$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json) Hash identifier: dd0WnjPixeZqRvtaUZeju9LdJLFdzt3MXuXlDMfxuC0= Subject key identifier: 68:7C:29:2A:19:97:A6:B6:B4:70:47:A1:3B:A7:9F:51:2C:FC:4B:6B Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft Manifest number: 05DD Signing time: Fri 30 May 2025 23:10:30 +0000 Manifest this update: Fri 30 May 2025 23:10:29 +0000 Manifest next update: Fri 06 Jun 2025 23:10:29 +0000 Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: Fxku67AZTC2wXjQ45QswIwEF9MwxYCLvOhjJctyHDDo=) 2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Validity Not Before: May 30 23:10:29 2025 GMT Not After : Jun 6 23:10:29 2025 GMT Subject: CN=683a3ae5-314f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:ce:27:49:37:6e:f2:6d:d8:c8:df:62:f9: 75:a9:10:ee:d6:13:1b:0e:5c:9b:81:54:0b:8d:01: 5b:91:42:6f:60:c3:96:1a:75:01:a1:23:5d:33:08: 81:8c:da:20:a3:63:d6:a5:29:cf:12:82:97:99:b3: 4e:52:42:f1:7b:f0:d9:25:17:af:6a:00:65:95:14: 2c:5e:29:2f:aa:5c:53:ae:b0:dc:15:f2:59:24:aa: 26:82:99:12:57:bf:44:6e:55:f9:bc:2e:61:0b:17: 6c:af:f7:71:68:f7:76:21:a0:82:63:f4:38:f9:8a: 00:48:f8:26:f1:0b:14:22:c3:77:79:bc:34:0b:c9: 09:a3:00:cc:d1:81:6f:ad:fa:cb:a6:0f:e4:1a:53: c1:2c:35:0d:39:24:9c:7a:a9:6e:dd:8a:75:83:47: 2a:f5:b3:6c:0c:28:8f:b9:cc:b9:a5:5c:c6:5f:5c: b5:7f:2d:88:a8:d4:65:23:9b:1d:36:bb:7d:88:a1: b6:8f:31:53:18:f9:80:f4:a4:8b:b9:27:17:e0:5a: 0b:ab:e2:a6:de:a2:c5:c7:12:ff:90:a9:a6:35:91: 79:de:32:f7:73:99:78:ba:f3:42:5a:ed:df:91:d6: 0f:4c:e6:54:2c:0d:4b:5c:a2:05:c4:65:b2:0f:ac: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:29:2A:19:97:A6:B6:B4:70:47:A1:3B:A7:9F:51:2C:FC:4B:6B X509v3 Authority Key Identifier: keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a5:3f:0b:19:8d:c0:db:e6:29:bc:20:8b:6e:e0:ad:2f:40: 61:e7:17:e9:5c:d4:d1:e4:4b:b3:ef:a4:48:1c:6b:39:bd:35: dd:9a:a2:35:ac:19:63:65:c0:bc:b0:2e:cb:b8:59:aa:de:e5: ab:9d:eb:50:82:92:55:da:03:e1:01:30:5d:d6:87:2f:ed:fd: 0f:24:57:e9:b9:59:59:b5:fb:29:f4:e3:bd:1d:1f:0d:a2:4b: 92:ec:b9:06:25:76:20:3a:3d:26:8e:ad:b5:03:65:db:e7:07: 8d:23:33:db:18:e9:13:1c:4e:9a:85:c4:00:ea:9b:57:41:7e: 74:d4:a8:89:d5:f6:b9:a3:33:5e:d2:68:f7:f6:71:d9:46:3e: c1:64:46:ca:46:84:e1:58:a8:bb:2d:76:a3:73:1b:aa:1f:75: 8c:ab:89:bb:fc:73:58:3d:e5:6b:90:fa:88:d8:c1:97:52:7e: df:06:ab:92:aa:60:ab:ef:e7:a4:54:de:f1:c9:aa:89:45:c0: 6c:7a:1e:a1:14:42:0e:03:ac:1e:5e:2c:c4:43:f6:3a:57:ba: 92:a2:f8:02:c7:a3:47:7a:c3:cf:3f:cb:59:58:e4:76:0a:42: f4:f2:01:cb:49:94:2a:48:55:e6:08:fe:88:19:7b:8d:5b:b0: 0f:11:3a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlBRkQ3MjQ4REJF RjBFNjlBODYwHhcNMjUwNTMwMjMxMDI5WhcNMjUwNjA2MjMxMDI5WjAYMRYwFAYD VQQDEw02ODNhM2FlNS0zMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb7OJ0k3bvJt2MjfYvl1qRDu1hMbDlybgVQLjQFbkUJvYMOWGnUBoSNdMwiB jNogo2PWpSnPEoKXmbNOUkLxe/DZJRevagBllRQsXikvqlxTrrDcFfJZJKomgpkS V79EblX5vC5hCxdsr/dxaPd2IaCCY/Q4+YoASPgm8QsUIsN3ebw0C8kJowDM0YFv rfrLpg/kGlPBLDUNOSSceqlu3Yp1g0cq9bNsDCiPucy5pVzGX1y1fy2IqNRlI5sd Nrt9iKG2jzFTGPmA9KSLuScX4FoLq+Km3qLFxxL/kKmmNZF53jL3c5l4uvNCWu3f kdYPTOZULA1LXKIFxGWyD6yS+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh8KSoZ l6a2tHBHoTunn1Es/EtrMB8GA1UdIwQYMBaAFGTOBqFsqJEjVWqpr9ckjb7w5pqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTI5OC82MjIyOUVGMkI2 MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tTTlZhcW12MXlTTnZ2RG1t b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNNEdvV3lva1NOVmFxbXYxeVNOdnZEbW1vWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tT TlZhcW12MXlTTnZ2RG1tb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/pT8LGY3A2+YpvCCLbuCtL0Bh5xfpXNTR5Euz76RIHGs5vTXdmqI1 rBljZcC8sC7LuFmq3uWrnetQgpJV2gPhATBd1ocv7f0PJFfpuVlZtfsp9OO9HR8N okuS7LkGJXYgOj0mjq21A2Xb5weNIzPbGOkTHE6ahcQA6ptXQX501KiJ1fa5ozNe 0mj39nHZRj7BZEbKRoThWKi7LXajcxuqH3WMq4m7/HNYPeVrkPqI2MGXUn7fBquS qmCr7+ekVN7xyaqJRcBseh6hFEIOA6weXizEQ/Y6V7qSovgCx6NHesPPP8tZWOR2 CkL08gHLSZQqSFXmCP6IGXuNW7APETrW -----END CERTIFICATE-----Generated at Sat May 31 17:17:32 2025 by rpki-client