$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: 5FdHAbcKvAGm7rdqaSF7sY/1S1CqGIoCwqfpM1iFpOI= Subject key identifier: B2:B7:A5:D2:B1:5B:8E:E3:D2:35:37:34:09:22:2A:FE:9F:FD:53:0B Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 70 Signing time: Mon 07 Apr 2025 05:42:06 +0000 Manifest this update: Mon 07 Apr 2025 05:42:06 +0000 Manifest next update: Mon 14 Apr 2025 05:42:06 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: aoypHJYpH54OnxjWK6+N1Gu6IUWx1/edFF8WC/9xYro=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: Fnj7JWgwdsaeofMVq5UcxcqhmE7c7PXdT8GOJ7pFYSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF Validity Not Before: Apr 7 05:42:06 2025 GMT Not After : Apr 14 05:42:06 2025 GMT Subject: CN=67f365ae-6bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:8d:35:23:86:e4:39:2a:5a:a4:ff:bf:1c: 34:84:80:34:3f:f7:84:1f:61:81:6d:a9:05:b2:19: 60:b1:4e:24:4d:3f:1e:bb:39:8b:cb:bb:e8:ac:53: fb:1e:a2:12:6d:c3:82:98:da:fc:e7:75:d6:98:e2: 0c:79:db:03:7d:b8:5c:e9:e9:05:05:24:72:5d:ee: 80:3e:e9:fb:6d:05:60:97:40:db:02:75:ae:64:47: 0c:3f:ff:cc:67:84:ad:9d:44:2f:3c:ef:cc:77:b9: 62:95:c6:24:f4:be:c9:fe:63:cd:ba:ca:b3:87:1b: dc:e8:56:3f:9f:1c:03:ae:90:31:4f:43:a5:5e:04: 66:e9:59:7b:db:c5:86:75:96:a3:c1:03:f5:c8:96: c2:d6:21:bf:11:e1:0a:44:35:0b:30:47:92:2f:07: e6:02:bb:2b:dd:dc:24:05:0f:2f:08:4a:69:b8:e2: eb:4e:db:dc:48:95:cc:e5:28:7c:ab:03:68:5a:0a: 37:1b:83:e8:48:16:60:cc:44:64:3b:29:21:55:33: 07:c2:a0:b1:5a:d6:87:be:53:c4:79:16:7d:d0:75: 7f:2a:19:78:29:89:6c:b2:a1:03:2b:9a:d1:19:cf: f3:15:fc:25:98:3d:df:dd:82:31:d0:e5:70:4f:c8: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B7:A5:D2:B1:5B:8E:E3:D2:35:37:34:09:22:2A:FE:9F:FD:53:0B X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:06:86:91:5b:d1:5c:dd:8b:d0:f0:d8:71:34:ce:eb:06:51: e7:a3:45:62:6b:3a:fd:d0:f5:68:1c:45:61:71:c5:ae:8b:79: 2b:58:e2:50:e7:f5:18:46:42:34:3a:aa:c0:9c:94:2f:1e:85: de:9e:cc:ca:ed:a6:08:14:90:4b:b5:80:e3:8f:75:c0:3e:37: d7:6a:56:c2:18:34:e0:cd:d5:42:5e:41:83:07:36:6b:8d:ba: 6d:43:75:11:5f:e6:95:32:77:cc:67:a6:3d:dc:a3:4b:dc:43: 18:ec:c8:1a:3d:cc:30:bd:9e:e1:30:89:9c:7b:dc:d0:20:22: c3:57:ac:d1:bd:91:95:60:14:f1:b5:bc:41:59:3a:d5:a6:2a: ed:bc:bf:bf:f1:1a:e3:a6:d7:93:21:b5:f2:c1:9c:cf:ac:32: ee:5a:97:b6:62:c1:1f:f0:60:98:d8:a3:3b:46:e6:54:55:c7: 8a:f5:c4:24:49:f8:14:38:a8:d5:d2:cf:7c:c2:46:a4:1a:01: 1c:84:2c:58:e7:ee:3c:2f:cd:d4:fe:17:4b:54:d8:b3:dc:dd: 4b:dc:a5:0a:f5:c8:3e:8b:f0:49:19:a3:de:c7:fc:c5:ea:66: 95:8e:00:a4:5d:b1:be:fe:5d:ae:78:12:f6:2b:94:6e:74:88: 96:fd:b2:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTRBRjExMC8GA1UEBRMoQ0VFNDg3NjRBQTJDMTZGNzVBMDY3MjQ0RUJBNTg2Njk3 NEUxQ0VENjAeFw0yNTA0MDcwNTQyMDZaFw0yNTA0MTQwNTQyMDZaMBgxFjAUBgNV BAMTDTY3ZjM2NWFlLTZiZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEqI01I4bkOSpapP+/HDSEgDQ/94QfYYFtqQWyGWCxTiRNPx67OYvLu+isU/se ohJtw4KY2vznddaY4gx52wN9uFzp6QUFJHJd7oA+6fttBWCXQNsCda5kRww//8xn hK2dRC8878x3uWKVxiT0vsn+Y826yrOHG9zoVj+fHAOukDFPQ6VeBGbpWXvbxYZ1 lqPBA/XIlsLWIb8R4QpENQswR5IvB+YCuyvd3CQFDy8ISmm44utO29xIlczlKHyr A2haCjcbg+hIFmDMRGQ7KSFVMwfCoLFa1oe+U8R5Fn3QdX8qGXgpiWyyoQMrmtEZ z/MV/CWYPd/dgjHQ5XBPyBnbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsrel0rFb juPSNTc0CSIq/p/9UwswHwYDVR0jBBgwFoAUzuSHZKosFvdaBnJE66WGaXThztYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNEFGLzQ2NjQ2NkNBNjlG NjExRUZCMkI4QUY1MEM0RjlBRTAyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenVTSFpLb3NGdmRhQm5KRTY2V0dhWFRoenRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB NEFGLzQ2NjQ2NkNBNjlGNjExRUZCMkI4QUY1MEM0RjlBRTAyL3p1U0haS29zRnZk YUJuSkU2NldHYVhUaHp0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE4GhpFb0Vzdi9Dw2HE0zusGUeejRWJrOv3Q9WgcRWFxxa6LeStY4lDn 9RhGQjQ6qsCclC8ehd6ezMrtpggUkEu1gOOPdcA+N9dqVsIYNODN1UJeQYMHNmuN um1DdRFf5pUyd8xnpj3co0vcQxjsyBo9zDC9nuEwiZx73NAgIsNXrNG9kZVgFPG1 vEFZOtWmKu28v7/xGuOm15MhtfLBnM+sMu5al7ZiwR/wYJjYoztG5lRVx4r1xCRJ +BQ4qNXSz3zCRqQaARyELFjn7jwvzdT+F0tU2LPc3UvcpQr1yD6L8EkZo97H/MXq ZpWOAKRdsb7+Xa54EvYrlG50iJb9spQ= -----END CERTIFICATE-----Generated at Tue Apr 8 09:19:24 2025 by rpki-client