$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: vPu2YXmSpxezT8VorAFYHETSWiITRzOfd9A6g4F0zWI= Subject key identifier: 49:8B:A7:27:C4:76:6A:42:44:34:DC:27:4E:DD:38:05:0C:67:EB:BB Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 0307 Signing time: Wed 09 Apr 2025 00:55:01 +0000 Manifest this update: Wed 09 Apr 2025 00:55:01 +0000 Manifest next update: Wed 16 Apr 2025 00:55:01 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: cQkH32BBtVH+81WmfiXqF3ePxytpoYgnK+2w84foVi4=) 2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: nQdK1rGrAZaVn61Rf7mgLuPTTFOBn2cvd3HtJnDtbFM=) 3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: SHxodb2YJuOp3jPVIUdHlVxJnzvRTwIkn0lL5MugVgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907 Validity Not Before: Apr 9 00:55:01 2025 GMT Not After : Apr 16 00:55:01 2025 GMT Subject: CN=67f5c565-6586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:cf:13:f7:a2:9b:07:32:53:6b:87:53:74: 76:ea:45:b6:34:ee:61:e2:22:81:dd:6f:ea:36:e0: 89:6b:95:e3:7a:db:22:a5:bd:d6:f2:30:c9:1c:62: 4e:d8:da:87:27:84:a9:8e:dd:2f:b2:c9:4c:8e:b5: 20:fb:2a:9a:58:06:13:6f:fd:c2:82:06:98:b2:59: 93:bf:49:fa:e6:b5:33:59:db:41:c8:0b:f3:2a:cf: 80:38:63:d2:d6:8d:bd:d6:e6:90:f8:73:05:a5:b9: 7f:0e:55:2d:16:87:c9:ea:fe:7d:20:9f:75:aa:59: f1:c5:37:78:ec:44:ec:44:7d:09:58:ec:7f:b9:20: 75:44:05:0a:97:40:82:c8:2a:6c:b7:ac:15:05:ee: 04:14:fa:89:be:6b:aa:c8:bf:41:bb:e4:0d:75:29: b8:08:86:8f:2b:7f:b3:2c:2c:c8:c4:c9:fc:4f:d9: 2a:46:78:57:6b:3a:22:9f:c2:ff:bc:e2:0a:83:25: d8:b5:84:e2:2a:b8:4e:32:b7:7f:d0:17:1e:38:e0: 01:8b:93:a6:3e:fa:63:9b:14:79:86:fa:ff:88:bc: 8b:c3:ee:24:34:a8:7c:22:6f:71:29:f8:37:7f:e1: 00:79:8f:b1:d0:01:c5:1f:0d:15:fd:a8:d4:3a:7e: 8b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8B:A7:27:C4:76:6A:42:44:34:DC:27:4E:DD:38:05:0C:67:EB:BB X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:48:35:45:13:97:4a:bd:d0:28:a5:7b:60:dc:08:51:48:86: 65:5c:7f:de:69:0c:23:e3:4f:7e:8c:50:b0:42:c6:45:8c:b6: 6e:05:2a:09:98:e5:26:22:95:b2:ed:31:8e:e4:f3:9f:ba:63: ea:f1:71:9d:01:3a:90:d2:7d:3c:18:d1:8c:7b:2d:c8:b0:13: c6:c1:15:53:c2:eb:b4:02:05:f9:a9:9f:fc:f1:7b:8d:0e:08: c2:12:7a:ac:ef:da:4a:da:68:60:b0:75:be:eb:3c:40:5e:a5: 51:a2:4b:60:7d:f1:b6:fd:be:33:90:4a:0e:4d:81:eb:18:b1: 9e:02:7c:55:bc:eb:cd:61:22:51:e6:38:b1:11:e6:11:9d:59: 02:49:8a:69:83:b9:a1:f3:01:eb:75:a9:d7:80:8e:be:03:ba: 05:7c:f6:33:0a:eb:1b:1e:3f:b3:7b:9c:b8:37:08:af:f1:7e: 29:0f:19:29:88:07:3e:6c:fa:c8:45:a3:c0:77:dd:9e:ce:d0: 6d:49:e1:e7:0b:c7:cb:b8:22:10:72:e9:af:1f:6d:bc:10:ac: 5d:95:c5:cc:01:a0:9f:cc:67:52:c7:7b:71:52:f7:50:63:f7: c4:7e:6a:56:07:86:2c:a3:9a:b0:52:b6:b0:55:72:07:23:ab: fe:a6:59:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjUwNDA5MDA1NTAxWhcNMjUwNDE2MDA1NTAxWjAYMRYwFAYD VQQDEw02N2Y1YzU2NS02NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT3PE/eimwcyU2uHU3R26kW2NO5h4iKB3W/qNuCJa5Xjetsipb3W8jDJHGJO 2NqHJ4Spjt0vsslMjrUg+yqaWAYTb/3CggaYslmTv0n65rUzWdtByAvzKs+AOGPS 1o291uaQ+HMFpbl/DlUtFofJ6v59IJ91qlnxxTd47ETsRH0JWOx/uSB1RAUKl0CC yCpst6wVBe4EFPqJvmuqyL9Bu+QNdSm4CIaPK3+zLCzIxMn8T9kqRnhXazoin8L/ vOIKgyXYtYTiKrhOMrd/0BceOOABi5OmPvpjmxR5hvr/iLyLw+4kNKh8Im9xKfg3 f+EAeY+x0AHFHw0V/ajUOn6LWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmLpyfE dmpCRDTcJ07dOAUMZ+u7MB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDSDVFE5dKvdAopXtg3AhRSIZlXH/eaQwj409+jFCwQsZFjLZuBSoJ mOUmIpWy7TGO5POfumPq8XGdATqQ0n08GNGMey3IsBPGwRVTwuu0AgX5qZ/88XuN DgjCEnqs79pK2mhgsHW+6zxAXqVRoktgffG2/b4zkEoOTYHrGLGeAnxVvOvNYSJR 5jixEeYRnVkCSYppg7mh8wHrdanXgI6+A7oFfPYzCusbHj+ze5y4Nwiv8X4pDxkp iAc+bPrIRaPAd92eztBtSeHnC8fLuCIQcumvH228EKxdlcXMAaCfzGdSx3txUvdQ Y/fEfmpWB4Yso5qwUrawVXIHI6v+plnu -----END CERTIFICATE-----Generated at Thu Apr 10 18:42:00 2025 by rpki-client