$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: vyCnBgwHt7zEL2XYWfzH+HZYDHchlBklwrHLOkMnn08= Subject key identifier: 4E:67:30:89:43:20:A9:78:45:39:65:BD:64:F1:05:86:EA:0F:C8:7D Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 01DD Signing time: Sat 31 May 2025 02:29:48 +0000 Manifest this update: Sat 31 May 2025 02:29:47 +0000 Manifest next update: Sat 07 Jun 2025 02:29:47 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: 6bP2dutbP6ycf0Yf+1rBTnbS+TZYdjEl/SwqAOEVsY4=) 2: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: pgI9v9tBw4JvLouCdhmI8EFq53pssTwtUNiYfyBQjoo=) 3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: 9HMzFEkbx1T0ynaVX6uHWObWXzc9PFPAUjEuMjKZdqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: May 31 02:29:47 2025 GMT Not After : Jun 7 02:29:47 2025 GMT Subject: CN=683a699c-b217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:8e:db:07:87:89:b7:c8:ac:3a:36:af:49: 2d:0b:a8:c2:38:c6:dc:75:f0:9e:cc:8f:77:12:2f: cd:c5:f0:17:2b:8f:88:99:51:05:24:62:44:d1:88: 7d:8c:e4:7f:78:94:4d:11:a5:23:45:3d:9b:b5:6a: d3:74:d4:1e:b6:a7:63:6d:07:64:78:35:4f:be:8e: 5c:88:09:fe:c9:be:25:4c:25:74:5f:ba:25:0d:1e: 57:3d:cb:14:49:c7:61:ca:28:f9:06:5d:12:c8:51: 98:b1:07:6b:4a:35:8b:c5:f2:66:a9:7c:ea:58:e4: 51:11:bd:94:bc:a6:36:1c:99:44:af:d5:83:e0:ab: 41:a5:7f:da:c6:1f:5b:7c:9f:12:66:8b:da:0b:c9: a9:f7:5a:a2:63:8e:a8:ef:92:24:53:90:9d:1d:02: 50:44:27:18:d9:a1:a2:a0:6c:53:88:ad:77:3a:9e: 79:7c:96:98:91:34:3d:23:a7:9d:98:d6:51:cc:84: 27:bd:e1:d3:90:0d:bb:ac:c6:03:3a:3e:4d:02:65: 04:99:a7:c6:0e:b8:55:f1:63:58:65:93:b3:74:3f: d1:3e:90:d3:19:e3:16:ea:46:02:7c:19:02:d8:c8: f3:92:9c:77:37:c2:10:79:86:6e:c5:93:89:07:20: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:30:89:43:20:A9:78:45:39:65:BD:64:F1:05:86:EA:0F:C8:7D X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ff:ec:2a:4c:25:ba:2b:5f:74:51:c1:f2:9c:80:2b:d4:df: 98:1e:b3:e3:98:9f:a1:16:b9:60:f8:51:e9:89:d8:78:32:dc: d9:ed:de:86:43:00:16:fc:81:88:51:28:04:71:68:78:75:51: 4a:7b:af:7a:3a:33:f7:ca:58:e8:95:f2:e7:03:cf:a6:49:3f: bd:90:12:b0:32:f4:ff:0c:d8:42:7a:ca:75:e0:af:0e:c2:ff: 34:35:a2:cc:cb:46:6b:0b:1d:fe:47:18:aa:23:76:3d:d7:32: 5e:3b:74:5c:02:7f:30:08:08:91:7d:4c:86:93:f0:73:3d:94: 02:e3:d1:20:81:a7:6d:a8:ed:e1:87:a3:89:0b:3c:44:02:7f: 94:2f:56:1d:81:ea:a8:00:3b:93:8a:b1:48:25:c2:c6:56:95: 1b:db:3d:9c:b0:3f:2c:8d:48:72:d0:89:d0:08:60:73:ee:02: 88:f0:73:db:6f:19:1b:b7:85:a7:5f:f5:64:cb:af:b7:21:2c: 88:2e:0f:e4:ba:4b:7d:43:95:0d:41:47:b8:b9:31:20:20:ba: 79:c7:61:ef:45:82:f3:84:f2:c7:0d:cc:05:c1:0e:77:23:f5: 4f:f9:29:c9:52:94:e8:a7:79:4c:bc:d7:f3:f1:14:0a:dd:99: 57:f4:9d:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjUwNTMxMDIyOTQ3WhcNMjUwNjA3MDIyOTQ3WjAYMRYwFAYD VQQDEw02ODNhNjk5Yy1iMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuWO2weHibfIrDo2r0ktC6jCOMbcdfCezI93Ei/NxfAXK4+ImVEFJGJE0Yh9 jOR/eJRNEaUjRT2btWrTdNQetqdjbQdkeDVPvo5ciAn+yb4lTCV0X7olDR5XPcsU Scdhyij5Bl0SyFGYsQdrSjWLxfJmqXzqWORREb2UvKY2HJlEr9WD4KtBpX/axh9b fJ8SZovaC8mp91qiY46o75IkU5CdHQJQRCcY2aGioGxTiK13Op55fJaYkTQ9I6ed mNZRzIQnveHTkA27rMYDOj5NAmUEmafGDrhV8WNYZZOzdD/RPpDTGeMW6kYCfBkC 2Mjzkpx3N8IQeYZuxZOJByD8BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5nMIlD IKl4RTllvWTxBYbqD8h9MB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ/+wqTCW6K190UcHynIAr1N+YHrPjmJ+hFrlg+FHpidh4MtzZ7d6G QwAW/IGIUSgEcWh4dVFKe696OjP3yljolfLnA8+mST+9kBKwMvT/DNhCesp14K8O wv80NaLMy0ZrCx3+RxiqI3Y91zJeO3RcAn8wCAiRfUyGk/BzPZQC49EggadtqO3h h6OJCzxEAn+UL1YdgeqoADuTirFIJcLGVpUb2z2csD8sjUhy0InQCGBz7gKI8HPb bxkbt4WnX/Vky6+3ISyILg/kukt9Q5UNQUe4uTEgILp5x2HvRYLzhPLHDcwFwQ53 I/VP+SnJUpTop3lMvNfz8RQK3ZlX9J0A -----END CERTIFICATE-----Generated at Sat May 31 16:33:07 2025 by rpki-client