$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: xm9/peu6Hx9/BDODQ7vizrS9fvWMTPOwrq3F4/0UX8A= Subject key identifier: 45:BB:4A:8A:05:25:6B:84:2E:57:8B:C6:CB:CA:B2:67:68:37:E9:57 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: A7 Signing time: Tue 01 Jul 2025 06:48:15 +0000 Manifest this update: Tue 01 Jul 2025 06:48:15 +0000 Manifest next update: Tue 08 Jul 2025 06:48:15 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: A/Pau4+A8ijLX2zQQqoAvuSTz3aL3f5Q1Zjiz2c+zE4=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Jul 1 06:48:15 2025 GMT Not After : Jul 8 06:48:15 2025 GMT Subject: CN=686384af-a71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:70:b1:73:b5:08:62:43:0a:7f:d1:bd:f2: f2:2e:75:c8:65:65:2e:c2:d2:5e:1b:bc:f3:97:c7: 40:87:57:c4:d1:d1:66:2c:3b:2b:49:3c:c0:f6:ac: c6:e2:4e:6f:2e:35:26:03:22:72:95:f2:68:f5:2c: 7c:27:ed:22:ae:16:5f:05:48:ef:fc:fe:1c:b7:69: fb:11:f4:a2:64:33:bd:2c:3f:7f:74:99:4d:ea:1c: bf:48:0a:c4:7d:2b:08:75:d0:74:b9:44:bd:e9:b9: c4:94:c5:59:51:c7:fd:9e:7a:c2:67:d3:38:0f:46: 29:8a:75:a4:ac:c1:d1:66:fb:98:f4:8a:51:60:80: 8a:0a:fe:3e:69:25:a7:66:22:53:bf:5a:bc:fc:28: 80:3b:b1:a4:6f:3b:91:45:b9:4d:f1:11:38:0d:5c: 57:d0:4f:2a:46:79:2c:c3:3f:52:44:51:48:21:ec: f5:b1:91:5b:ef:08:8d:d7:46:9c:fd:8f:d8:43:35: be:30:de:0e:b5:21:5d:2c:45:7d:b5:6e:d4:23:33: 89:e0:77:ce:1f:5f:88:79:35:f9:c3:f4:23:24:5c: 22:22:48:35:66:e4:cd:9d:e7:09:32:b1:77:b1:b1: 19:1d:cd:69:56:84:a3:32:f0:8a:7f:65:a5:b8:e2: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BB:4A:8A:05:25:6B:84:2E:57:8B:C6:CB:CA:B2:67:68:37:E9:57 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1c:39:d4:c3:77:8f:dc:84:d3:d7:31:1a:f0:dc:56:b8:7d: 16:c2:b7:7a:14:73:c3:1b:9e:2c:a7:5a:20:1d:a9:e6:fa:ea: a5:e8:79:a7:ef:43:da:b1:fd:c7:86:d4:7d:bb:34:58:c7:65: 90:48:d1:1c:57:eb:73:6d:39:4c:05:c4:3f:c4:85:60:45:40: b1:2f:9f:f7:9f:e6:03:39:3f:bf:71:c0:f1:d1:42:81:72:84: cf:f9:68:a8:99:e0:30:04:b5:85:48:f6:66:b6:f5:95:f7:a4: 7c:78:3e:3c:fd:a6:68:48:3a:31:ae:bd:a9:ce:a4:b4:3a:2c: 98:9d:97:b1:74:59:a4:c7:57:f2:0e:42:3e:94:e1:5f:05:76: f6:8d:72:24:8b:45:ad:d5:a1:02:d0:a1:46:85:b4:e0:f8:1b: 30:69:70:40:98:2a:c3:4b:73:92:ae:98:67:dc:ea:98:6b:6f: 38:f2:b8:d6:c7:98:c4:03:4d:90:42:af:5a:6e:ef:6a:94:46: 5f:28:0d:b0:a0:b3:33:17:0e:66:84:1e:01:d2:53:d3:93:74: 87:5d:03:82:35:bc:31:d1:e9:d2:f8:92:28:92:be:37:54:66: a9:2a:d7:6b:12:ef:21:a9:fc:c4:a4:0c:b5:d0:b8:ad:e3:68: 7e:35:f0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjUwNzAxMDY0ODE1WhcNMjUwNzA4MDY0ODE1WjAYMRYwFAYD VQQDEw02ODYzODRhZi1hNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsppwsXO1CGJDCn/RvfLyLnXIZWUuwtJeG7zzl8dAh1fE0dFmLDsrSTzA9qzG 4k5vLjUmAyJylfJo9Sx8J+0irhZfBUjv/P4ct2n7EfSiZDO9LD9/dJlN6hy/SArE fSsIddB0uUS96bnElMVZUcf9nnrCZ9M4D0YpinWkrMHRZvuY9IpRYICKCv4+aSWn ZiJTv1q8/CiAO7GkbzuRRblN8RE4DVxX0E8qRnkswz9SRFFIIez1sZFb7wiN10ac /Y/YQzW+MN4OtSFdLEV9tW7UIzOJ4HfOH1+IeTX5w/QjJFwiIkg1ZuTNnecJMrF3 sbEZHc1pVoSjMvCKf2WluOJtjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW7SooF JWuELleLxsvKsmdoN+lXMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/HDnUw3eP3ITT1zEa8NxWuH0Wwrd6FHPDG54sp1ogHanm+uql6Hmn 70Pasf3HhtR9uzRYx2WQSNEcV+tzbTlMBcQ/xIVgRUCxL5/3n+YDOT+/ccDx0UKB coTP+WiomeAwBLWFSPZmtvWV96R8eD48/aZoSDoxrr2pzqS0OiyYnZexdFmkx1fy DkI+lOFfBXb2jXIki0Wt1aEC0KFGhbTg+BswaXBAmCrDS3OSrphn3OqYa2848rjW x5jEA02QQq9abu9qlEZfKA2woLMzFw5mhB4B0lPTk3SHXQOCNbwx0enS+JIokr43 VGapKtdrEu8hqfzEpAy10Lit42h+NfCq -----END CERTIFICATE-----Generated at Tue Jul 1 18:44:16 2025 by rpki-client