$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: 1QN+HJn4y+Ann1quDq1H9EZhxgQzc3Tnvyy11KSl5+Y= Subject key identifier: F0:3D:39:56:CA:A4:7B:56:AF:E6:C7:7C:6C:1B:9C:D4:98:F4:C7:4E Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0488 Signing time: Sat 31 May 2025 00:15:36 +0000 Manifest this update: Sat 31 May 2025 00:15:36 +0000 Manifest next update: Sat 07 Jun 2025 00:15:36 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: slV4PMy+KtiPuSE08WzS4T/SRxDS3q9WWokDUZXrV5Q=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: L7q5MhSYBL7XAFYcbCU7483l92C9DWVyV5PtuFnvCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: May 31 00:15:36 2025 GMT Not After : Jun 7 00:15:36 2025 GMT Subject: CN=683a4a28-8c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:50:70:46:d2:d0:fa:08:13:4c:94:37:55: f7:45:1e:01:f5:a0:37:c4:56:b3:d9:53:d5:e1:24: ce:58:43:ea:0a:41:94:a3:7f:95:47:24:b6:02:75: 35:c0:2f:a2:ef:fa:17:29:b0:9a:3b:2e:5f:45:7a: 93:7f:cf:1f:0d:e9:d2:1d:50:5a:cb:75:8b:0f:a8: cc:ed:1c:3f:2e:4e:6a:4f:c2:67:58:24:5d:da:3f: ec:76:43:44:99:ff:24:55:63:a3:76:ad:01:f7:e9: 20:62:0e:9f:96:71:f0:e4:06:3b:8e:7d:69:12:02: db:72:18:15:ae:de:37:9e:92:72:04:0d:58:f9:d7: b2:08:87:ee:6e:18:ef:63:74:4e:2b:b0:85:42:15: 96:25:a8:f5:fd:60:86:80:57:95:65:2e:f1:f0:b1: 1c:8d:e1:ca:f9:53:b8:38:b2:f3:04:df:bb:25:1b: 5e:72:24:e3:fc:5c:b8:2e:a0:79:3f:fa:5a:d7:a3: 09:31:cf:89:a6:8f:be:46:d8:73:c0:4d:fd:26:d2: a7:66:81:0c:70:e8:97:e7:28:06:71:69:a6:77:ed: 89:83:b5:e1:27:ee:b6:ca:8c:41:b4:0c:42:09:44: 53:fd:8c:26:0f:2f:36:a9:bd:a8:f9:48:b3:93:5f: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3D:39:56:CA:A4:7B:56:AF:E6:C7:7C:6C:1B:9C:D4:98:F4:C7:4E X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:61:ad:7b:5a:c2:25:b7:a5:c1:05:47:75:d4:e5:10:34:04: e4:42:2a:b3:1d:88:35:69:29:32:a4:df:c1:fa:7f:31:d1:72: 06:93:0a:6d:60:9a:eb:87:48:29:9e:1e:14:af:eb:c6:8e:1f: bd:a7:cf:7a:34:9a:f1:d0:30:b2:13:77:56:5f:06:5c:c7:f9: a9:13:18:f2:b0:f5:7b:2b:68:f4:b8:f9:31:83:00:b8:8a:20: 1e:cb:aa:fb:58:4b:6e:50:c6:64:77:12:36:27:e9:17:69:c7: 58:f7:f0:53:9c:4c:5f:82:ce:97:36:95:7c:73:24:61:d9:e1: db:7e:4f:b1:21:9d:06:e5:68:84:d7:75:4d:f6:2b:58:72:5b: 40:c4:2e:be:e6:6c:69:f8:07:00:d6:8c:cc:b3:53:d7:13:9a: b8:5d:60:8c:2e:72:65:45:b5:c8:7b:5a:cf:21:44:91:89:db: d7:d3:ca:ba:9f:d5:e0:52:2d:6a:9d:7f:51:50:53:2b:76:bf: a7:9b:43:82:c7:04:82:fe:9b:9c:a7:d9:d5:82:52:9b:b0:bd: b5:89:cc:a8:f5:57:b1:ee:2e:e2:55:69:ef:ab:53:d1:93:5b: 4f:7c:90:5b:4e:00:92:ea:41:19:f4:c1:88:27:5f:10:51:e0: b4:06:38:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjUwNTMxMDAxNTM2WhcNMjUwNjA3MDAxNTM2WjAYMRYwFAYD VQQDEw02ODNhNGEyOC04YzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvtQcEbS0PoIE0yUN1X3RR4B9aA3xFaz2VPV4STOWEPqCkGUo3+VRyS2AnU1 wC+i7/oXKbCaOy5fRXqTf88fDenSHVBay3WLD6jM7Rw/Lk5qT8JnWCRd2j/sdkNE mf8kVWOjdq0B9+kgYg6flnHw5AY7jn1pEgLbchgVrt43npJyBA1Y+deyCIfubhjv Y3ROK7CFQhWWJaj1/WCGgFeVZS7x8LEcjeHK+VO4OLLzBN+7JRteciTj/Fy4LqB5 P/pa16MJMc+Jpo++RthzwE39JtKnZoEMcOiX5ygGcWmmd+2Jg7XhJ+62yoxBtAxC CURT/YwmDy82qb2o+Uizk1+xvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA9OVbK pHtWr+bHfGwbnNSY9MdOMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYa17WsIlt6XBBUd11OUQNATkQiqzHYg1aSkypN/B+n8x0XIGkwpt YJrrh0gpnh4Ur+vGjh+9p896NJrx0DCyE3dWXwZcx/mpExjysPV7K2j0uPkxgwC4 iiAey6r7WEtuUMZkdxI2J+kXacdY9/BTnExfgs6XNpV8cyRh2eHbfk+xIZ0G5WiE 13VN9itYcltAxC6+5mxp+AcA1ozMs1PXE5q4XWCMLnJlRbXIe1rPIUSRidvX08q6 n9XgUi1qnX9RUFMrdr+nm0OCxwSC/pucp9nVglKbsL21icyo9Vex7i7iVWnvq1PR k1tPfJBbTgCS6kEZ9MGIJ18QUeC0Bjjn -----END CERTIFICATE-----Generated at Sat May 31 17:00:24 2025 by rpki-client