$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: WSwbTNCQkgwx3op3Z0lY49XkbwQTISdLnT6rHBgyD9E= Subject key identifier: 11:0F:8E:2E:81:DD:82:07:85:DE:92:F2:F9:01:C1:79:83:8B:4C:B4 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 27 Signing time: Sat 03 May 2025 07:06:23 +0000 Manifest this update: Sat 03 May 2025 07:06:23 +0000 Manifest next update: Sat 10 May 2025 07:06:23 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: 0zcLPtINdl7Ao9pNgLqb/74hODo5P9PcpehnKQB1J1Q=) 2: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: /+v7Ksoid33z04XmzwyzW93GCN47u5aOiXMh700TRNk=) 3: 4801BE3EF3CF11EF93538346C4F9AE02.roa (hash: r5071xQo7/PgibLwPNn05K7+0v7I1Jv+CGRNijITcBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: May 3 07:06:23 2025 GMT Not After : May 10 07:06:23 2025 GMT Subject: CN=6815c06f-c438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:8b:34:8b:1a:46:ee:b0:55:d8:db:49:8c: ce:c1:13:90:ae:5a:fc:f5:bf:ae:d0:3e:c3:84:0e: 90:e0:f2:bf:4e:2b:fc:c6:a4:cc:19:99:fa:9e:cd: 66:73:a7:73:ed:57:49:df:ac:22:77:14:2d:d4:e6: d8:52:67:e3:24:1b:e7:e1:e3:ad:8c:4e:31:2e:66: bb:b7:76:2d:da:8a:08:0e:ce:f7:d5:9b:49:c2:28: b1:11:f7:c7:d8:33:a2:7c:ab:ea:22:54:28:88:f7: 66:d9:83:aa:bd:1b:c9:22:33:9b:3f:9e:7f:8a:17: 96:d8:97:4c:31:a5:c4:58:6d:67:4d:2f:a2:b0:ef: 14:a9:ea:92:f5:ce:22:c3:16:6a:89:ce:db:1c:b0: a7:48:6d:33:5e:08:5a:f1:e3:e2:a1:54:9b:71:8a: 5b:67:e5:37:03:13:56:6e:19:96:7d:f6:72:e0:fe: 45:e6:ee:c0:62:84:6c:43:72:6e:7c:d6:5b:53:64: df:70:d0:1f:2e:19:a0:bd:64:f3:9e:f0:29:b1:0d: 80:23:b1:a6:f0:ac:af:73:f9:21:ae:fd:66:bb:a7: bf:7f:56:9c:c8:5d:7f:19:19:09:51:aa:7c:1b:85: e0:33:c2:6a:ec:ef:13:55:a3:a3:ae:07:dd:87:b8: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0F:8E:2E:81:DD:82:07:85:DE:92:F2:F9:01:C1:79:83:8B:4C:B4 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:13:50:2f:cc:b1:4a:c3:fa:7c:b6:38:50:2b:0b:05:84: 53:2f:5f:35:13:ed:f5:71:b5:1d:03:ec:42:5d:5d:05:5f:30: 1b:b7:29:97:1d:ff:be:ed:6a:08:71:7e:95:8a:87:6c:59:43: 53:d7:e1:ee:0a:92:47:dc:82:10:99:4e:63:3a:1a:57:0d:82: b1:65:07:88:2d:a5:bd:c4:55:0d:66:ec:d2:6b:0e:c0:b7:b8: 6e:81:57:9b:4f:99:1d:cf:d7:9a:1d:ab:7b:62:97:cf:bc:cc: 2a:82:9d:1b:b6:68:32:5d:53:30:fd:08:0d:c1:1c:3c:ed:99: b9:25:20:78:84:a7:3e:2a:3a:8e:16:3d:b0:90:87:c9:42:89: 99:8d:ef:a8:87:21:2b:ed:19:3c:f8:8d:3a:e5:ed:f9:d7:b3: 4c:1f:f1:eb:82:61:f6:a0:27:88:1c:ba:de:9e:ec:7a:29:1e: 8f:78:d5:0a:b2:7a:e8:7b:46:ca:76:d4:cb:0e:10:38:36:a3: 85:66:a5:00:9e:37:52:81:8f:2b:65:94:21:db:67:d6:fe:af: a7:13:d9:37:47:b1:fd:e0:ee:6b:cf:9f:b6:ec:38:52:5e:81: c0:78:b0:1c:c9:f7:be:66:0b:c1:b4:7e:71:2b:ef:3f:a3:65: 57:01:9e:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA1MDMwNzA2MjNaFw0yNTA1MTAwNzA2MjNaMBgxFjAUBgNV BAMTDTY4MTVjMDZmLWM0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRYos0ixpG7rBV2NtJjM7BE5CuWvz1v67QPsOEDpDg8r9OK/zGpMwZmfqezWZz p3PtV0nfrCJ3FC3U5thSZ+MkG+fh462MTjEuZru3di3aiggOzvfVm0nCKLER98fY M6J8q+oiVCiI92bZg6q9G8kiM5s/nn+KF5bYl0wxpcRYbWdNL6Kw7xSp6pL1ziLD FmqJztscsKdIbTNeCFrx4+KhVJtxiltn5TcDE1ZuGZZ99nLg/kXm7sBihGxDcm58 1ltTZN9w0B8uGaC9ZPOe8CmxDYAjsabwrK9z+SGu/Wa7p79/VpzIXX8ZGQlRqnwb heAzwmrs7xNVo6OuB92HuJStAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEQ+OLoHd ggeF3pLy+QHBeYOLTLQwHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAExVE1AvzLFKw/p8tjhQKwsFhFMvXzUT7fVxtR0D7EJdXQVfMBu3KZcd /77taghxfpWKh2xZQ1PX4e4KkkfcghCZTmM6GlcNgrFlB4gtpb3EVQ1m7NJrDsC3 uG6BV5tPmR3P15odq3til8+8zCqCnRu2aDJdUzD9CA3BHDztmbklIHiEpz4qOo4W PbCQh8lCiZmN76iHISvtGTz4jTrl7fnXs0wf8euCYfagJ4gcut6e7HopHo941Qqy euh7Rsp21MsOEDg2o4VmpQCeN1KBjytllCHbZ9b+r6cT2TdHsf3g7mvPn7bsOFJe gcB4sBzJ975mC8G0fnEr7z+jZVcBng8= -----END CERTIFICATE-----Generated at Mon May 5 00:22:28 2025 by rpki-client