$ rpki-client -vvf rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft File: 1ZVULlIPSK9153kD6majnGTB0KM.mft (raw, json) Hash identifier: IDJG6ChQyBhAySA6JXhBeebeKNU68WyiYiKydWoDX2k= Subject key identifier: 5E:8E:2F:6D:9F:17:B7:56:82:14:89:7A:F1:AC:4B:96:11:1D:62:7A Authority key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 Certificate issuer: /CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft Manifest number: EA Signing time: Thu 03 Apr 2025 04:36:06 +0000 Manifest this update: Thu 03 Apr 2025 04:36:06 +0000 Manifest next update: Thu 10 Apr 2025 04:36:06 +0000 Files and hashes: 1: 1ZVULlIPSK9153kD6majnGTB0KM.crl (hash: f8rvdzrgXi2GksapeC4RIsha9QpeMcOedLGp9CJ2x1M=) 2: A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa (hash: 80qu5haW6721xx7xV/uutyDDcTxrv0bPQaiLvhProi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175866 Validity Not Before: Apr 3 04:36:06 2025 GMT Not After : Apr 10 04:36:06 2025 GMT Subject: CN=67ee1036-c7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:75:a0:48:5d:33:08:ee:c6:61:33:c5:da: 4c:17:16:05:0e:4a:ca:07:45:4c:9d:30:5b:12:48: 7f:e9:20:5d:c5:55:1b:16:b6:9b:bc:73:8c:0f:18: 71:46:c9:ee:b1:8f:36:b3:f1:c2:54:6f:8f:66:7f: c0:26:0d:32:58:d9:96:c2:81:c3:44:89:60:d9:82: f4:86:ea:a9:bb:ef:16:8d:f9:86:40:11:2d:85:cb: 65:e8:e5:19:67:0f:04:15:3d:7f:6e:93:c8:6c:da: 17:75:55:da:48:50:ed:21:18:f9:61:04:26:90:90: ab:35:e1:c9:c9:42:3b:47:66:c4:fd:9b:42:3e:51: ca:85:44:96:bd:9e:73:11:20:a6:ef:a6:9c:38:b5: 83:f1:d4:fa:3b:74:88:b4:52:b1:1f:61:ab:13:85: 3d:37:09:7e:18:17:1d:4a:7d:f9:8a:8d:2d:65:1a: 24:ca:b9:05:dd:74:26:2c:8b:66:79:2d:56:8b:5b: 90:21:b1:89:14:21:31:77:66:82:97:a0:ab:65:61: a1:55:dc:83:20:42:ed:79:f2:75:c3:b4:e7:27:3a: a8:60:54:05:4f:f2:4d:56:0c:a3:3d:1a:5d:3b:81: e7:93:4d:af:e1:cd:a4:62:24:8a:1a:ea:52:ec:0e: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8E:2F:6D:9F:17:B7:56:82:14:89:7A:F1:AC:4B:96:11:1D:62:7A X509v3 Authority Key Identifier: keyid:D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fe:26:e7:05:d8:d0:1a:88:7a:b8:2e:6a:38:9a:f9:c8:f5: 73:c5:d7:10:2f:98:7a:e9:c0:76:be:cc:64:ce:7d:d5:27:c2: f8:01:14:a0:59:01:57:4d:26:4e:3e:96:fa:64:34:c6:1b:9a: 98:5f:20:29:c0:37:2c:ee:19:62:48:0e:e6:26:16:2a:5c:6b: 14:48:43:22:ee:1b:4a:5d:3c:13:53:35:97:4a:ed:e7:6b:6a: 4a:4d:86:62:6c:c5:45:43:91:3b:1a:bd:71:b0:68:5f:b8:88: 27:0b:f8:bf:c7:40:c0:81:d6:a2:65:44:91:0b:53:af:74:ff: e3:92:d7:cd:a4:06:4a:32:c3:f2:84:a1:4f:cc:5d:84:25:91: dc:10:f7:1e:12:60:04:94:57:c7:59:26:3f:6c:b2:24:70:de: b3:d1:5d:e7:b7:f1:34:5e:6f:b4:56:74:e8:05:91:16:cc:29: 42:f4:df:f0:44:34:38:9c:bd:4f:bf:81:e1:ea:0a:3f:ed:19: f3:35:04:36:e1:d0:aa:25:2f:cf:f7:65:fc:5e:0f:f7:52:f3: 24:a9:54:06:2b:0e:1e:fe:80:ca:cb:75:fc:15:10:bd:3b:b4: 0b:3a:5b:d8:72:6b:27:b8:1d:93:c3:8d:b0:06:a8:19:0d:c4: df:4b:74:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NjYxMTAvBgNVBAUTKEQ1OTU1NDJFNTIwRjQ4QUY3NUU3NzkwM0VBNjZBMzlD NjRDMUQwQTMwHhcNMjUwNDAzMDQzNjA2WhcNMjUwNDEwMDQzNjA2WjAYMRYwFAYD VQQDEw02N2VlMTAzNi1jN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQZ1oEhdMwjuxmEzxdpMFxYFDkrKB0VMnTBbEkh/6SBdxVUbFrabvHOMDxhx RsnusY82s/HCVG+PZn/AJg0yWNmWwoHDRIlg2YL0huqpu+8WjfmGQBEthctl6OUZ Zw8EFT1/bpPIbNoXdVXaSFDtIRj5YQQmkJCrNeHJyUI7R2bE/ZtCPlHKhUSWvZ5z ESCm76acOLWD8dT6O3SItFKxH2GrE4U9Nwl+GBcdSn35io0tZRokyrkF3XQmLItm eS1Wi1uQIbGJFCExd2aCl6CrZWGhVdyDIELtefJ1w7TnJzqoYFQFT/JNVgyjPRpd O4Hnk02v4c2kYiSKGupS7A7OKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6OL22f F7dWghSJevGsS5YRHWJ6MB8GA1UdIwQYMBaAFNWVVC5SD0ivded5A+pmo5xkwdCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg2Ni9GMTlEMjIwMkFG RDkxMUVFODRDNkYyN0JDNEY5QUUwMi8xWlZVTGxJUFNLOTE1M2tENm1ham5HVEIw S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFaVlVMbElQU0s5MTUza0Q2bWFqbkdUQjBLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg2Ni9GMTlEMjIwMkFGRDkxMUVFODRDNkYyN0JDNEY5QUUwMi8xWlZVTGxJUFNL OTE1M2tENm1ham5HVEIwS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5/ibnBdjQGoh6uC5qOJr5yPVzxdcQL5h66cB2vsxkzn3VJ8L4ARSg WQFXTSZOPpb6ZDTGG5qYXyApwDcs7hliSA7mJhYqXGsUSEMi7htKXTwTUzWXSu3n a2pKTYZibMVFQ5E7Gr1xsGhfuIgnC/i/x0DAgdaiZUSRC1OvdP/jktfNpAZKMsPy hKFPzF2EJZHcEPceEmAElFfHWSY/bLIkcN6z0V3nt/E0Xm+0VnToBZEWzClC9N/w RDQ4nL1Pv4Hh6go/7RnzNQQ24dCqJS/P92X8Xg/3UvMkqVQGKw4e/oDKy3X8FRC9 O7QLOlvYcmsnuB2Tw42wBqgZDcTfS3TC -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:02 2025 by rpki-client