$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: OwbcsV90bwNducshM6bY+G/+r9+p3E1NvG5N4b2Xq/c= Subject key identifier: 13:45:E1:C3:8B:99:ED:04:6C:E0:1D:30:09:5A:CB:26:14:0F:43:E6 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 3D Signing time: Tue 03 Jun 2025 07:29:15 +0000 Manifest this update: Tue 03 Jun 2025 07:29:15 +0000 Manifest next update: Tue 10 Jun 2025 07:29:15 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: FCS48RPgBTm642VDFnTCd98kioYwAFwYtZ+K3Nd+HdQ=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: KNC2/s+vZ/9r775F1mGNGMou3oGOdH7k+vpChxT9cqQ=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: zMJUwcQ85fc9WyQBZ4Df3FrM+qiFXLoVLbfqvgsrYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Jun 3 07:29:15 2025 GMT Not After : Jun 10 07:29:15 2025 GMT Subject: CN=683ea44b-5a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:2b:a7:d9:1b:ee:d0:21:14:5e:c7:29:23: f5:66:fb:c2:eb:ec:65:a1:60:75:ba:e0:11:55:88: 30:a3:12:59:9d:76:22:26:19:73:94:c2:6d:14:46: 9b:bb:ae:9d:51:00:25:c4:6b:0f:cf:6d:1b:a8:bb: f3:32:df:e0:1e:0b:5d:85:b5:1d:d4:11:13:57:08: f0:04:f3:85:a2:22:e1:f4:db:67:5d:b6:49:c7:0d: 65:56:79:c2:d3:26:e1:8c:82:d6:1c:3d:4b:1d:d0: 0e:a5:b1:d4:38:ec:b1:a5:dc:26:08:51:02:3c:72: 21:b4:cb:f2:1f:ac:0d:2e:cf:57:a7:b5:fd:b1:89: 15:da:03:86:68:29:ab:cd:be:c1:95:4e:c2:f4:33: 28:68:59:13:90:01:b6:a2:38:07:f5:5f:2a:25:aa: b7:5c:8b:87:db:04:58:ca:a2:c7:5e:a1:ea:4e:ae: 83:30:e0:b0:ed:f0:7e:73:0e:91:b8:eb:4a:7a:71: 32:b7:4f:58:fb:f3:24:7a:b2:9b:10:5b:c4:d8:ee: e9:38:37:a2:46:6f:4c:3f:67:82:97:90:c0:49:67: a4:c3:45:bd:fb:a7:44:e8:0f:24:59:da:7a:6d:34: 83:7b:a1:1f:ff:bc:13:9d:61:cc:f3:09:04:4b:65: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:45:E1:C3:8B:99:ED:04:6C:E0:1D:30:09:5A:CB:26:14:0F:43:E6 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8a:c2:3b:6f:d6:c1:56:eb:7e:e0:51:bd:2a:cd:58:21:10: bd:8d:a5:a3:0b:1d:38:64:40:96:6f:7b:05:21:d4:44:f4:ee: 3b:b1:4b:c0:ec:a2:69:73:bf:5c:4f:43:11:1d:c1:9e:68:b1: 4b:5d:d7:c6:36:b0:df:f7:17:a9:33:c5:ec:d0:9a:2e:88:b7: 09:22:df:ec:7a:75:72:be:b8:fa:0c:f3:7a:86:e7:06:b7:b2: 72:a1:d8:97:41:7d:a6:86:c6:b5:3f:3f:c9:17:f9:7e:a9:9d: 3b:33:16:a8:b7:78:93:6e:db:e6:57:f2:60:c6:74:fa:a6:73: c9:c6:19:f8:23:9c:fd:ce:46:69:9d:50:9a:46:b5:3c:eb:46: 00:21:8e:7a:89:35:73:61:e5:8f:ae:7d:89:57:4f:2f:44:9a: 88:83:ee:df:0b:79:7b:27:7e:55:5e:bc:0b:b1:51:84:be:94: b0:5a:3e:3a:a8:1c:c5:b0:54:b4:86:88:d0:8a:16:60:e9:45: 01:97:98:6b:ea:67:c2:12:51:38:e5:fd:0a:26:46:a3:8c:14: c2:70:6d:5c:88:79:c1:79:d1:cd:1d:75:23:2c:5e:85:62:f9: e3:0a:d6:93:67:ba:65:a3:91:d2:ba:3f:4c:8d:0f:b3:c6:25: 7f:d5:bd:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA2MDMwNzI5MTVaFw0yNTA2MTAwNzI5MTVaMBgxFjAUBgNV BAMTDTY4M2VhNDRiLTVhMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCrSun2Rvu0CEUXscpI/Vm+8Lr7GWhYHW64BFViDCjElmddiImGXOUwm0URpu7 rp1RACXEaw/PbRuou/My3+AeC12FtR3UERNXCPAE84WiIuH022ddtknHDWVWecLT JuGMgtYcPUsd0A6lsdQ47LGl3CYIUQI8ciG0y/IfrA0uz1entf2xiRXaA4ZoKavN vsGVTsL0MyhoWROQAbaiOAf1Xyolqrdci4fbBFjKosdeoepOroMw4LDt8H5zDpG4 60p6cTK3T1j78yR6spsQW8TY7uk4N6JGb0w/Z4KXkMBJZ6TDRb37p0ToDyRZ2npt NIN7oR//vBOdYczzCQRLZcvVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE0Xhw4uZ 7QRs4B0wCVrLJhQPQ+YwHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAuKwjtv1sFW637gUb0qzVghEL2NpaMLHThkQJZvewUh1ET07juxS8Ds omlzv1xPQxEdwZ5osUtd18Y2sN/3F6kzxezQmi6Itwki3+x6dXK+uPoM83qG5wa3 snKh2JdBfaaGxrU/P8kX+X6pnTszFqi3eJNu2+ZX8mDGdPqmc8nGGfgjnP3ORmmd UJpGtTzrRgAhjnqJNXNh5Y+ufYlXTy9EmoiD7t8LeXsnflVevAuxUYS+lLBaPjqo HMWwVLSGiNCKFmDpRQGXmGvqZ8ISUTjl/QomRqOMFMJwbVyIecF50c0ddSMsXoVi +eMK1pNnumWjkdK6P0yND7PGJX/VvVs= -----END CERTIFICATE-----Generated at Wed Jun 4 00:25:23 2025 by rpki-client