$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: VOzuzl9hiMVUT9t/p9yR9CkC5jFEmzzNRLfXSm0ghY0= Subject key identifier: 43:0D:09:B9:99:4E:81:24:B6:65:FA:D8:C3:76:03:7F:BF:E8:30:EF Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 4D Signing time: Sat 31 May 2025 06:59:44 +0000 Manifest this update: Sat 31 May 2025 06:59:43 +0000 Manifest next update: Sat 07 Jun 2025 06:59:43 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: HH+ZvAZ0disizUHFgSEqaLLrh7kePeQzF1LhhBsjUnk=) 2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: May 31 06:59:43 2025 GMT Not After : Jun 7 06:59:43 2025 GMT Subject: CN=683aa8df-d8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:12:78:31:9e:26:77:c5:bf:f7:e5:4c:bb: bb:cc:46:e7:5a:00:d5:2a:85:6a:c5:0a:a4:01:c0: fd:c1:d6:1a:dd:c5:67:6b:b9:04:fd:39:c3:75:64: 69:60:7d:9c:88:5e:3f:4e:a1:84:ea:97:50:5f:3b: 60:be:6f:6d:65:54:28:b4:11:c4:e4:6b:14:3c:ce: 0b:43:ed:5a:c7:c4:54:b5:9f:a0:66:e6:a6:0e:57: 31:0a:4a:c2:4b:29:5e:2a:5d:71:90:91:a1:d6:9e: fe:94:d3:b8:01:aa:ec:55:c1:d0:b2:c5:33:fb:77: 4e:17:04:71:cc:bb:ce:19:b1:9f:6f:7f:98:39:35: f2:8c:cd:fe:2e:02:b1:41:5c:38:2b:38:6f:52:fe: 16:4a:aa:24:ca:b6:65:09:a5:fe:37:5b:81:1c:95: 16:5d:8c:e0:1f:dc:c4:79:6b:bc:b1:98:7b:d6:58: 19:59:4e:2a:04:93:44:25:54:cd:76:40:49:74:90: b6:28:b4:e1:7c:d8:85:fa:4b:97:1c:d9:00:5c:32: 2a:2f:7a:46:37:1a:2b:34:ab:5e:06:3c:09:00:49: 56:35:91:c4:a3:00:d6:dc:e3:90:5d:57:2f:32:30: 95:26:9b:11:e6:3d:69:48:f7:ec:bc:c8:f9:d2:39: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0D:09:B9:99:4E:81:24:B6:65:FA:D8:C3:76:03:7F:BF:E8:30:EF X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6b:d1:1d:5f:b9:bc:1c:98:11:fa:1a:4a:b7:31:25:ba:de: cd:6c:dc:d8:fa:df:a7:54:c0:11:b0:c7:e2:f7:be:1f:76:91: 91:31:a0:c4:bc:93:9a:b0:92:bd:e8:a2:3e:7a:58:b3:3a:39: e8:e9:7a:93:c2:44:79:e7:49:02:71:15:0c:c4:da:06:53:66: 62:d2:11:88:05:32:f9:5a:fa:35:01:fd:d4:d8:3f:ba:11:95: f1:21:d3:15:3c:f8:f3:6d:6b:fc:86:b4:82:fd:17:67:fb:b2: 01:da:e6:55:11:b0:1d:6d:01:6f:6f:13:b3:70:aa:42:0e:0a: bf:72:90:43:cd:f6:49:dd:d5:25:74:86:29:c3:9d:cc:d2:f9: c8:34:2d:5a:4e:3f:df:6d:c6:df:4d:40:35:12:18:06:36:70: cf:63:43:24:40:ae:d8:32:1c:fb:5f:42:ce:08:6e:54:1a:58: b2:15:ca:2b:9b:7b:6c:96:93:7c:55:69:88:e9:43:b6:fc:ae: 41:68:bf:5b:ea:24:80:f8:cc:b4:1e:15:00:44:85:f0:55:02: eb:4d:86:b3:f9:fb:2b:8f:fe:f3:46:d4:fa:96:3f:6d:d9:1f: 5b:ec:87:ad:49:8d:ec:02:92:6a:be:dd:16:d2:3d:28:82:a6: 28:73:f3:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUY0MzExMC8GA1UEBRMoNjRDRjUzMkM4RTIwQjE5NkQyNUJDN0NDN0U1OTMyNEY5 MzgxMzI3NTAeFw0yNTA1MzEwNjU5NDNaFw0yNTA2MDcwNjU5NDNaMBgxFjAUBgNV BAMTDTY4M2FhOGRmLWQ4YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFjxJ4MZ4md8W/9+VMu7vMRudaANUqhWrFCqQBwP3B1hrdxWdruQT9OcN1ZGlg fZyIXj9OoYTql1BfO2C+b21lVCi0EcTkaxQ8zgtD7VrHxFS1n6Bm5qYOVzEKSsJL KV4qXXGQkaHWnv6U07gBquxVwdCyxTP7d04XBHHMu84ZsZ9vf5g5NfKMzf4uArFB XDgrOG9S/hZKqiTKtmUJpf43W4EclRZdjOAf3MR5a7yxmHvWWBlZTioEk0QlVM12 QEl0kLYotOF82IX6S5cc2QBcMiovekY3Gis0q14GPAkASVY1kcSjANbc45BdVy8y MJUmmxHmPWlI9+y8yPnSOeZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQw0JuZlO gSS2ZfrYw3YDf7/oMO8wHwYDVR0jBBgwFoAUZM9TLI4gsZbSW8fMflkyT5OBMnUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RjQzLzU5OUZFQjQ0Q0JG NjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1u VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk05VExJNGdzWmJTVzhmTWZsa3lUNU9CTW5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RjQzLzU5OUZFQjQ0Q0JGNjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1pi U1c4Zk1mbGt5VDVPQk1uVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItr0R1fubwcmBH6Gkq3MSW63s1s3Nj636dUwBGwx+L3vh92kZExoMS8 k5qwkr3ooj56WLM6OejpepPCRHnnSQJxFQzE2gZTZmLSEYgFMvla+jUB/dTYP7oR lfEh0xU8+PNta/yGtIL9F2f7sgHa5lURsB1tAW9vE7NwqkIOCr9ykEPN9knd1SV0 hinDnczS+cg0LVpOP99txt9NQDUSGAY2cM9jQyRArtgyHPtfQs4IblQaWLIVyiub e2yWk3xVaYjpQ7b8rkFov1vqJID4zLQeFQBEhfBVAutNhrP5+yuP/vNG1PqWP23Z H1vsh61JjewCkmq+3RbSPSiCpihz83s= -----END CERTIFICATE-----Generated at Sat May 31 17:06:26 2025 by rpki-client