$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: IDeXEh3La47FFqEER2IkIVfKOCCEE4KvJbU1EWxhojs= Subject key identifier: EA:5E:55:87:B4:F5:D4:34:C1:23:4B:84:60:95:ED:58:07:3E:25:27 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0C76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0C71 Signing time: Fri 30 May 2025 18:27:41 +0000 Manifest this update: Fri 30 May 2025 18:27:40 +0000 Manifest next update: Fri 06 Jun 2025 18:27:40 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: T5qW9LisZKPoL2leM/5EdsftiNU7BTQHmjrlQrwQ66c=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: May 30 18:27:40 2025 GMT Not After : Jun 6 18:27:40 2025 GMT Subject: CN=6839f89d-3e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:3b:30:d3:5b:b5:ee:9a:3e:a2:60:b1:95: 65:86:ad:10:ab:91:5f:ad:7f:5c:59:10:d7:15:37: ed:a9:0a:a7:3e:de:43:60:f8:a3:60:12:3d:9e:c2: 5f:9c:db:3b:64:36:c6:a6:96:2e:ab:21:7b:96:28: ae:04:7e:76:ae:0c:ac:05:13:f8:e1:68:98:3d:78: fd:23:88:51:70:44:9f:1f:59:d7:8e:04:e4:ca:f9: a2:dd:de:92:68:b5:dc:f5:db:58:6e:86:11:27:54: 0a:b0:3d:03:19:19:70:95:08:c6:2e:ee:df:84:06: f8:ec:23:0e:fb:50:6d:cb:7a:ad:55:b1:45:7a:46: 28:90:4f:95:bb:89:5e:57:1f:29:72:ab:5e:de:be: a1:9c:80:e5:a2:6f:1e:24:f9:42:1a:cc:1c:04:92: 76:62:96:1d:1c:a5:cd:6f:6e:56:6f:89:7a:f8:7e: 87:3a:2a:a9:c5:79:01:4b:55:35:f7:20:22:59:01: bd:60:9e:ce:40:ca:67:e3:06:7e:3c:30:1f:6a:8f: 89:0e:47:d3:66:95:f3:47:c1:93:45:f2:f8:10:c9: c0:55:0c:c5:96:28:ec:eb:e7:3f:f1:5c:de:a4:5f: 53:ad:65:c1:51:51:e9:d4:e9:1a:26:d7:b6:31:57: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5E:55:87:B4:F5:D4:34:C1:23:4B:84:60:95:ED:58:07:3E:25:27 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:38:29:5e:3f:c1:32:08:e8:89:02:0d:04:cd:30:07:d1:a9: 57:37:ee:82:d7:ab:77:67:6e:77:1c:bf:40:09:8b:39:63:51: a6:f5:da:e2:f4:06:bd:cc:86:9c:50:5c:97:4c:ab:66:37:09: f6:c7:75:35:fa:49:f7:34:a5:a6:9a:25:ac:57:e6:cf:ae:ba: c4:6c:f4:2e:77:f8:6b:ab:68:92:88:17:fb:45:6b:e6:1e:12: b7:d6:dd:22:b9:c3:5d:9d:8d:9a:96:2e:c0:71:09:14:ca:ec: 7b:14:1f:1f:d5:c0:bb:42:d3:6a:04:3d:7f:7e:6b:ac:4c:0e: fe:97:55:86:3c:db:74:cb:2b:1a:f2:d9:28:eb:f2:21:2a:19: ac:c7:9e:f8:19:9e:09:5f:87:5c:51:95:49:82:0e:dc:e8:58: f0:42:6d:e9:d0:c2:2e:4c:de:a8:cc:f7:0d:fd:29:9d:5a:c7: 7f:ac:e5:65:34:ee:d9:12:21:e3:c1:89:1f:39:4e:d5:51:a1: 0f:a6:e0:4d:bb:87:95:b9:59:26:c3:19:1d:4c:d0:ba:b3:56: 3d:91:7f:06:c2:d3:81:dd:0b:b4:6b:0f:22:51:99:85:92:24: f5:27:a3:7c:c6:b2:7c:c5:1c:9e:07:b3:09:d3:aa:b3:e0:e0: 38:85:cb:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwNTMwMTgyNzQwWhcNMjUwNjA2MTgyNzQwWjAYMRYwFAYD VQQDEw02ODM5Zjg5ZC0zZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrE7MNNbte6aPqJgsZVlhq0Qq5FfrX9cWRDXFTftqQqnPt5DYPijYBI9nsJf nNs7ZDbGppYuqyF7liiuBH52rgysBRP44WiYPXj9I4hRcESfH1nXjgTkyvmi3d6S aLXc9dtYboYRJ1QKsD0DGRlwlQjGLu7fhAb47CMO+1Bty3qtVbFFekYokE+Vu4le Vx8pcqte3r6hnIDlom8eJPlCGswcBJJ2YpYdHKXNb25Wb4l6+H6HOiqpxXkBS1U1 9yAiWQG9YJ7OQMpn4wZ+PDAfao+JDkfTZpXzR8GTRfL4EMnAVQzFlijs6+c/8Vze pF9TrWXBUVHp1OkaJte2MVcn4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpeVYe0 9dQ0wSNLhGCV7VgHPiUnMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6OCleP8EyCOiJAg0EzTAH0alXN+6C16t3Z253HL9ACYs5Y1Gm9dri 9Aa9zIacUFyXTKtmNwn2x3U1+kn3NKWmmiWsV+bPrrrEbPQud/hrq2iSiBf7RWvm HhK31t0iucNdnY2ali7AcQkUyux7FB8f1cC7QtNqBD1/fmusTA7+l1WGPNt0yysa 8tko6/IhKhmsx574GZ4JX4dcUZVJgg7c6FjwQm3p0MIuTN6ozPcN/SmdWsd/rOVl NO7ZEiHjwYkfOU7VUaEPpuBNu4eVuVkmwxkdTNC6s1Y9kX8GwtOB3Qu0aw8iUZmF kiT1J6N8xrJ8xRyeB7MJ06qz4OA4hcth -----END CERTIFICATE-----Generated at Sat May 31 16:32:17 2025 by rpki-client