$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: WTrKr6hPCPFg4w2GKxG87FY0bfwiz4sJP4sgUDk15TQ= Subject key identifier: 69:2F:D1:F6:6C:65:89:26:CC:04:F4:08:79:1E:D3:57:E9:04:E9:48 Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 83 Signing time: Thu 15 May 2025 05:53:40 +0000 Manifest this update: Thu 15 May 2025 05:53:40 +0000 Manifest next update: Thu 22 May 2025 05:53:40 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: DL8RJv7M7dZMG3mIDsW46KXqbFQ2SsLV5JNfsFMzzrI=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: Fnj7JWgwdsaeofMVq5UcxcqhmE7c7PXdT8GOJ7pFYSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: May 15 05:53:40 2025 GMT Not After : May 22 05:53:40 2025 GMT Subject: CN=68258164-2f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:a4:3d:89:89:cc:5d:54:e6:a0:76:04:ed: 50:e1:7d:33:5e:64:3b:a3:d4:54:b6:55:4e:41:12: e5:64:91:ba:1d:44:d8:95:95:05:0b:97:96:d5:fb: f8:7c:b3:04:20:9e:e8:65:77:ce:1c:39:bf:9b:f8: ac:f6:c9:8a:1b:d7:e7:bc:df:ac:dc:c1:91:ce:0a: 2a:09:88:47:18:7a:a0:61:d9:85:e3:77:d8:67:c0: 4c:06:6d:3b:bb:9b:48:6f:d3:d4:06:fe:9d:2a:d0: 2a:23:55:60:81:7d:85:34:46:b7:14:b0:3c:21:76: 40:8c:a6:8f:af:2c:12:06:1c:2b:60:47:db:0e:cc: 50:92:21:fe:98:51:1d:7a:1f:c9:c3:fa:3c:42:7c: b6:e8:10:82:23:5e:80:d3:42:43:e6:58:b4:4a:ca: 70:93:72:25:0d:74:32:d9:27:ab:d1:0c:da:82:19: e5:6d:5f:ea:f3:85:5c:da:f0:1d:12:63:55:0a:c8: 28:c6:e6:84:47:83:be:41:be:95:b2:15:a4:ec:b4: 6c:c2:16:8e:1f:ac:ff:50:f3:44:65:4d:71:10:eb: 41:e1:88:f1:b1:ab:bb:b1:19:43:de:75:f3:76:13: ff:d6:3b:ed:7c:6d:b7:87:b8:db:2a:da:82:7b:6d: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:D1:F6:6C:65:89:26:CC:04:F4:08:79:1E:D3:57:E9:04:E9:48 X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:eb:e9:de:28:bc:1e:c4:95:f7:8f:c9:1e:56:68:fe:a5:71: 9f:ab:5c:32:50:4e:b2:23:a4:db:10:fc:d1:b4:f6:4a:23:31: 00:1b:91:9a:13:7b:90:40:19:e6:0b:1b:44:aa:9a:6a:06:7a: 10:9d:88:c3:3c:fc:46:3f:ac:42:03:92:ce:c0:6a:b4:0b:2d: 79:56:15:e7:03:fa:07:d6:86:fb:9f:9f:4a:a2:a2:32:83:68: 92:d7:34:f8:84:5b:2b:3f:bf:37:a7:75:18:a4:0e:e2:d5:00: 43:bd:0b:37:81:d1:5d:db:92:52:a1:16:d1:a6:e2:4e:01:39: 3a:ef:16:df:37:9f:16:6a:ad:b3:90:26:fe:99:8d:15:6b:19: 16:a0:2a:fc:b7:45:d3:d9:25:22:0d:92:80:01:96:b2:59:24: cb:63:38:73:44:d4:1e:af:86:dc:d8:3a:f0:13:ba:61:d1:b0: 5e:3c:58:87:81:97:76:1f:1f:ca:1e:57:db:f4:3e:ac:40:32: dc:30:f6:01:cf:45:59:9f:6b:07:e0:fd:e8:c4:80:6e:5e:8a: 6b:20:8e:3a:41:e6:46:99:94:f7:6b:44:18:bf:11:9e:85:2b: aa:29:c4:77:6b:d6:39:cc:6f:7a:fc:ac:46:67:74:48:49:c6: 81:a3:3f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjUwNTE1MDU1MzQwWhcNMjUwNTIyMDU1MzQwWjAYMRYwFAYD VQQDEw02ODI1ODE2NC0yZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywikPYmJzF1U5qB2BO1Q4X0zXmQ7o9RUtlVOQRLlZJG6HUTYlZUFC5eW1fv4 fLMEIJ7oZXfOHDm/m/is9smKG9fnvN+s3MGRzgoqCYhHGHqgYdmF43fYZ8BMBm07 u5tIb9PUBv6dKtAqI1VggX2FNEa3FLA8IXZAjKaPrywSBhwrYEfbDsxQkiH+mFEd eh/Jw/o8Qny26BCCI16A00JD5li0Sspwk3IlDXQy2Ser0QzaghnlbV/q84Vc2vAd EmNVCsgoxuaER4O+Qb6VshWk7LRswhaOH6z/UPNEZU1xEOtB4Yjxsau7sRlD3nXz dhP/1jvtfG23h7jbKtqCe20JrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkv0fZs ZYkmzAT0CHke01fpBOlIMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg6+neKLwexJX3j8keVmj+pXGfq1wyUE6yI6TbEPzRtPZKIzEAG5Ga E3uQQBnmCxtEqppqBnoQnYjDPPxGP6xCA5LOwGq0Cy15VhXnA/oH1ob7n59KoqIy g2iS1zT4hFsrP783p3UYpA7i1QBDvQs3gdFd25JSoRbRpuJOATk67xbfN58Waq2z kCb+mY0VaxkWoCr8t0XT2SUiDZKAAZayWSTLYzhzRNQer4bc2DrwE7ph0bBePFiH gZd2Hx/KHlfb9D6sQDLcMPYBz0VZn2sH4P3oxIBuXoprII46QeZGmZT3a0QYvxGe hSuqKcR3a9Y5zG96/KxGZ3RIScaBoz+o -----END CERTIFICATE-----Generated at Fri May 16 03:20:14 2025 by rpki-client