$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json) Hash identifier: FpfSYrTsCGtdaH8lLVw1defJiDbWaTsbQT0JBUQqNJc= Subject key identifier: 60:46:2C:2A:1E:97:30:81:FB:1B:E9:94:25:74:F1:77:AA:1B:9F:AC Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft Manifest number: 3ECE Signing time: Mon 12 May 2025 14:28:30 +0000 Manifest this update: Mon 12 May 2025 14:28:29 +0000 Manifest next update: Mon 19 May 2025 14:28:29 +0000 Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: VYbV56g8d0AlYioQsp2uEK63X6Ng8zvPXCYlrY3fbHk=) 2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: V43Il4g6nzN/Oi9NZNkfIg3qfCZBm83zni76jTMor3c=) 3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=) 4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: QIByum0Q8MqWfLpB0ykV4dVr25yJxf+XqNJq06uiuWw=) 5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: 3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=) 6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s=) 7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=) 8: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts=) 9: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lXnIjaE79MbFJFMKpPmyaG2gWaI8IDWerJKv1saa/n0=) 10: 66891B80943011EA8988B883C4F9AE02.roa (hash: e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=) 11: 727C68508AB411EA89D83541C4F9AE02.roa (hash: 3/YHfMJFd4+/uHvYeznP2jrI3k3cNg88tQA8zxhGa9Q=) 12: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU=) 13: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: W9G6BLl6GrAu6NpuOira3w9ONwVWK7LaREYQeOaaW/o=) 14: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7368 (0x1cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: May 12 14:28:29 2025 GMT Not After : May 19 14:28:29 2025 GMT Subject: CN=6822058d-e059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:02:55:59:65:ea:a3:d7:b2:61:32:e3:22:6f: 73:28:d8:ed:57:8c:8e:9e:82:82:64:80:32:d2:ad: 8b:a0:a4:69:6f:22:f5:98:69:26:e8:ff:b2:dc:75: cb:33:ca:47:77:9e:34:de:09:07:82:c9:73:11:f2: 3e:30:49:eb:a8:a0:13:6c:12:34:77:8f:c7:bc:d5: b7:fb:11:a1:bf:07:c8:ab:23:c8:85:31:84:2a:fd: 4c:66:bb:9c:a5:fd:f1:d8:91:88:e7:79:be:c7:07: 66:3b:11:f1:a3:6d:5a:53:5b:f6:2e:6b:17:c4:34: 2f:11:47:6d:80:54:9d:ec:24:8a:ec:b6:68:12:d0: 73:a3:ee:82:c6:5d:d9:51:1b:ad:5e:b5:26:8a:db: 2c:c3:19:9c:28:d1:96:11:ed:0a:ae:56:68:7f:30: ff:b4:33:46:f1:5a:f3:50:d4:81:02:03:96:2e:7c: c6:57:a5:3e:21:ba:3e:d0:b8:d7:32:93:a5:07:76: b1:05:57:c3:9e:79:5f:ae:e3:68:4f:76:e3:45:e1: fa:78:b7:28:2e:8c:25:58:4f:e8:d0:14:23:3c:43: b0:33:25:a6:7b:69:5f:28:2b:c0:02:9f:fd:4f:0c: e3:35:d2:56:e7:4e:f6:74:03:c1:b2:34:12:35:5b: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:46:2C:2A:1E:97:30:81:FB:1B:E9:94:25:74:F1:77:AA:1B:9F:AC X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fe:8a:b4:ac:dc:78:3b:2a:80:c9:52:91:d6:89:da:b1:ad: 1f:42:0b:60:bb:6f:26:fe:af:2d:0f:f0:a4:cd:19:95:98:b2: f3:45:3d:44:79:8b:80:f5:f6:9c:4e:76:a1:57:8e:e8:2c:b3: 15:c7:d0:ee:3c:51:fc:13:de:2f:af:bd:ea:ec:3d:48:9a:0c: 04:e3:29:2e:41:4f:9b:9f:5f:98:b1:45:b0:ee:4c:44:98:be: d9:ac:73:15:4d:6f:c4:11:8a:24:e5:0d:fd:f3:7d:02:86:fe: 8c:ae:14:24:24:65:0d:32:e3:20:64:75:ad:3e:13:e6:19:28: 18:de:c9:93:7a:cf:b8:c9:59:31:45:61:1a:f1:a9:f1:c1:b7: bc:02:fb:8e:61:b2:9c:50:e1:c9:de:30:65:49:cc:e3:06:3e: 05:b5:e5:98:cb:8e:b3:0d:74:a6:f2:df:ef:f3:a7:ad:a8:87: ba:a5:b5:23:a2:39:34:76:f1:41:ce:3b:e2:50:09:4e:9a:51: c9:00:8c:fa:f8:c2:13:45:ee:7a:50:7c:06:d1:d9:16:2f:5c: 08:4a:50:a5:0b:ef:6b:7a:a4:87:78:3e:b1:f1:0c:40:0d:f2: 5e:cf:47:76:77:04:a4:0e:1b:3b:77:5c:5e:1f:45:ef:23:2b: 68:73:e7:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjUwNTEyMTQyODI5WhcNMjUwNTE5MTQyODI5WjAYMRYwFAYD VQQDEw02ODIyMDU4ZC1lMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7AJVWWXqo9eyYTLjIm9zKNjtV4yOnoKCZIAy0q2LoKRpbyL1mGkm6P+y3HXL M8pHd5403gkHgslzEfI+MEnrqKATbBI0d4/HvNW3+xGhvwfIqyPIhTGEKv1MZruc pf3x2JGI53m+xwdmOxHxo21aU1v2LmsXxDQvEUdtgFSd7CSK7LZoEtBzo+6Cxl3Z URutXrUmitsswxmcKNGWEe0KrlZofzD/tDNG8VrzUNSBAgOWLnzGV6U+Ibo+0LjX MpOlB3axBVfDnnlfruNoT3bjReH6eLcoLowlWE/o0BQjPEOwMyWme2lfKCvAAp/9 TwzjNdJW5072dAPBsjQSNVvqjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBGLCoe lzCB+xvplCV08XeqG5+sMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0 dlRINkFXb3RXMXVHcWJQOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV/oq0rNx4OyqAyVKR1onasa0fQgtgu28m/q8tD/CkzRmVmLLzRT1E eYuA9facTnahV47oLLMVx9DuPFH8E94vr73q7D1ImgwE4ykuQU+bn1+YsUWw7kxE mL7ZrHMVTW/EEYok5Q39830Chv6MrhQkJGUNMuMgZHWtPhPmGSgY3smTes+4yVkx RWEa8anxwbe8AvuOYbKcUOHJ3jBlSczjBj4FteWYy46zDXSm8t/v86etqIe6pbUj ojk0dvFBzjviUAlOmlHJAIz6+MITRe56UHwG0dkWL1wISlClC+9reqSHeD6x8QxA DfJez0d2dwSkDhs7d1xeH0XvIytoc+fg -----END CERTIFICATE-----Generated at Mon May 12 18:24:41 2025 by rpki-client