$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: 9p31kCo9qKXudYDricoKLclFzVvxngVnJQRvPNByHvU= Subject key identifier: DC:F3:F0:83:9B:F4:DD:4D:54:0F:F0:5E:DC:02:C8:5B:C3:F0:53:81 Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 0149 Signing time: Sun 01 Jun 2025 04:03:51 +0000 Manifest this update: Sun 01 Jun 2025 04:03:50 +0000 Manifest next update: Sun 08 Jun 2025 04:03:50 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: XaxLTlybRoB0cxVa6pn4ZD2xT7cNeTYIzf8E7a59suc=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: g6wCJDrtHyuCox1Dak/0D/0mdLei/24CwRHwHNh/Oi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Jun 1 04:03:50 2025 GMT Not After : Jun 8 04:03:50 2025 GMT Subject: CN=683bd126-8961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:a5:23:56:cd:96:fc:36:1e:c6:10:60:79: 99:66:98:e6:01:3a:26:5b:1e:e2:c1:51:cb:1b:54: 5d:80:14:64:49:e9:cb:40:d0:b3:56:f3:36:ef:d8: a0:6c:97:46:d8:ce:38:c4:8d:8e:d3:48:8d:3b:24: b0:fa:17:66:6b:ad:39:ae:0d:22:d8:0d:1f:e9:11: ec:74:9b:85:d9:8a:17:3c:6c:1b:05:99:cf:2e:3c: e8:34:20:7a:32:62:ec:de:71:0c:ce:98:0a:c4:a2: ce:61:d4:54:df:02:c2:bd:96:40:25:0d:72:f3:46: 02:1a:9f:85:94:e8:1a:b9:a7:13:0a:dc:9a:b2:f8: e4:49:14:fa:62:05:1d:79:e5:dd:87:91:60:ef:5a: 33:60:c9:c0:02:dc:35:a5:41:b7:4a:00:7a:4b:25: d8:f6:44:b2:7b:6d:5f:d0:22:74:f7:c0:19:d2:6f: c1:58:13:a5:db:4d:1a:dc:f8:52:51:56:ef:d3:3e: cf:96:e1:c3:cc:88:2f:9f:96:c7:f1:1e:85:c8:ac: d1:a1:2a:11:cf:85:d6:fe:bf:38:d4:02:72:81:e5: 05:d5:21:70:9f:62:8a:40:ec:63:9a:9d:82:a5:d9: 59:89:24:07:2d:22:53:b4:e5:e4:00:ff:cd:e1:1c: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F3:F0:83:9B:F4:DD:4D:54:0F:F0:5E:DC:02:C8:5B:C3:F0:53:81 X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:27:c6:5a:0e:c7:15:84:5c:86:51:53:c9:44:4f:17:06:40: dc:93:5d:57:95:e4:22:61:55:0f:31:16:e7:b8:dc:f8:aa:b4: 0b:07:a7:03:a1:09:1c:d2:12:69:98:55:ea:1d:91:87:46:9a: db:c4:66:ee:9c:37:4d:6d:61:7a:40:c8:72:f9:68:e7:53:ae: 01:9e:25:0a:84:d6:30:83:7b:48:50:15:f2:58:c3:ce:53:36: 77:2a:d7:34:7e:45:7f:f2:25:44:10:9b:6a:25:5f:bb:fd:4d: 0e:7f:52:5b:e3:96:e2:36:50:7e:47:23:e6:dd:4d:24:b7:06: 7d:90:51:41:a4:8c:14:be:65:90:54:fa:20:6f:90:56:d5:98: f6:16:7d:01:c3:13:c9:e2:95:6d:ea:b8:75:f2:d5:62:b3:06: 59:4f:55:a3:0f:85:f3:61:d8:e1:ef:1d:c7:c9:6e:36:b7:13: 3a:da:59:f6:10:2a:fc:09:db:c0:e4:b0:be:61:27:3e:2c:54: 89:30:94:ae:f6:d4:e5:a2:9d:86:6f:7a:e8:ea:26:f5:96:86: c9:c2:ff:ab:84:db:d2:e7:03:da:74:93:cb:1b:e3:1b:a4:8c: 20:74:d0:72:99:2d:9d:8b:02:3c:96:28:b0:a5:21:30:86:87: 40:ba:49:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjUwNjAxMDQwMzUwWhcNMjUwNjA4MDQwMzUwWjAYMRYwFAYD VQQDEw02ODNiZDEyNi04OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvWlI1bNlvw2HsYQYHmZZpjmATomWx7iwVHLG1RdgBRkSenLQNCzVvM279ig bJdG2M44xI2O00iNOySw+hdma605rg0i2A0f6RHsdJuF2YoXPGwbBZnPLjzoNCB6 MmLs3nEMzpgKxKLOYdRU3wLCvZZAJQ1y80YCGp+FlOgauacTCtyasvjkSRT6YgUd eeXdh5Fg71ozYMnAAtw1pUG3SgB6SyXY9kSye21f0CJ098AZ0m/BWBOl200a3PhS UVbv0z7PluHDzIgvn5bH8R6FyKzRoSoRz4XW/r841AJygeUF1SFwn2KKQOxjmp2C pdlZiSQHLSJTtOXkAP/N4RwneQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzz8IOb 9N1NVA/wXtwCyFvD8FOBMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8J8ZaDscVhFyGUVPJRE8XBkDck11XleQiYVUPMRbnuNz4qrQLB6cD oQkc0hJpmFXqHZGHRprbxGbunDdNbWF6QMhy+WjnU64BniUKhNYwg3tIUBXyWMPO UzZ3Ktc0fkV/8iVEEJtqJV+7/U0Of1Jb45biNlB+RyPm3U0ktwZ9kFFBpIwUvmWQ VPogb5BW1Zj2Fn0BwxPJ4pVt6rh18tViswZZT1WjD4XzYdjh7x3HyW42txM62ln2 ECr8CdvA5LC+YSc+LFSJMJSu9tTlop2Gb3ro6ib1lobJwv+rhNvS5wPadJPLG+Mb pIwgdNBymS2diwI8liiwpSEwhodAukkY -----END CERTIFICATE-----Generated at Mon Jun 2 07:10:44 2025 by rpki-client