$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: stgV7scHObRCwuZGeI2eXEa/5ckFlb6BybNIge4ac9g= Subject key identifier: 48:84:C2:55:2F:07:0E:DC:3B:73:30:A8:18:FD:5A:62:87:BB:F2:ED Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 01D9 Signing time: Fri 09 May 2025 01:58:35 +0000 Manifest this update: Fri 09 May 2025 01:58:35 +0000 Manifest next update: Fri 16 May 2025 01:58:35 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: 9top+iCQ6fQY8JPHdz43PGqK/l+q1H54OvLUlKspfzA=) 2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: X2hAsppM/jRjKRsLmyjCzm5Ax50DSNDAipyDKhugtZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: May 9 01:58:35 2025 GMT Not After : May 16 01:58:35 2025 GMT Subject: CN=681d614b-5faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:5e:2f:10:5c:2d:48:0f:2b:36:58:ae:5d: e5:44:94:80:b8:8e:00:58:d2:04:e5:0e:14:73:3b: 37:18:18:5a:f2:d6:8f:22:04:8d:30:b9:b6:a5:b4: 33:08:f3:e9:82:11:de:7a:e3:53:80:26:c2:72:94: 03:fd:19:4c:35:76:78:1b:fd:fb:b2:85:ea:2a:59: 4a:9e:ae:69:75:3a:2c:5d:54:c7:e8:69:14:63:50: 5c:d2:12:0b:dc:45:26:29:49:a7:ae:72:67:93:19: f0:e2:e3:73:2e:80:9d:d8:80:6e:da:fc:77:6f:c5: 8e:a8:35:00:d3:4f:a1:e9:eb:e9:04:26:f0:81:fe: 04:9d:53:e6:b5:74:ee:46:d3:9e:6a:5a:e4:c5:68: 85:1b:41:fd:37:e2:de:ed:02:14:7a:83:6a:f0:97: 34:6f:26:80:22:39:54:af:2d:a7:43:8c:f6:49:bd: 6c:ac:ca:24:52:03:ce:71:9c:3e:01:77:eb:02:f7: 05:59:93:53:37:9c:a0:a4:1a:5d:2d:58:ec:4b:60: 44:bc:ed:4c:ae:b5:ab:82:d3:5a:65:f4:91:a2:3b: fa:e7:e6:af:02:a6:8c:80:87:9e:0d:8f:41:67:52: 8c:41:a1:0b:f2:75:3f:e0:eb:25:35:b1:9e:11:0e: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:84:C2:55:2F:07:0E:DC:3B:73:30:A8:18:FD:5A:62:87:BB:F2:ED X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9a:6f:95:c4:83:a9:dd:d9:ac:45:2e:ad:60:a2:f2:f5:4f: 3c:c8:65:ff:52:86:08:b7:1d:72:79:69:d8:48:09:ed:d9:a9: f6:8f:53:37:b0:bf:19:9e:c8:8c:17:49:ce:28:77:f0:65:ab: 44:18:bc:bf:fa:cc:90:7a:b8:47:4a:55:99:08:01:10:a7:0c: e3:9c:35:95:59:95:14:ac:e2:55:f8:61:33:41:3e:78:4f:8d: 71:d7:06:82:d9:0f:28:4c:74:e5:6a:27:75:e9:27:d2:28:a2: 1e:f8:8a:fd:54:74:7b:d6:38:cf:22:2e:40:94:68:fc:57:58: e3:fd:b6:bb:a1:c0:1d:7f:5e:f4:4c:b9:ae:db:77:5d:dc:cf: 72:cc:e6:92:23:02:64:7d:90:b4:74:c0:32:ce:c2:51:85:66: 7c:f5:14:37:b1:64:0d:6a:22:13:93:e9:db:ad:56:e3:d3:a1: a9:f2:4a:f9:54:b5:2a:75:56:02:1e:00:84:1d:65:2f:c5:39: 05:e0:3a:4d:db:a7:a3:ba:6a:2a:01:68:68:cf:e6:58:32:65: 44:c5:b9:0c:08:b7:0a:e5:81:f4:35:2e:30:50:2d:61:cb:a1: a2:8e:c8:48:63:ce:4f:33:54:78:17:80:25:62:a3:2e:1c:cf: c2:49:9e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjUwNTA5MDE1ODM1WhcNMjUwNTE2MDE1ODM1WjAYMRYwFAYD VQQDEw02ODFkNjE0Yi01ZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrleLxBcLUgPKzZYrl3lRJSAuI4AWNIE5Q4Uczs3GBha8taPIgSNMLm2pbQz CPPpghHeeuNTgCbCcpQD/RlMNXZ4G/37soXqKllKnq5pdTosXVTH6GkUY1Bc0hIL 3EUmKUmnrnJnkxnw4uNzLoCd2IBu2vx3b8WOqDUA00+h6evpBCbwgf4EnVPmtXTu RtOealrkxWiFG0H9N+Le7QIUeoNq8Jc0byaAIjlUry2nQ4z2Sb1srMokUgPOcZw+ AXfrAvcFWZNTN5ygpBpdLVjsS2BEvO1MrrWrgtNaZfSRojv65+avAqaMgIeeDY9B Z1KMQaEL8nU/4OslNbGeEQ6ogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiEwlUv Bw7cO3MwqBj9WmKHu/LtMB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfmm+VxIOp3dmsRS6tYKLy9U88yGX/UoYItx1yeWnYSAnt2an2j1M3 sL8ZnsiMF0nOKHfwZatEGLy/+syQerhHSlWZCAEQpwzjnDWVWZUUrOJV+GEzQT54 T41x1waC2Q8oTHTlaid16SfSKKIe+Ir9VHR71jjPIi5AlGj8V1jj/ba7ocAdf170 TLmu23dd3M9yzOaSIwJkfZC0dMAyzsJRhWZ89RQ3sWQNaiITk+nbrVbj06Gp8kr5 VLUqdVYCHgCEHWUvxTkF4DpN26ejumoqAWhoz+ZYMmVExbkMCLcK5YH0NS4wUC1h y6GijshIY85PM1R4F4AlYqMuHM/CSZ5+ -----END CERTIFICATE-----Generated at Sat May 10 05:13:55 2025 by rpki-client