$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: S2Lb/iofdoBVdZzVaHVDytSlPoJWucujdQsYbH19X6s= Subject key identifier: 04:63:EC:34:12:4D:37:55:47:05:1B:15:DF:86:2E:22:9B:C6:6E:36 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: 8E Signing time: Sun 11 May 2025 05:11:55 +0000 Manifest this update: Sun 11 May 2025 05:11:55 +0000 Manifest next update: Sun 18 May 2025 05:11:55 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: g+8JCzIV/RAIRMlw+h72zs/uKDbvoUkCV+PeO6Y27a8=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: May 11 05:11:55 2025 GMT Not After : May 18 05:11:55 2025 GMT Subject: CN=6820319b-7c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:06:92:90:9a:d8:b2:22:81:5d:96:3a:6c: 17:19:4e:f8:50:d0:2d:1e:ac:9f:01:e2:fa:4e:94: 54:36:bb:f9:f0:b5:6c:6c:6f:f5:f2:2d:cd:3e:62: 17:42:1d:62:c3:7a:dc:82:18:c2:0d:80:09:7e:1b: a1:8c:84:be:a5:e8:cd:45:10:75:f6:17:13:9c:8c: c7:23:45:2a:df:54:c1:38:f6:c2:f4:b5:70:3c:18: 77:e8:2b:3f:a8:5d:69:fb:25:06:c3:74:71:8d:d1: 9e:c7:07:53:f1:af:46:0e:4d:fc:a1:c4:a5:fb:94: 6e:b0:9a:d7:39:95:fd:d9:70:f7:9d:ba:e0:e6:73: df:b6:05:15:c7:52:a6:78:ae:5a:4c:4f:d9:82:c7: 04:c6:42:8c:0f:2a:02:6a:13:fb:62:83:31:3e:00: 66:ec:d6:c1:be:f7:8d:94:c3:cd:6d:f6:1d:1c:5e: 3b:10:dc:25:ca:47:ed:ca:b0:fb:94:77:53:c8:32: 96:4e:5d:1f:98:3f:6a:b9:ac:a9:d9:d1:1e:eb:f1: 69:57:a9:7f:3f:8c:76:9d:0c:cf:bb:99:0d:22:f8: f7:46:4f:82:43:5a:c8:bf:ef:ec:46:00:40:c2:c8: 0c:07:6e:81:88:54:e0:7d:29:e4:75:46:5f:38:73: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:63:EC:34:12:4D:37:55:47:05:1B:15:DF:86:2E:22:9B:C6:6E:36 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e2:3e:1c:ce:f0:59:67:f3:91:52:7e:d1:75:c5:83:d3:a7: 02:75:8e:74:4e:b7:6d:91:19:ca:2f:78:75:fd:ea:f2:17:8c: 62:e8:fc:54:97:bc:20:16:ed:c6:7a:78:2b:38:3c:33:d1:97: 8a:65:a1:c9:88:6d:8c:82:59:0f:02:f3:d7:6d:ca:18:bd:35: 09:28:1b:b4:6e:99:ef:03:b0:b3:f1:8e:55:a8:30:38:f7:71: 5e:af:f9:c2:48:4f:ad:ff:c7:29:97:8f:c3:40:f1:8a:b9:43: aa:8a:e4:b4:6f:ee:77:d0:b9:1e:3d:3d:66:f2:43:50:4b:8c: cb:dd:d1:db:a3:b5:5f:16:cb:77:e4:41:ac:bd:5e:1e:c5:a9: a0:36:ea:be:99:1c:09:b2:ed:47:99:df:95:ac:71:44:a1:f7: e1:7a:3d:3f:93:d5:ec:8d:80:b5:4d:98:8b:96:75:33:bf:37: c2:29:ab:05:45:4a:33:de:90:1a:84:ca:98:88:71:03:14:1e: e8:e9:b0:49:85:8d:ee:30:49:22:b8:fe:f8:4d:9f:cf:18:db: e0:c6:7f:04:33:cc:d8:93:fb:73:7e:7e:b1:e3:7d:bf:8b:fb: 3a:43:2e:e9:80:d5:3e:02:db:9c:2a:c7:bb:c5:65:8c:0a:85: 1c:35:0e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjUwNTExMDUxMTU1WhcNMjUwNTE4MDUxMTU1WjAYMRYwFAYD VQQDEw02ODIwMzE5Yi03Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybQGkpCa2LIigV2WOmwXGU74UNAtHqyfAeL6TpRUNrv58LVsbG/18i3NPmIX Qh1iw3rcghjCDYAJfhuhjIS+pejNRRB19hcTnIzHI0Uq31TBOPbC9LVwPBh36Cs/ qF1p+yUGw3RxjdGexwdT8a9GDk38ocSl+5RusJrXOZX92XD3nbrg5nPftgUVx1Km eK5aTE/ZgscExkKMDyoCahP7YoMxPgBm7NbBvveNlMPNbfYdHF47ENwlykftyrD7 lHdTyDKWTl0fmD9quayp2dEe6/FpV6l/P4x2nQzPu5kNIvj3Rk+CQ1rIv+/sRgBA wsgMB26BiFTgfSnkdUZfOHPhdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARj7DQS TTdVRwUbFd+GLiKbxm42MB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD4j4czvBZZ/ORUn7RdcWD06cCdY50TrdtkRnKL3h1/eryF4xi6PxU l7wgFu3GengrODwz0ZeKZaHJiG2MglkPAvPXbcoYvTUJKBu0bpnvA7Cz8Y5VqDA4 93Fer/nCSE+t/8cpl4/DQPGKuUOqiuS0b+530LkePT1m8kNQS4zL3dHbo7VfFst3 5EGsvV4examgNuq+mRwJsu1Hmd+VrHFEoffhej0/k9XsjYC1TZiLlnUzvzfCKasF RUoz3pAahMqYiHEDFB7o6bBJhY3uMEkiuP74TZ/PGNvgxn8EM8zYk/tzfn6x432/ i/s6Qy7pgNU+AtucKse7xWWMCoUcNQ5d -----END CERTIFICATE-----Generated at Sun May 11 13:26:43 2025 by rpki-client