$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: 1pec5ueW7OuRScILE03iUqh266BCq7gPVvSfDCM6g+Q= Subject key identifier: 2C:79:22:14:5C:DB:FE:8E:16:67:A5:A1:BB:BE:FE:26:42:97:82:97 Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: A2 Signing time: Sat 31 May 2025 05:50:34 +0000 Manifest this update: Sat 31 May 2025 05:50:33 +0000 Manifest next update: Sat 07 Jun 2025 05:50:33 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: CKxRq/hwocr3yhQ2ieyJlHkiWSu9tjNv68jNvphaBvk=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: hLvwEFk98bWRQGRyM9lagexFlMamyjjm31+1YE8+aHE=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: qhTLRhnOO7ik7RZ20f6PHZaEkopFMfPgBZc1HXBQUng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354, serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Validity Not Before: May 31 05:50:33 2025 GMT Not After : Jun 7 05:50:33 2025 GMT Subject: CN=683a98aa-e16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:30:67:07:5e:f4:48:65:55:54:e8:8f:7b: f2:e8:41:c5:3d:91:ba:e6:1d:6e:84:cd:e0:ac:03: c7:98:19:c7:16:17:96:3e:70:08:ba:47:6d:c6:2b: d3:7d:8a:0e:4d:b9:1d:cd:a6:df:f3:4d:f1:85:34: c9:d9:82:a2:e6:32:b8:ad:fe:3b:8a:6c:29:03:ef: 8b:7d:b5:b2:05:9d:b6:7d:f9:af:27:a1:72:7c:62: 60:da:a7:78:b9:05:4b:71:ca:44:e0:c3:0d:1a:8e: bc:57:1f:ea:d7:21:d1:65:98:e2:10:1b:35:44:fd: 5e:15:93:6f:62:ed:6d:9f:82:25:3e:0a:bf:4b:f7: a2:ae:83:c4:12:d8:a2:22:f9:93:05:7a:8c:bf:f4: c5:e8:6b:59:14:56:97:7a:c4:51:9d:82:ad:0f:c7: d6:85:a0:c3:8c:e5:35:c8:c9:20:b0:9d:49:b1:3f: 99:38:64:58:27:01:ce:42:5f:38:77:51:d7:e1:9e: e8:ff:60:10:2d:56:53:63:a0:79:6f:9c:b0:ae:84: de:ff:8b:b4:a0:ad:f0:af:2a:1f:1f:1a:22:96:df: 93:b5:76:97:8c:0f:13:93:9d:cf:aa:44:61:af:fd: 0d:c2:12:27:2e:22:c7:10:65:d1:55:77:41:45:a2: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:22:14:5C:DB:FE:8E:16:67:A5:A1:BB:BE:FE:26:42:97:82:97 X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:fd:63:69:6e:44:3c:c8:e3:d9:eb:fb:3b:de:fb:6c:42:56: 4f:d6:f2:cb:0a:0e:a2:6c:d9:be:42:06:5e:3d:9f:1a:57:56: a2:82:39:84:60:24:ec:27:18:8d:63:09:6e:89:87:0d:3a:7c: bc:d6:92:03:4e:a7:a5:63:ae:9f:e4:af:4a:f0:e8:35:5d:63: 88:2f:65:cf:49:6d:df:71:7f:17:ab:17:72:86:7c:44:8b:75: f6:05:ad:dd:58:79:6e:52:ae:8a:27:f5:5e:4a:da:08:34:2e: 41:86:30:a6:cb:ad:de:cb:b5:26:70:19:d5:96:22:56:53:2e: fb:1d:63:f0:c5:fa:cf:8b:e4:6b:6b:4e:77:e6:4a:7b:dd:a4: 9c:e8:3e:3d:7b:64:c8:83:e1:1e:d8:37:0b:77:a2:a6:7d:cd: 1c:88:c8:f4:e1:06:47:57:53:c2:8d:dc:68:8b:a7:43:c8:d3: e3:03:f8:fd:f4:6b:1c:d0:51:ea:3a:c7:dc:69:bc:e7:4d:c1: 82:98:d6:14:33:05:58:a2:ec:c0:b8:66:3e:8c:54:19:0e:e0: e3:c8:93:c4:e4:a0:88:16:17:ff:5a:e6:65:e4:e1:f6:ce:a3: a2:7c:6e:83:aa:28:2a:b2:72:88:53:8b:fe:ce:c4:cd:c1:a8: 5d:df:97:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNTQxMTAvBgNVBAUTKENFQzlCMUIzNTlGRTU4RTkwMjNBODRDRkMyNjc0QzE2 MTgyOEY5OTkwHhcNMjUwNTMxMDU1MDMzWhcNMjUwNjA3MDU1MDMzWjAYMRYwFAYD VQQDEw02ODNhOThhYS1lMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTYwZwde9EhlVVToj3vy6EHFPZG65h1uhM3grAPHmBnHFheWPnAIukdtxivT fYoOTbkdzabf803xhTTJ2YKi5jK4rf47imwpA++LfbWyBZ22ffmvJ6FyfGJg2qd4 uQVLccpE4MMNGo68Vx/q1yHRZZjiEBs1RP1eFZNvYu1tn4IlPgq/S/eiroPEEtii IvmTBXqMv/TF6GtZFFaXesRRnYKtD8fWhaDDjOU1yMkgsJ1JsT+ZOGRYJwHOQl84 d1HX4Z7o/2AQLVZTY6B5b5ywroTe/4u0oK3wryofHxoilt+TtXaXjA8Tk53PqkRh r/0NwhInLiLHEGXRVXdBRaLBpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx5IhRc 2/6OFmelobu+/iZCl4KXMB8GA1UdIwQYMBaAFM7JsbNZ/ljpAjqEz8JnTBYYKPmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM1NC84RDRFQ0Y4NDRE ODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdPa0NPb1RQd21kTUZoZ28t WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdP a0NPb1RQd21kTUZoZ28tWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI/WNpbkQ8yOPZ6/s73vtsQlZP1vLLCg6ibNm+QgZePZ8aV1aigjmE YCTsJxiNYwluiYcNOny81pIDTqelY66f5K9K8Og1XWOIL2XPSW3fcX8XqxdyhnxE i3X2Ba3dWHluUq6KJ/VeStoINC5BhjCmy63ey7UmcBnVliJWUy77HWPwxfrPi+Rr a0535kp73aSc6D49e2TIg+Ee2DcLd6Kmfc0ciMj04QZHV1PCjdxoi6dDyNPjA/j9 9Gsc0FHqOsfcabznTcGCmNYUMwVYouzAuGY+jFQZDuDjyJPE5KCIFhf/WuZl5OH2 zqOifG6DqigqsnKIU4v+zsTNwahd35f/ -----END CERTIFICATE-----Generated at Sat May 31 17:42:35 2025 by rpki-client