$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: Wss+XI552bxjrH0aQjw2RwvnBO5Kup7NQn8ArNRTlV4= Subject key identifier: DC:B7:2A:31:F3:0F:C7:02:A3:36:82:6C:84:AF:35:DF:39:54:4B:40 Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: 86 Signing time: Thu 03 Apr 2025 05:52:17 +0000 Manifest this update: Thu 03 Apr 2025 05:52:17 +0000 Manifest next update: Thu 10 Apr 2025 05:52:17 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: 5H8gtfhbgb3VynNDC+s1p3yPdug6j+WHnWSdFwx4FKg=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: hLvwEFk98bWRQGRyM9lagexFlMamyjjm31+1YE8+aHE=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: qhTLRhnOO7ik7RZ20f6PHZaEkopFMfPgBZc1HXBQUng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354 Validity Not Before: Apr 3 05:52:17 2025 GMT Not After : Apr 10 05:52:17 2025 GMT Subject: CN=67ee2211-486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:0f:8b:5e:6f:26:6c:3c:cd:77:32:3d:55: df:21:45:46:b0:de:82:3e:2e:f9:63:5f:21:ec:36: e6:cf:c7:27:bd:e7:39:c0:51:8f:ef:c2:0d:ac:f3: bc:70:ee:a5:8d:9e:a5:8d:57:a5:fb:8b:f0:3c:d9: f6:3b:1a:63:11:db:a2:d0:6e:28:a1:68:10:19:76: 60:9e:5d:6e:32:b8:cd:79:df:f1:88:d1:7a:87:bc: 77:90:60:ac:a6:57:d7:da:f4:73:f6:5b:30:00:80: fa:17:07:dd:8e:0e:20:e6:34:88:02:b5:41:ea:9f: 9b:94:5e:82:0d:30:6a:7f:51:b7:b2:da:c8:3b:ea: a1:99:53:82:c3:28:30:21:74:12:ac:60:92:82:41: ed:61:97:20:28:a8:bb:73:c4:8e:46:64:94:76:79: 9b:e2:b4:3a:36:36:67:66:a3:1d:c2:1a:48:1b:b9: 38:77:db:5c:8f:2f:4c:47:f0:6d:b0:f0:29:06:1e: fd:c6:b0:e6:83:03:1e:12:7a:ff:a6:5b:e2:dc:bf: e7:2c:61:b5:2b:12:27:9f:b1:4b:80:4a:e0:1c:a1: 0b:ef:e3:77:a4:6f:50:78:f3:bf:82:4f:68:c2:0f: b1:af:20:14:2f:02:29:07:0b:f2:e0:33:48:e6:b2: e9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B7:2A:31:F3:0F:C7:02:A3:36:82:6C:84:AF:35:DF:39:54:4B:40 X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:45:e2:99:3d:82:a3:34:ca:71:21:3d:ce:af:76:e3:71:ec: 11:e9:1e:72:a1:3d:b5:93:f2:59:6b:77:46:81:28:15:61:ab: 1e:ff:6b:53:a4:f3:af:ff:de:c6:26:b0:3b:cc:84:11:56:ef: 25:bf:80:e3:60:5c:a4:3c:e1:37:b0:9c:c6:56:fc:d6:5e:58: e7:f8:78:cc:e6:4c:1a:ca:ed:a5:03:85:72:1b:47:80:4b:79: 97:5d:e2:87:27:8d:b1:a1:ee:74:1d:9d:95:53:1a:c2:cc:ce: f4:5f:57:93:bd:40:e7:09:9c:30:a3:49:ec:eb:c1:13:57:f5: d6:cf:13:a5:44:83:50:4c:55:d9:9e:5b:b6:f8:39:2b:32:73: cb:b7:52:59:44:4a:2f:bf:81:ab:1f:5a:a7:96:62:de:50:a0: 39:d7:ea:81:81:af:55:08:98:73:7f:72:e7:6c:09:25:7d:af: 42:13:6a:83:cc:44:c4:2a:71:14:99:8b:14:7d:3a:a4:c5:16: 1b:9f:b5:89:7f:45:96:66:df:39:f6:3a:a4:53:d6:b5:2b:28: a5:c8:db:33:70:66:de:a6:19:99:4f:bc:bd:c6:d0:b5:13:91: e4:7a:0f:1c:37:38:6a:61:a0:79:59:79:ab:5e:e7:1b:cd:f8: 88:1f:c7:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNTQxMTAvBgNVBAUTKENFQzlCMUIzNTlGRTU4RTkwMjNBODRDRkMyNjc0QzE2 MTgyOEY5OTkwHhcNMjUwNDAzMDU1MjE3WhcNMjUwNDEwMDU1MjE3WjAYMRYwFAYD VQQDEw02N2VlMjIxMS00ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbMPi15vJmw8zXcyPVXfIUVGsN6CPi75Y18h7Dbmz8cnvec5wFGP78INrPO8 cO6ljZ6ljVel+4vwPNn2OxpjEdui0G4ooWgQGXZgnl1uMrjNed/xiNF6h7x3kGCs plfX2vRz9lswAID6Fwfdjg4g5jSIArVB6p+blF6CDTBqf1G3strIO+qhmVOCwygw IXQSrGCSgkHtYZcgKKi7c8SORmSUdnmb4rQ6NjZnZqMdwhpIG7k4d9tcjy9MR/Bt sPApBh79xrDmgwMeEnr/plvi3L/nLGG1KxInn7FLgErgHKEL7+N3pG9QePO/gk9o wg+xryAULwIpBwvy4DNI5rLpYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy3KjHz D8cCozaCbISvNd85VEtAMB8GA1UdIwQYMBaAFM7JsbNZ/ljpAjqEz8JnTBYYKPmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM1NC84RDRFQ0Y4NDRE ODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdPa0NPb1RQd21kTUZoZ28t WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdP a0NPb1RQd21kTUZoZ28tWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEReKZPYKjNMpxIT3Or3bjcewR6R5yoT21k/JZa3dGgSgVYase/2tT pPOv/97GJrA7zIQRVu8lv4DjYFykPOE3sJzGVvzWXljn+HjM5kwayu2lA4VyG0eA S3mXXeKHJ42xoe50HZ2VUxrCzM70X1eTvUDnCZwwo0ns68ETV/XWzxOlRINQTFXZ nlu2+DkrMnPLt1JZREovv4GrH1qnlmLeUKA51+qBga9VCJhzf3LnbAklfa9CE2qD zETEKnEUmYsUfTqkxRYbn7WJf0WWZt859jqkU9a1KyilyNszcGbephmZT7y9xtC1 E5Hkeg8cNzhqYaB5WXmrXucbzfiIH8fs -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:06 2025 by rpki-client