$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json) Hash identifier: t9Q15zp1YOPfQS6EKfLkNZXEm7u4gFcLxWsdaTvp/gc= Subject key identifier: 41:65:61:9B:8E:21:3A:AC:12:AC:FB:2A:D6:FD:9D:28:06:0D:3C:80 Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 13B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft Manifest number: 13AF Signing time: Thu 24 Apr 2025 16:58:21 +0000 Manifest this update: Thu 24 Apr 2025 16:58:21 +0000 Manifest next update: Thu 01 May 2025 16:58:21 +0000 Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: 9oVDHXX4QLpzN7RBMb0tZa4xwSYXzN3hzaY+7W455bE=) 2: A59866188BC311E88445685EC4F9AE02.roa (hash: UY4nyIE+VkK/iFAfXsE3PqiNSHJ4rK/Ulyy62xkzmis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5046 (0x13b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Apr 24 16:58:21 2025 GMT Not After : May 1 16:58:21 2025 GMT Subject: CN=680a6dad-4c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:55:66:01:33:c9:92:25:15:88:8a:95:f9: 55:63:17:50:e1:a6:67:ef:bd:1b:2e:ae:04:2c:6b: ec:e2:1c:45:66:3c:b3:b6:09:e6:cb:dd:2a:d4:51: fb:b5:17:96:df:2c:ea:66:31:b5:4b:ce:cb:be:29: 5d:03:25:2d:15:cd:3b:16:5a:54:5d:eb:c0:1e:48: db:3e:9e:a4:df:22:21:97:03:a8:cb:c8:d5:61:45: db:df:b0:08:c7:45:32:93:c9:c7:47:d1:ae:dd:08: eb:f8:6d:e1:da:6e:3f:7b:00:78:67:9d:17:c7:5b: af:86:c7:ee:86:20:47:d3:b0:a1:c6:82:2b:c8:2a: 3b:59:82:18:80:d4:18:a6:47:49:ea:29:11:bb:8b: 3a:07:44:b7:79:b2:40:6e:e1:e4:91:2b:61:13:1d: 02:39:58:9c:d2:f7:6e:ee:28:a5:3e:16:cf:d3:23: ea:47:e1:80:14:0e:26:9b:6b:1f:3d:8c:94:a7:e1: 39:e8:e1:9a:c1:cd:89:0f:32:8c:b2:f1:42:01:f4: 87:83:e4:5e:cb:ac:e9:ae:c6:df:0b:83:14:59:88: 4d:64:e9:cc:e0:8e:40:e9:f8:09:21:a4:ac:72:d9: b1:ac:dd:83:22:1a:2d:a7:90:76:ee:68:92:af:73: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:65:61:9B:8E:21:3A:AC:12:AC:FB:2A:D6:FD:9D:28:06:0D:3C:80 X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f2:99:06:12:44:56:20:4e:b9:e6:02:6a:f9:73:b7:8f:1e: 63:a4:17:29:9b:19:94:98:c8:1b:a3:7b:90:b4:81:a7:91:2b: 5b:cf:f2:e2:a2:81:a1:9c:b8:d3:17:0f:50:19:5d:89:28:0b: ec:d7:52:9f:fb:5e:6a:e8:77:73:27:29:e6:41:57:d2:67:33: 5e:34:25:d8:56:63:82:b2:83:45:d4:e5:98:20:d3:eb:f1:3e: fb:2c:0a:ce:2e:10:20:52:11:28:f5:f3:33:c2:31:c6:3e:2f: 44:4b:cf:c4:2b:37:8a:ff:76:be:ed:e4:94:00:36:b2:9f:46: 7a:eb:d8:e8:c8:c9:7f:db:92:1c:30:d5:58:ff:0e:65:42:71: be:bf:f2:6d:11:6d:82:bc:87:8f:ec:0c:95:a4:70:4b:a4:71: 2c:f5:a4:60:8f:d4:ba:11:a5:26:65:02:48:fd:bf:6c:16:d4: 12:1b:8c:df:b3:db:30:99:7c:b8:41:df:90:02:3b:28:c9:0c: e8:72:32:92:6e:3e:a2:d0:47:c4:fb:08:d3:c2:9f:78:2e:75: 60:20:e3:db:38:12:d0:4e:b6:8b:fb:4e:cd:10:3c:46:52:df: 4e:2d:8d:49:7f:df:00:6d:27:04:f4:fb:6d:cd:d1:25:8d:8d: 40:7c:f0:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjUwNDI0MTY1ODIxWhcNMjUwNTAxMTY1ODIxWjAYMRYwFAYD VQQDEw02ODBhNmRhZC00YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqtVZgEzyZIlFYiKlflVYxdQ4aZn770bLq4ELGvs4hxFZjyztgnmy90q1FH7 tReW3yzqZjG1S87LvildAyUtFc07FlpUXevAHkjbPp6k3yIhlwOoy8jVYUXb37AI x0Uyk8nHR9Gu3Qjr+G3h2m4/ewB4Z50Xx1uvhsfuhiBH07ChxoIryCo7WYIYgNQY pkdJ6ikRu4s6B0S3ebJAbuHkkSthEx0COVic0vdu7iilPhbP0yPqR+GAFA4mm2sf PYyUp+E56OGawc2JDzKMsvFCAfSHg+Rey6zprsbfC4MUWYhNZOnM4I5A6fgJIaSs ctmxrN2DIhotp5B27miSr3P8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFlYZuO ITqsEqz7Ktb9nSgGDTyAMB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0RCMS9EQTJBNDJCRThCQzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VD WklVdkV0R0xJWXdGNUVpRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd8pkGEkRWIE655gJq+XO3jx5jpBcpmxmUmMgbo3uQtIGnkStbz/Li ooGhnLjTFw9QGV2JKAvs11Kf+15q6HdzJynmQVfSZzNeNCXYVmOCsoNF1OWYINPr 8T77LArOLhAgUhEo9fMzwjHGPi9ES8/EKzeK/3a+7eSUADayn0Z669joyMl/25Ic MNVY/w5lQnG+v/JtEW2CvIeP7AyVpHBLpHEs9aRgj9S6EaUmZQJI/b9sFtQSG4zf s9swmXy4Qd+QAjsoyQzocjKSbj6i0EfE+wjTwp94LnVgIOPbOBLQTraL+07NEDxG Ut9OLY1Jf98AbScE9PttzdEljY1AfPD3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:47 2025 by rpki-client