$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: bjd3HQbn5h6k/DhhbNF+zR0iZDUHMUUh4QkTi0/mpec= Subject key identifier: E8:09:FB:BB:A9:64:12:7E:52:E6:8D:08:96:DC:EC:61:27:E5:39:5D Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: 8E Signing time: Sat 31 May 2025 06:09:13 +0000 Manifest this update: Sat 31 May 2025 06:09:13 +0000 Manifest next update: Sat 07 Jun 2025 06:09:13 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: 6Pm6xGscJrHLYbjRVZrnzEyqcLznrEBJ3dcRGmglJAQ=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: vVZpZ/GG/1Ru9DW9P38xQ7eaFTzhr71A4G/otG0nIJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: May 31 06:09:13 2025 GMT Not After : Jun 7 06:09:13 2025 GMT Subject: CN=683a9d09-854d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:71:fb:f5:cb:79:11:72:b0:33:86:13:48: ec:5d:de:fb:5b:58:3e:36:18:64:da:09:5d:79:3f: 66:9a:79:26:bb:94:a7:21:5c:70:44:0d:1a:28:90: ce:91:d0:fb:47:b0:9d:c2:be:60:4a:90:51:0c:51: 46:e4:c0:0b:6c:68:97:7d:28:c1:02:1b:ac:8e:68: db:1e:a0:49:08:03:65:1e:e8:39:e5:ec:2e:e6:cc: 65:67:05:43:9b:f2:d9:f2:88:ff:a3:cc:39:e7:ee: c7:90:d0:b4:1a:71:98:b4:0b:20:27:a7:5b:7c:8b: 8d:2b:c1:7d:12:86:37:e1:5b:5c:81:d4:bd:36:0f: ae:e3:c5:30:3f:3b:91:01:b3:44:b6:ae:31:1f:db: 55:4d:5e:d7:a2:e8:d9:64:f4:f3:67:31:93:6e:51: 21:06:11:d4:e2:10:78:c1:cc:8b:ae:98:09:53:c1: a6:52:b6:b4:dd:0a:f4:33:dd:49:7f:c3:96:07:04: 2d:83:1b:34:14:0b:8e:7c:67:57:45:46:ec:ef:bc: db:38:47:c8:d7:58:ce:7a:53:c8:c5:9e:66:04:59: 2d:bb:ff:de:c4:f4:23:f5:ee:c8:8d:6f:93:b4:62: 64:10:e8:7b:c3:1b:be:c0:39:69:18:a0:6f:cb:25: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:09:FB:BB:A9:64:12:7E:52:E6:8D:08:96:DC:EC:61:27:E5:39:5D X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ae:b9:48:ad:81:7e:0f:c9:bf:e4:56:6b:40:2d:8c:81:11: eb:91:b0:fd:b1:3a:ed:03:40:82:6d:7d:78:dd:4b:a5:af:21: 32:bd:c1:95:fc:10:c3:4c:ac:45:66:4a:d4:ec:cf:82:4c:01: 54:23:1c:b6:05:c3:ca:12:c9:e1:c8:cc:ec:df:f3:1c:e6:44: 8c:b3:36:27:e9:c1:82:17:60:3b:94:d1:4f:85:1b:ec:8d:8d: 81:ba:65:22:34:f3:be:78:79:ad:65:55:b0:de:3a:03:80:bd: 64:94:d0:4d:ad:01:21:c3:9b:79:9f:a9:91:44:38:a0:4c:58: 51:b8:8c:76:a5:db:c3:b7:74:b4:cc:ec:74:9c:1f:39:18:46: b4:61:35:6e:82:84:f5:f9:46:e4:4e:c4:f0:10:cc:25:3b:3a: 06:76:65:d0:ad:2f:7c:92:12:91:22:e3:47:b5:6d:42:8a:7a: 81:a2:64:ef:34:32:e9:5f:f0:79:1f:f0:9b:97:28:ea:55:cc: ba:d3:b5:6f:12:7b:db:66:a2:7c:30:05:63:8e:18:86:84:51: 08:dd:b1:36:92:6c:c9:fa:a5:90:31:73:29:52:aa:e2:47:de: d2:35:30:d8:df:21:86:95:b0:d9:e8:47:6b:d1:f7:f4:5d:1e: c8:3c:f2:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUwNTMxMDYwOTEzWhcNMjUwNjA3MDYwOTEzWjAYMRYwFAYD VQQDEw02ODNhOWQwOS04NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsBx+/XLeRFysDOGE0jsXd77W1g+Nhhk2gldeT9mmnkmu5SnIVxwRA0aKJDO kdD7R7Cdwr5gSpBRDFFG5MALbGiXfSjBAhusjmjbHqBJCANlHug55ewu5sxlZwVD m/LZ8oj/o8w55+7HkNC0GnGYtAsgJ6dbfIuNK8F9EoY34VtcgdS9Ng+u48UwPzuR AbNEtq4xH9tVTV7XoujZZPTzZzGTblEhBhHU4hB4wcyLrpgJU8GmUra03Qr0M91J f8OWBwQtgxs0FAuOfGdXRUbs77zbOEfI11jOelPIxZ5mBFktu//exPQj9e7IjW+T tGJkEOh7wxu+wDlpGKBvyyVGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgJ+7up ZBJ+UuaNCJbc7GEn5TldMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPrrlIrYF+D8m/5FZrQC2MgRHrkbD9sTrtA0CCbX143UulryEyvcGV /BDDTKxFZkrU7M+CTAFUIxy2BcPKEsnhyMzs3/Mc5kSMszYn6cGCF2A7lNFPhRvs jY2BumUiNPO+eHmtZVWw3joDgL1klNBNrQEhw5t5n6mRRDigTFhRuIx2pdvDt3S0 zOx0nB85GEa0YTVugoT1+UbkTsTwEMwlOzoGdmXQrS98khKRIuNHtW1CinqBomTv NDLpX/B5H/CblyjqVcy607VvEnvbZqJ8MAVjjhiGhFEI3bE2kmzJ+qWQMXMpUqri R97SNTDY3yGGlbDZ6Edr0ff0XR7IPPKk -----END CERTIFICATE-----Generated at Sat May 31 17:33:01 2025 by rpki-client