$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json) Hash identifier: rV17CGwDRP62s0T+k0167I8Pm2YVJdM1hHrAjpcwu8M= Subject key identifier: 98:07:73:25:94:B1:1F:77:D5:3F:41:53:F0:8C:EB:BC:6C:AA:B5:5F Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft Manifest number: 0378 Signing time: Thu 03 Apr 2025 00:55:12 +0000 Manifest this update: Thu 03 Apr 2025 00:55:12 +0000 Manifest next update: Thu 10 Apr 2025 00:55:11 +0000 Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: d4zX5ZCaTE4k1ylwJl51Ziqz+Fg8zlnvLDlbpil6vro=) 2: 1E2EB8D09F3811ECBB84BD76C4F9AE02.roa (hash: 1WpEdRwcGN3vtWhbe0YafVKHoyPb3PH+roug1Q45T04=) 3: 1F26C9129F3811ECBB84BD76C4F9AE02.roa (hash: MGQuIf7b8pEJs0FKmZr0E0D/ZU/TElOpmNPZAx/GWO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045 Validity Not Before: Apr 3 00:55:12 2025 GMT Not After : Apr 10 00:55:11 2025 GMT Subject: CN=67eddc70-ba13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:8b:63:e7:50:45:64:84:2b:9f:4b:a2:75: 10:5e:2e:5e:53:9e:5b:d0:ae:79:3e:c9:45:9e:29: 0c:37:16:00:be:73:bf:1e:ae:86:b0:5f:9e:55:ca: 35:0e:29:ac:0c:c4:51:91:8b:85:04:c6:67:84:fb: 88:8b:05:75:9b:d0:e5:89:04:8b:16:35:85:ea:8f: 3b:54:69:47:b5:98:51:d5:c0:5b:40:5a:aa:89:60: ef:ff:9d:ae:77:13:a2:46:34:10:93:25:0e:9b:95: c7:57:7e:cb:8b:47:9a:34:37:db:72:5a:31:a1:ac: 7c:ca:64:c1:62:1a:7f:cd:93:eb:8f:3a:1d:88:0a: 76:58:56:d7:a0:1d:ef:4e:02:4b:0a:03:f1:1b:03: fe:19:4c:53:f6:3b:9a:b0:06:f3:c5:14:03:0f:73: 9e:9a:18:8e:c7:34:97:b5:ed:7a:28:d3:ed:58:42: 13:50:aa:e5:e4:37:d3:8b:cb:75:df:6d:0e:6c:d5: e3:06:87:84:a7:d1:c0:a2:d1:4f:5c:ec:b7:5e:f6: ea:29:97:07:10:65:15:72:3d:19:f8:29:81:64:e2: a9:b2:d2:b1:40:96:d6:c5:33:57:9e:c7:1d:f5:70: c7:56:49:6c:cd:fa:dd:1a:b4:e7:b7:81:37:0e:d0: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:07:73:25:94:B1:1F:77:D5:3F:41:53:F0:8C:EB:BC:6C:AA:B5:5F X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:12:54:26:06:2b:5f:e3:6d:37:73:22:16:ec:b4:fe:4b:1a: e8:26:53:3b:3b:d7:cf:71:e2:af:7e:fe:c4:f1:6a:77:a7:98: a0:18:a0:7f:30:12:c9:3f:ef:e5:d3:2c:b6:7c:67:73:e1:a0: e7:fa:5d:96:63:3a:10:d6:5c:db:97:ba:a7:65:e6:c4:56:f7: cc:5c:f2:cb:e6:3a:9a:c4:c7:ed:43:5b:72:9b:af:b6:f6:dd: 1f:47:f5:d7:a1:06:5c:36:d9:5b:d7:ef:d8:da:da:da:53:8f: ad:d8:b9:1b:c2:54:f3:07:10:29:11:19:de:7a:fa:ad:63:5b: 9f:ac:2e:37:5f:ed:24:10:1c:7d:92:fc:3d:99:4c:00:ad:20: 52:e8:05:cb:5e:ca:de:0b:62:65:27:c2:3f:83:a7:42:de:0d: 62:64:b6:77:47:7b:42:39:fc:9b:9c:92:4d:30:b6:09:83:7a: 15:1a:0d:8b:ba:d7:df:c0:0b:24:6b:63:cc:4c:e6:ed:6d:71: fe:ea:6a:0b:7b:b0:fe:7c:52:72:8c:c7:0d:6d:86:70:1a:ff: ef:e5:1a:82:2d:d7:96:2b:42:01:49:17:33:27:4f:19:d3:b0: 39:fb:bf:0b:89:92:b1:8f:62:d7:4c:a2:06:7a:5c:cc:fc:59: 8f:6b:7a:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjUwNDAzMDA1NTEyWhcNMjUwNDEwMDA1NTExWjAYMRYwFAYD VQQDEw02N2VkZGM3MC1iYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3P2LY+dQRWSEK59LonUQXi5eU55b0K55PslFnikMNxYAvnO/Hq6GsF+eVco1 DimsDMRRkYuFBMZnhPuIiwV1m9DliQSLFjWF6o87VGlHtZhR1cBbQFqqiWDv/52u dxOiRjQQkyUOm5XHV37Li0eaNDfbcloxoax8ymTBYhp/zZPrjzodiAp2WFbXoB3v TgJLCgPxGwP+GUxT9juasAbzxRQDD3OemhiOxzSXte16KNPtWEITUKrl5DfTi8t1 320ObNXjBoeEp9HAotFPXOy3XvbqKZcHEGUVcj0Z+CmBZOKpstKxQJbWxTNXnscd 9XDHVklszfrdGrTnt4E3DtCLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgHcyWU sR931T9BU/CM67xsqrVfMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzA0NS9CRkFEQzYxMDlGMjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtr bU50VmNEWkdNRnlqZm5UN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDElQmBitf4203cyIW7LT+SxroJlM7O9fPceKvfv7E8Wp3p5igGKB/ MBLJP+/l0yy2fGdz4aDn+l2WYzoQ1lzbl7qnZebEVvfMXPLL5jqaxMftQ1tym6+2 9t0fR/XXoQZcNtlb1+/Y2traU4+t2LkbwlTzBxApERneevqtY1ufrC43X+0kEBx9 kvw9mUwArSBS6AXLXsreC2JlJ8I/g6dC3g1iZLZ3R3tCOfybnJJNMLYJg3oVGg2L utffwAska2PMTObtbXH+6moLe7D+fFJyjMcNbYZwGv/v5RqCLdeWK0IBSRczJ08Z 07A5+78LiZKxj2LXTKIGelzM/FmPa3qP -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:55 2025 by rpki-client