$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: i4jfY4Ee/WFY4YdatgEQSm7iTPdGUc34svQPg32n3eg= Subject key identifier: 3F:E2:8B:3C:DF:3C:FD:A9:59:38:54:E2:BA:84:A5:D8:11:7A:48:0D Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 138B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 1361 Signing time: Thu 24 Apr 2025 17:01:55 +0000 Manifest this update: Thu 24 Apr 2025 17:01:55 +0000 Manifest next update: Thu 01 May 2025 17:01:55 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: Pd+mZR+Nc0B3DdqDKgoV/2gGTqqeefi1ke4/mS3+bzk=) 2: E56024B49A7D11EF99ECF636C4F9AE02.roa (hash: uEmwwGXbLGwcgl1RlF9qOwgmZadJbirI6oSO1IuzJso=) 3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: O/obPP4Yy8LvINF30ra1g4yXQa4L78ykRo9/qSPYtDU=) 4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: c/pAynOTfJnEgUvwSHA5IHqTz1bA0PIkbnuNkyI5d1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5003 (0x138b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Apr 24 17:01:55 2025 GMT Not After : May 1 17:01:55 2025 GMT Subject: CN=680a6e83-0129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:82:54:70:e8:73:5e:d0:60:42:99:c5:87:63: 78:25:0b:f3:53:ad:29:e8:d5:51:e9:e4:40:76:9e: 25:6f:09:b8:65:39:50:f7:da:3b:3f:6f:ea:3d:ed: a1:8a:4c:11:92:f9:34:01:c3:4a:68:46:67:20:0c: 9c:21:04:62:d2:8d:1b:45:70:4d:fe:5e:71:1a:a7: 3f:88:c9:59:82:99:ad:00:b5:37:3a:43:b5:29:6c: 1c:a1:7e:ab:9c:0d:ec:5c:9f:18:fe:1d:40:12:cc: d8:f1:c3:f3:3f:c2:a3:d0:fb:76:7c:05:df:bd:b8: 00:42:1b:a8:84:96:8a:bc:75:21:fa:3d:6f:44:d5: 58:10:d6:51:2e:05:0d:37:ae:16:0a:0d:28:4b:4c: 72:ad:04:3a:93:ba:a9:32:a2:f5:fa:f1:df:22:fb: 53:c6:47:2e:89:76:63:fd:48:e8:b5:00:99:2f:1b: af:4c:fa:85:1a:60:06:7f:18:f6:be:c5:2f:2f:61: fe:9b:1c:a1:9f:ad:d4:d0:f8:a0:42:44:9b:98:f8: 7e:a6:d7:d2:e4:99:93:0e:6d:29:5e:3d:9a:0f:23: 4b:e8:86:38:47:28:49:1c:82:d9:de:4a:04:b4:a0: e4:d6:73:96:fc:9e:de:85:c4:df:69:c7:cc:14:1f: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:8B:3C:DF:3C:FD:A9:59:38:54:E2:BA:84:A5:D8:11:7A:48:0D X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b3:36:86:3c:af:9e:bf:37:22:60:0b:62:7f:31:2c:4b:32: 06:e5:7e:3a:ba:e4:68:60:37:0b:a5:58:4a:02:97:9d:0c:7d: 8e:a2:3a:0a:1b:44:7f:14:7b:1f:65:83:91:c3:65:d1:80:63: 51:96:19:4f:b2:0b:31:7e:3d:52:f8:da:dd:ee:25:11:43:18: 32:41:be:50:1e:96:20:41:1d:17:05:43:73:2e:b1:2a:26:a1: e7:6d:32:4d:49:87:d8:81:51:a7:79:3c:ef:99:86:1e:94:cf: c0:0b:ab:9d:47:93:2b:9c:d1:ca:2e:3a:12:b4:00:2a:95:c9: 01:a2:f6:68:6f:33:98:0d:24:f5:c5:0b:4e:52:6f:55:b8:3a: 89:d5:0e:f7:cd:85:cf:cf:0a:39:1c:6a:b4:36:8f:e7:66:73: 05:75:18:76:e6:2b:34:b7:a5:34:05:17:c3:96:e1:ec:82:e9: b8:2f:78:cf:1a:a5:cf:9f:90:f9:1d:6a:63:a4:db:58:e8:c1: e7:f8:fd:fc:41:85:04:ac:87:14:80:5c:a1:cc:97:6a:7b:35: 45:13:00:09:af:79:f4:57:6d:8c:c8:14:8d:15:c9:5d:13:18: f6:8f:1e:09:f8:02:44:3e:3d:38:b0:e2:d4:46:1b:3c:c5:af: 3b:f5:21:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwNDI0MTcwMTU1WhcNMjUwNTAxMTcwMTU1WjAYMRYwFAYD VQQDEw02ODBhNmU4My0wMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+YJUcOhzXtBgQpnFh2N4JQvzU60p6NVR6eRAdp4lbwm4ZTlQ99o7P2/qPe2h ikwRkvk0AcNKaEZnIAycIQRi0o0bRXBN/l5xGqc/iMlZgpmtALU3OkO1KWwcoX6r nA3sXJ8Y/h1AEszY8cPzP8Kj0Pt2fAXfvbgAQhuohJaKvHUh+j1vRNVYENZRLgUN N64WCg0oS0xyrQQ6k7qpMqL1+vHfIvtTxkcuiXZj/UjotQCZLxuvTPqFGmAGfxj2 vsUvL2H+mxyhn63U0PigQkSbmPh+ptfS5JmTDm0pXj2aDyNL6IY4RyhJHILZ3koE tKDk1nOW/J7ehcTfacfMFB9ZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/iizzf PP2pWThU4rqEpdgRekgNMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHszaGPK+evzciYAtifzEsSzIG5X46uuRoYDcLpVhKApedDH2OojoK G0R/FHsfZYORw2XRgGNRlhlPsgsxfj1S+Nrd7iURQxgyQb5QHpYgQR0XBUNzLrEq JqHnbTJNSYfYgVGneTzvmYYelM/AC6udR5MrnNHKLjoStAAqlckBovZobzOYDST1 xQtOUm9VuDqJ1Q73zYXPzwo5HGq0No/nZnMFdRh25is0t6U0BRfDluHsgum4L3jP GqXPn5D5HWpjpNtY6MHn+P38QYUErIcUgFyhzJdqezVFEwAJr3n0V22MyBSNFcld Exj2jx4J+AJEPj04sOLURhs8xa879SEw -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:51 2025 by rpki-client