$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft File: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json) Hash identifier: QjAsATiIzR4Fy0+zKeaNIuAaLZEPmdUVaQzT1lKGyzU= Subject key identifier: A2:89:4F:4F:72:6A:98:EF:BD:BE:1C:B0:9F:6B:C6:4A:F5:CC:AE:89 Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD Certificate issuer: /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft Manifest number: 16 Signing time: Sat 31 May 2025 07:34:13 +0000 Manifest this update: Sat 31 May 2025 07:34:13 +0000 Manifest next update: Sat 07 Jun 2025 07:34:13 +0000 Files and hashes: 1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: HOf1Xpyt81NfCpkeReBiQBCzALVV/aS+8DBmkTDE5Cg=) 2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: ziKAkTq8TDHqlAMGRhZZxal4YT5BAAI3FkEOnc8uPao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Validity Not Before: May 31 07:34:13 2025 GMT Not After : Jun 7 07:34:13 2025 GMT Subject: CN=683ab0f5-9006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:fb:50:ec:a0:80:0e:48:f1:7b:77:8f:5f: 1d:63:25:ff:4b:6e:fc:a6:d7:e9:ef:58:29:09:f6: 4b:4a:9f:9d:b2:37:4a:11:28:37:26:cc:79:c8:a5: 7f:69:14:d1:51:fa:5a:ff:c0:bf:c0:e7:bc:fa:97: d3:7f:43:dc:c0:15:a9:8b:60:29:ae:6e:03:01:17: f9:ee:37:e9:37:3a:5a:c8:3e:bd:81:9d:53:18:0f: 0e:57:d7:ed:dc:61:47:6b:c7:8a:65:6a:d9:0e:21: 89:de:6a:35:69:b3:a4:f7:b5:18:fc:6e:de:b2:fe: 2c:78:36:ab:38:b8:79:cf:55:56:fc:59:ec:c4:57: c2:fe:68:a0:0f:d3:e8:99:31:61:29:07:eb:34:0c: d3:84:2d:4e:e4:14:80:9b:d8:db:5d:d3:42:01:08: df:1a:79:54:df:05:14:23:b7:53:24:d0:f1:19:2b: d1:2d:61:04:60:58:ca:49:1a:33:82:cf:a3:74:79: 3e:08:c2:b9:72:cc:48:fe:ae:a7:af:97:18:71:b2: f6:e4:10:c4:05:90:93:21:6b:57:5f:76:95:1f:57: b8:83:b9:cc:08:3a:36:1f:c1:d2:6f:1a:9b:c4:d2: fe:d7:ad:16:55:b9:d3:7c:f3:0e:8e:90:08:7f:e7: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:89:4F:4F:72:6A:98:EF:BD:BE:1C:B0:9F:6B:C6:4A:F5:CC:AE:89 X509v3 Authority Key Identifier: keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:29:51:ba:df:2d:c4:b9:0b:24:64:92:87:01:a7:5d:77:e7: 4c:a4:ca:4e:09:f0:89:c4:62:3b:ea:f1:e2:62:ac:f5:ce:42: 3d:cb:0c:e7:c9:ef:df:98:32:72:5a:d0:98:8c:af:73:3c:92: 86:17:ad:43:fd:7d:d2:36:8a:ef:0a:3f:f0:3e:a5:5e:54:f5: 07:0c:03:7d:6f:11:3d:ed:30:4f:97:ec:58:49:98:a9:bf:ae: f1:ae:bc:b4:c8:76:a2:8d:71:19:24:16:81:7a:9e:36:d5:80: cf:cc:07:b9:57:e8:a9:32:4a:fa:f1:22:86:d4:6f:ea:71:13: fa:fd:f0:89:36:d4:80:2e:f6:84:af:33:c5:b0:88:b0:d6:2d: cd:ef:91:36:cf:d8:ba:4c:be:1c:13:f5:ba:21:d6:71:a3:b6: a1:ad:dd:54:11:fc:38:97:3a:7f:48:9a:fb:8e:0c:86:80:0f: 7e:87:f4:c5:a0:9a:7a:74:cb:b3:7b:d1:b0:ab:e3:cc:7d:ea: 2d:ae:bb:4c:93:fa:0a:1a:11:b6:d5:3f:64:08:7d:e5:d2:eb: f1:92:b4:fc:73:22:75:22:c0:eb:6f:41:79:70:37:37:7e:84: 5c:04:6c:b9:ad:df:0d:37:30:60:25:40:96:ce:8c:17:f3:c4: 8d:96:3d:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REE5RTExMC8GA1UEBRMoNjZDMzA2RDIzRjhCRkVBQUE0NENDQ0M1NTczOTY5NTFG OTg2QzZCRDAeFw0yNTA1MzEwNzM0MTNaFw0yNTA2MDcwNzM0MTNaMBgxFjAUBgNV BAMTDTY4M2FiMGY1LTkwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNiPtQ7KCADkjxe3ePXx1jJf9Lbvym1+nvWCkJ9ktKn52yN0oRKDcmzHnIpX9p FNFR+lr/wL/A57z6l9N/Q9zAFamLYCmubgMBF/nuN+k3OlrIPr2BnVMYDw5X1+3c YUdrx4platkOIYneajVps6T3tRj8bt6y/ix4Nqs4uHnPVVb8WezEV8L+aKAP0+iZ MWEpB+s0DNOELU7kFICb2Ntd00IBCN8aeVTfBRQjt1Mk0PEZK9EtYQRgWMpJGjOC z6N0eT4IwrlyzEj+rqevlxhxsvbkEMQFkJMha1dfdpUfV7iDucwIOjYfwdJvGpvE 0v7XrRZVudN88w6OkAh/5wUHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoolPT3Jq mO+9vhywn2vGSvXMrokwHwYDVR0jBBgwFoAUZsMG0j+L/qqkTMzFVzlpUfmGxr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQTlFL0QxQkU4MDlDMUYz MjExRjBCRDIyQkE2OEM0RjlBRTAyL1pzTUcwai1MX3Fxa1RNekZWemxwVWZtR3hy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNNRzBqLUxfcXFrVE16RlZ6bHBVZm1HeHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QTlFL0QxQkU4MDlDMUYzMjExRjBCRDIyQkE2OEM0RjlBRTAyL1pzTUcwai1MX3Fx a1RNekZWemxwVWZtR3hyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0pUbrfLcS5CyRkkocBp11350ykyk4J8InEYjvq8eJirPXOQj3LDOfJ 79+YMnJa0JiMr3M8koYXrUP9fdI2iu8KP/A+pV5U9QcMA31vET3tME+X7FhJmKm/ rvGuvLTIdqKNcRkkFoF6njbVgM/MB7lX6KkySvrxIobUb+pxE/r98Ik21IAu9oSv M8WwiLDWLc3vkTbP2LpMvhwT9boh1nGjtqGt3VQR/DiXOn9ImvuODIaAD36H9MWg mnp0y7N70bCr48x96i2uu0yT+goaEbbVP2QIfeXS6/GStPxzInUiwOtvQXlwNzd+ hFwEbLmt3w03MGAlQJbOjBfzxI2WPf8= -----END CERTIFICATE-----Generated at Sat May 31 17:50:37 2025 by rpki-client