$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: 4AFi4aIqZwGs1QGPjTd7LbQydqGr35f8U2NiEGGfXkU= Subject key identifier: 0C:C3:03:B0:40:19:B8:12:E7:4A:60:C3:A2:11:09:65:8D:9B:2D:7F Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 01CB Signing time: Fri 25 Apr 2025 02:07:27 +0000 Manifest this update: Fri 25 Apr 2025 02:07:26 +0000 Manifest next update: Fri 02 May 2025 02:07:26 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: 4AXx1twaHMdaAPDoPrd+GNEcNPaXhM5BOswDnzGJSWU=) 2: 44A82EEEFC3011EF9516D932C4F9AE02.roa (hash: sVlVa25dv+6fLbzk0QMLEVBJl/Ylu1FAwWtckjdB9wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Apr 25 02:07:26 2025 GMT Not After : May 2 02:07:26 2025 GMT Subject: CN=680aee5f-6a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:6d:25:13:f9:b8:75:cb:ec:74:70:04:6d: 1e:dc:44:a0:26:14:12:f4:25:c8:b2:ff:d1:62:c7: c0:db:c9:9c:93:29:64:42:68:bd:75:20:31:9b:3e: d3:c8:0f:bc:9c:22:5a:6b:bc:a5:d6:3a:cd:a9:f0: a8:da:70:4a:de:42:8e:f4:0d:7c:e2:b6:7d:5e:eb: ac:eb:0a:83:f5:fa:0c:17:69:58:20:50:ca:25:a4: ee:82:17:0e:d0:a1:05:21:cb:ee:60:fc:92:ef:3b: 4f:f3:52:09:c8:5f:f6:a3:e3:6e:6c:aa:4b:45:02: 8e:bd:08:7d:b8:4e:b2:ec:e4:31:39:37:de:de:d9: 7a:1a:38:92:fe:4c:b7:40:d1:67:97:39:87:14:6f: 91:d3:d1:80:80:76:53:6d:56:2c:cb:29:37:9a:e0: 22:a4:96:eb:10:1d:c5:5f:9c:43:b1:fb:cd:68:8c: f6:b8:21:52:e5:5f:d9:c0:36:67:62:b6:3e:39:59: ce:7a:60:54:81:af:b2:c8:d1:3c:b6:b8:c5:59:56: 7f:4d:ae:b8:3f:f7:31:14:5a:61:ce:78:29:7b:d1: 7d:8f:16:6e:b8:a0:77:38:0d:56:c5:82:6c:82:04: 13:bb:4e:cc:ac:84:0b:34:53:dd:5b:cd:6e:b4:04: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C3:03:B0:40:19:B8:12:E7:4A:60:C3:A2:11:09:65:8D:9B:2D:7F X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:79:dc:15:b2:9c:5c:16:2b:04:2f:c5:a4:4e:cf:7f:3c:e4: 06:5d:1d:a9:c9:65:ce:3c:3e:8f:2f:fc:d8:a1:e8:d8:14:9e: 14:f2:e6:57:1e:a5:4d:45:9b:22:d6:01:da:40:9a:7c:92:d9: be:a8:76:b6:4b:9b:a7:a4:63:5c:60:78:77:f4:7e:65:c2:36: 58:ea:5c:5a:5b:1c:41:de:8d:99:56:0a:e5:10:8e:3e:b2:4b: 10:08:e4:c4:f7:01:0d:51:fc:ae:6d:fd:7d:5f:8a:4b:b5:6a: 2d:d0:61:18:29:c6:a8:37:80:e4:5b:14:7c:bf:ba:e6:4e:b8: 11:1a:25:fd:0c:e6:2b:8f:ad:d5:3f:ec:f7:ce:d8:d1:22:2d: c5:ac:e8:7b:4e:64:47:16:7e:e7:a5:15:b8:36:82:61:3b:75: cf:6c:6e:53:55:57:f8:93:76:f3:ea:e1:05:e4:7a:8b:dd:38: 2a:9b:be:89:6f:73:94:b7:08:6f:7a:76:ec:9b:dd:07:06:41: ac:39:91:0e:1c:a9:db:fb:81:2b:35:5a:8d:b1:fe:d1:8f:c0: 0f:01:41:90:9a:a7:e9:72:18:a3:98:ea:c3:0d:61:ed:e2:b5: e8:d4:fe:04:83:57:40:bb:61:4e:b0:26:bf:80:6e:d3:43:fa: b4:76:d5:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjUwNDI1MDIwNzI2WhcNMjUwNTAyMDIwNzI2WjAYMRYwFAYD VQQDEw02ODBhZWU1Zi02YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy9tJRP5uHXL7HRwBG0e3ESgJhQS9CXIsv/RYsfA28mckylkQmi9dSAxmz7T yA+8nCJaa7yl1jrNqfCo2nBK3kKO9A184rZ9Xuus6wqD9foMF2lYIFDKJaTughcO 0KEFIcvuYPyS7ztP81IJyF/2o+NubKpLRQKOvQh9uE6y7OQxOTfe3tl6GjiS/ky3 QNFnlzmHFG+R09GAgHZTbVYsyyk3muAipJbrEB3FX5xDsfvNaIz2uCFS5V/ZwDZn YrY+OVnOemBUga+yyNE8trjFWVZ/Ta64P/cxFFphzngpe9F9jxZuuKB3OA1WxYJs ggQTu07MrIQLNFPdW81utATgYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzDA7BA GbgS50pgw6IRCWWNmy1/MB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6edwVspxcFisEL8WkTs9/POQGXR2pyWXOPD6PL/zYoejYFJ4U8uZX HqVNRZsi1gHaQJp8ktm+qHa2S5unpGNcYHh39H5lwjZY6lxaWxxB3o2ZVgrlEI4+ sksQCOTE9wENUfyubf19X4pLtWot0GEYKcaoN4DkWxR8v7rmTrgRGiX9DOYrj63V P+z3ztjRIi3FrOh7TmRHFn7npRW4NoJhO3XPbG5TVVf4k3bz6uEF5HqL3Tgqm76J b3OUtwhvenbsm90HBkGsOZEOHKnb+4ErNVqNsf7Rj8APAUGQmqfpchijmOrDDWHt 4rXo1P4Eg1dAu2FOsCa/gG7TQ/q0dtXy -----END CERTIFICATE-----Generated at Sat Apr 26 04:58:17 2025 by rpki-client