$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: miwP5sLyypNpHgCx6CAyqqNG8PGo9uOlad44jwLmbaI= Subject key identifier: 12:9E:8C:E7:43:33:4C:D2:FB:6D:B3:4D:96:06:7B:05:82:63:89:12 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: 97 Signing time: Sat 31 May 2025 05:53:38 +0000 Manifest this update: Sat 31 May 2025 05:53:37 +0000 Manifest next update: Sat 07 Jun 2025 05:53:37 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: 1Bb2loL/ggGvSkyvpu4T9FEFSAcAbAMzK1KPxVqbokw=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: May 31 05:53:37 2025 GMT Not After : Jun 7 05:53:37 2025 GMT Subject: CN=683a9962-ef2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:23:8f:23:6c:b8:3b:d2:27:8d:15:f2:41:4f: 99:0a:8e:ae:4b:17:08:2c:96:1d:c6:85:5d:e7:e8: 1e:9f:4b:b4:7a:d2:f6:4e:74:dc:f6:1c:e6:18:97: 1c:5c:08:c3:a9:fb:d0:b2:b0:9a:f1:e6:87:89:05: 5d:51:3f:01:cd:10:b6:df:d1:8e:f6:71:b2:b0:f6: 81:52:96:52:b3:b5:53:9c:9a:86:7b:56:c9:93:74: cf:18:b2:30:30:f7:09:1a:7c:9a:17:5a:f6:1e:f2: 0a:a2:8f:6e:48:9a:09:d2:60:7d:c2:e5:2e:4a:00: eb:01:30:41:70:54:71:75:d9:96:59:71:17:5f:35: 76:7c:ee:8d:5d:2c:09:27:e6:d5:ef:a9:3a:77:37: a6:0f:ea:b2:78:81:87:3b:ca:03:e4:e5:a2:65:1b: 9d:7e:52:48:18:71:85:e7:f5:93:97:8a:3f:a4:f3: 3d:33:c9:1b:3e:fd:8f:f8:31:a4:80:20:9f:41:8e: 72:20:8c:e7:a9:b9:ec:2e:ba:ff:65:72:48:42:fe: de:da:87:dc:98:d5:91:1d:10:33:0c:72:2e:d8:32: a0:be:5a:40:5b:e9:f7:50:88:1f:0d:8c:9e:cb:06: 4a:a6:3d:1f:c1:d8:69:cd:b8:60:de:20:4d:88:37: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:8C:E7:43:33:4C:D2:FB:6D:B3:4D:96:06:7B:05:82:63:89:12 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:95:3b:bb:bb:8a:2b:2e:2c:3d:01:02:d8:80:e1:c5:68:9c: eb:c1:05:92:e6:c5:c0:a3:d5:98:0f:ed:94:57:7c:87:c8:bc: e5:b7:81:b2:9c:ed:9e:b0:8b:04:12:ff:d3:d7:13:dd:78:e7: bd:5d:cd:e9:49:82:38:08:05:f2:da:7b:e3:fc:a3:90:3e:7a: d4:96:9d:f5:19:12:8b:41:3c:1b:1c:74:78:12:f0:14:7d:45: e8:78:4e:97:b5:36:f7:3d:bb:78:83:fc:18:b8:dc:23:e3:f9: 7c:62:bd:bb:d7:2d:11:24:ad:68:0f:c7:ea:2f:9e:9a:a8:46: 5d:df:55:d8:69:c2:4c:3a:ab:ff:30:84:aa:dc:30:3a:0b:5c: 55:d6:bb:99:78:e6:5c:30:cb:4f:e0:5c:53:0c:c6:4d:36:ae: b7:2d:4d:c4:7a:d3:6a:eb:74:b2:10:a8:9c:c7:c2:9b:1f:79: da:7b:85:0f:05:1f:1e:1b:68:be:20:5f:57:a5:5d:bd:0f:60: 41:ce:bd:25:a8:ef:46:a1:55:d1:b0:95:9b:ab:8d:f9:ce:04: c7:97:ff:d0:11:21:2f:32:7b:10:ce:32:f7:b7:79:65:20:61: fd:28:26:71:d6:a1:02:e7:68:26:65:c9:94:61:f8:ef:3a:8d: 55:39:d8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjUwNTMxMDU1MzM3WhcNMjUwNjA3MDU1MzM3WjAYMRYwFAYD VQQDEw02ODNhOTk2Mi1lZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yOPI2y4O9InjRXyQU+ZCo6uSxcILJYdxoVd5+gen0u0etL2TnTc9hzmGJcc XAjDqfvQsrCa8eaHiQVdUT8BzRC239GO9nGysPaBUpZSs7VTnJqGe1bJk3TPGLIw MPcJGnyaF1r2HvIKoo9uSJoJ0mB9wuUuSgDrATBBcFRxddmWWXEXXzV2fO6NXSwJ J+bV76k6dzemD+qyeIGHO8oD5OWiZRudflJIGHGF5/WTl4o/pPM9M8kbPv2P+DGk gCCfQY5yIIznqbnsLrr/ZXJIQv7e2ofcmNWRHRAzDHIu2DKgvlpAW+n3UIgfDYye ywZKpj0fwdhpzbhg3iBNiDdA2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKejOdD M0zS+22zTZYGewWCY4kSMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRlTu7u4orLiw9AQLYgOHFaJzrwQWS5sXAo9WYD+2UV3yHyLzlt4Gy nO2esIsEEv/T1xPdeOe9Xc3pSYI4CAXy2nvj/KOQPnrUlp31GRKLQTwbHHR4EvAU fUXoeE6XtTb3Pbt4g/wYuNwj4/l8Yr271y0RJK1oD8fqL56aqEZd31XYacJMOqv/ MISq3DA6C1xV1ruZeOZcMMtP4FxTDMZNNq63LU3EetNq63SyEKicx8KbH3nae4UP BR8eG2i+IF9XpV29D2BBzr0lqO9GoVXRsJWbq435zgTHl//QESEvMnsQzjL3t3ll IGH9KCZx1qEC52gmZcmUYfjvOo1VOdgb -----END CERTIFICATE-----Generated at Sat May 31 15:19:47 2025 by rpki-client