$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: 7I9r8jB678JFdBTxGRysvkz4GT16rSTfE+ffSIMBvaU= Subject key identifier: D3:2D:67:95:80:48:BB:EC:AC:B8:7A:29:CA:6D:03:46:19:09:CE:8F Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 01CE Signing time: Thu 17 Apr 2025 01:53:18 +0000 Manifest this update: Thu 17 Apr 2025 01:53:17 +0000 Manifest next update: Thu 24 Apr 2025 01:53:17 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: tsCQ2b2R5Pduj731LrbmYACyCo66AXutxsSEAtWtzhc=) 2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: X2hAsppM/jRjKRsLmyjCzm5Ax50DSNDAipyDKhugtZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: Apr 17 01:53:17 2025 GMT Not After : Apr 24 01:53:17 2025 GMT Subject: CN=68005f0e-b030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:a5:25:4a:49:bd:3a:8f:f7:c4:f3:38:51: e6:ad:3e:4a:88:c2:95:fe:70:d4:c7:fb:f8:19:bd: 29:5b:e0:7c:53:9f:d0:c0:27:fe:67:45:cc:5e:42: b4:17:a1:a9:28:5c:fe:da:83:95:f1:6a:e1:2c:70: c0:d5:dd:7a:39:31:aa:d7:4b:db:da:ea:67:23:58: a7:8a:d9:b0:26:f0:8d:6f:4f:66:95:a0:70:b0:97: ef:6a:1a:10:f0:3a:dc:7a:40:4c:80:b0:5c:be:ee: 5b:9c:c3:04:4b:ee:69:b2:a5:45:f9:52:87:08:ff: 1b:15:5e:ac:81:2e:9f:ee:95:65:0a:1c:f9:3f:22: 86:21:ec:1e:f1:4a:42:59:5e:85:5d:b4:cb:ad:4e: 7b:db:31:b7:38:f7:97:57:7d:8b:b9:54:46:23:67: dc:4d:a3:d6:4a:65:39:04:4f:26:6b:b8:a2:78:a8: a8:fd:4a:6d:1e:b2:6b:98:f2:7e:4a:53:e6:32:c4: cf:60:a4:69:27:39:47:ed:16:ec:05:95:e4:16:9b: d3:65:7b:ee:be:77:d8:c7:dd:49:28:6d:f1:24:fb: c7:eb:b6:b1:bc:97:f1:9f:32:49:2d:84:0b:a9:dc: dc:a0:92:74:56:d0:70:ba:38:58:4e:e6:dd:14:15: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2D:67:95:80:48:BB:EC:AC:B8:7A:29:CA:6D:03:46:19:09:CE:8F X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5e:e3:a8:39:be:6a:68:92:12:54:81:1a:a1:90:24:ec:22: 10:a7:71:2a:7b:9a:32:10:54:bd:9c:14:83:51:41:13:87:c9: b2:59:c7:02:d1:a4:f1:f8:42:dd:a4:70:4a:4d:7d:a1:56:3a: 99:78:ba:18:1b:a1:1b:a5:f6:d4:0b:f7:b1:7f:ae:e8:82:9f: 5a:93:10:d8:b2:b3:1d:a7:5b:79:3a:cf:c7:4f:0b:06:eb:53: 25:98:4d:ea:df:dc:16:ad:61:f3:21:f7:a9:12:89:05:51:ac: 9b:49:e1:0c:8d:04:f9:f1:47:8d:c4:71:db:a7:6c:a4:2a:6b: 56:b3:52:1a:77:40:ca:8e:08:e1:9b:a6:2f:4e:84:25:2b:44: c9:4e:bd:ff:83:7a:e9:85:0b:57:72:54:8f:dc:53:92:c8:b5: e0:81:c3:07:fd:86:13:fd:6b:e9:37:9a:06:38:7b:8f:1d:19: 5e:cc:a7:8a:d8:8c:a4:91:a6:52:0d:72:65:9d:ae:65:71:a1: 61:11:48:8e:31:d4:bc:96:bb:92:05:2c:7e:7c:87:62:37:f7: 36:54:81:41:3f:7a:d6:3c:77:9a:9b:66:7a:3c:d6:c2:e5:8c: 5a:41:b3:e7:08:d4:5a:39:6b:70:95:e2:5a:76:cc:d0:70:ed: 0c:56:08:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjUwNDE3MDE1MzE3WhcNMjUwNDI0MDE1MzE3WjAYMRYwFAYD VQQDEw02ODAwNWYwZS1iMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+ulJUpJvTqP98TzOFHmrT5KiMKV/nDUx/v4Gb0pW+B8U5/QwCf+Z0XMXkK0 F6GpKFz+2oOV8WrhLHDA1d16OTGq10vb2upnI1initmwJvCNb09mlaBwsJfvahoQ 8DrcekBMgLBcvu5bnMMES+5psqVF+VKHCP8bFV6sgS6f7pVlChz5PyKGIewe8UpC WV6FXbTLrU572zG3OPeXV32LuVRGI2fcTaPWSmU5BE8ma7iieKio/UptHrJrmPJ+ SlPmMsTPYKRpJzlH7RbsBZXkFpvTZXvuvnfYx91JKG3xJPvH67axvJfxnzJJLYQL qdzcoJJ0VtBwujhYTubdFBVSAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMtZ5WA SLvsrLh6KcptA0YZCc6PMB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIXuOoOb5qaJISVIEaoZAk7CIQp3Eqe5oyEFS9nBSDUUETh8myWccC 0aTx+ELdpHBKTX2hVjqZeLoYG6EbpfbUC/exf67ogp9akxDYsrMdp1t5Os/HTwsG 61MlmE3q39wWrWHzIfepEokFUaybSeEMjQT58UeNxHHbp2ykKmtWs1Iad0DKjgjh m6YvToQlK0TJTr3/g3rphQtXclSP3FOSyLXggcMH/YYT/WvpN5oGOHuPHRlezKeK 2IykkaZSDXJlna5lcaFhEUiOMdS8lruSBSx+fIdiN/c2VIFBP3rWPHeam2Z6PNbC 5YxaQbPnCNRaOWtwleJadszQcO0MVgh9 -----END CERTIFICATE-----Generated at Sat Apr 19 00:50:44 2025 by rpki-client