAYMRYwFAYD VQQDEw02ODIyN2E1MC0yOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+i7/oYk44HOZyYfRRgKz7dYSFXKb5nG5YCzJIzI64dmdpa33c5UpAEIjXkG xKiIAZOBeo2uOco9SbgoHrMWEPamIkwUUozXjXUUl3Nr3A4IjRqkhsdmfGYyH2TS mQE3WW38A6LY3lXYkU+r0PHVbI6T6YlaLTr1T323OxKQoagrXxKuQFLIL+kdmh1v kb3umRQDiYKmjYQ0/HHVSs6dJz03LwVx+o/i+xIRxBD36YE583frdniaiJ0G02bI K+NRY/Ckg1vzjzAKXcK0lMYzrmKu5RDKKpA8g0fzJZ567jq5zAH1aHpiF3ov/3eW 5TnszKhexnEYShOz3F57o+S5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFkyV4/ cHgl2z+tz9b12XsrpWy3MB8GA1UdIwQYMBaAFGTOBqFsqJEjVWqpr9ckjb7w5pqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTI5OC82MjIyOUVGMkI2 MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tTTlZhcW12MXlTTnZ2RG1t b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNNEdvV3lva1NOVmFxbXYxeVNOdnZEbW1vWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tT TlZhcW12MXlTTnZ2RG1tb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy/Vg3ARZlYdyIBvM/d4+tI9UmDgJIF3N+TxBOOjyCGqUc8C1EDG95 soHdZWUVHsATx+BbyahEpR0MSY+QYagj0NEj6SnuGeK8PGZGurh72iL/hbn5j4k2 P9Zc/CxXylWPFvlJTK8npm3On4A38YY+GZ3qeiEErk8AEYfjLlGlEewLF7Ru56mY 7WOzGHKxsUgmRdkmGVvtw81848bxYeHjF88k7H5A+NJKe2ezI8CDWTQTp7ERkNgC YLbnbTiQXW3+v2B9/0xSO7nNf2+ihGi+xMLip5nJ4Gux0BDiD3bynBlO5tFY74km zV0UVBWwWdjUEmmnI8Io/NL3wFr2OvY5 -----END CERTIFICATE-----Generated at Wed May 14 10:17:37 2025 by rpki-client