$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: fwfNa6xdB1AOQjK6KCgqQJrDvpt+Hed45W2W/yuKlOY= Subject key identifier: 4A:19:F9:E3:AF:8C:B8:97:DE:D7:8D:6C:44:DF:C9:7D:70:96:72:D9 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0C66 Signing time: Thu 08 May 2025 18:16:43 +0000 Manifest this update: Thu 08 May 2025 18:16:43 +0000 Manifest next update: Thu 15 May 2025 18:16:43 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: sp+eide70KLXfBH5MpKZ5K7a/+t0XgcSOD29PbYlr1w=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 18:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3179 (0xc6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: May 8 18:16:43 2025 GMT Not After : May 15 18:16:43 2025 GMT Subject: CN=681cf50b-0a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:ba:1b:24:3a:7c:42:d0:cc:c1:86:36:de: d6:84:89:f2:75:e2:fe:ae:33:9c:e6:7a:6f:5f:a8: d0:d8:c3:51:8a:b3:c2:fa:cd:9c:4d:ac:d1:ce:63: d4:83:3b:6e:fb:e7:d8:88:01:2b:8c:a4:9f:be:77: 82:db:00:87:ce:28:48:d0:23:90:02:ff:e8:40:11: 48:36:41:e1:47:93:5b:52:12:f6:6b:20:9b:ee:01: 20:09:1a:23:c6:5f:0f:b7:70:ae:a2:56:e4:f8:2c: e3:7b:9e:6d:c0:17:c0:b3:0c:d3:cb:ae:b9:86:b4: a7:1f:43:81:d3:ad:38:28:e6:65:c1:70:d4:48:11: e0:6c:2e:10:73:bd:c2:0d:45:1a:3e:43:75:ed:df: 66:22:eb:93:b1:0f:5a:50:d3:b4:5a:43:6a:0c:c6: 37:47:82:c5:b3:e9:f6:4d:bf:f5:69:1b:b1:18:e2: ce:11:95:f7:5c:f5:5f:b5:b2:61:83:b8:22:00:be: 96:15:93:49:71:f3:53:dc:df:ef:20:c2:87:7e:ad: 94:f8:33:de:c7:be:12:d0:19:8b:d0:07:c7:18:31: a3:c9:5a:af:e7:54:07:e0:3a:b6:34:36:14:fd:4a: 91:97:04:5d:bf:d6:bd:15:9a:b6:72:be:be:06:4b: 31:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:F9:E3:AF:8C:B8:97:DE:D7:8D:6C:44:DF:C9:7D:70:96:72:D9 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:19:e2:49:4b:d3:68:ef:6b:8e:33:9b:32:3f:f2:51:1d:9f: 7b:3f:85:5f:2d:1b:23:7c:8b:fb:7f:4f:62:76:e8:24:94:81: d7:1b:c6:39:f4:b0:9a:0c:d8:38:de:23:b6:53:07:ee:3c:37: ad:96:37:e9:5e:c5:e2:96:21:17:5a:e9:4d:46:49:0c:6e:3f: 82:39:0b:27:5e:e1:83:cc:c9:69:b9:6a:83:75:30:cb:62:d7: 84:23:a5:73:3d:e9:05:7d:3c:49:01:1f:d5:1b:c9:32:4b:93: 27:ea:32:2f:51:67:f9:7e:76:0c:e0:47:56:2c:7c:0f:a6:af: 7f:99:45:19:dc:a4:25:e9:98:08:66:ca:d6:b0:70:5a:64:b6: dd:e1:0a:cd:7c:18:61:03:07:0d:cb:1b:5b:6f:f7:3e:d3:9d: 5c:6e:ff:82:9f:ba:5d:45:dc:39:2c:2a:34:45:7c:66:57:56: 8f:b3:6a:5b:fb:c7:bd:3c:75:13:82:d3:35:58:86:58:32:e9: f1:cf:2d:1f:e8:84:3c:c2:7c:e5:67:63:26:4b:c6:32:29:0e: bc:9e:65:36:f8:71:7a:75:30:d9:fa:57:c6:21:48:7f:5a:fa: ee:2c:f9:b5:d6:53:59:23:d3:f9:c5:99:06:bb:8f:5a:ee:cc: fe:0c:6f:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwNTA4MTgxNjQzWhcNMjUwNTE1MTgxNjQzWjAYMRYwFAYD VQQDEw02ODFjZjUwYi0wYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdu6GyQ6fELQzMGGNt7WhInydeL+rjOc5npvX6jQ2MNRirPC+s2cTazRzmPU gztu++fYiAErjKSfvneC2wCHzihI0COQAv/oQBFINkHhR5NbUhL2ayCb7gEgCRoj xl8Pt3Cuolbk+Czje55twBfAswzTy665hrSnH0OB0604KOZlwXDUSBHgbC4Qc73C DUUaPkN17d9mIuuTsQ9aUNO0WkNqDMY3R4LFs+n2Tb/1aRuxGOLOEZX3XPVftbJh g7giAL6WFZNJcfNT3N/vIMKHfq2U+DPex74S0BmL0AfHGDGjyVqv51QH4Dq2NDYU /UqRlwRdv9a9FZq2cr6+BksxIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoZ+eOv jLiX3teNbETfyX1wlnLZMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlGeJJS9No72uOM5syP/JRHZ97P4VfLRsjfIv7f09idugklIHXG8Y5 9LCaDNg43iO2UwfuPDetljfpXsXiliEXWulNRkkMbj+COQsnXuGDzMlpuWqDdTDL YteEI6VzPekFfTxJAR/VG8kyS5Mn6jIvUWf5fnYM4EdWLHwPpq9/mUUZ3KQl6ZgI ZsrWsHBaZLbd4QrNfBhhAwcNyxtbb/c+051cbv+Cn7pdRdw5LCo0RXxmV1aPs2pb +8e9PHUTgtM1WIZYMunxzy0f6IQ8wnzlZ2MmS8YyKQ68nmU2+HF6dTDZ+lfGIUh/ WvruLPm11lNZI9P5xZkGu49a7sz+DG/s -----END CERTIFICATE-----Generated at Sat May 10 07:25:24 2025 by rpki-client