$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft File: ZWJxEurnsskvifeninGipPqV9T0.mft (raw, json) Hash identifier: zDNS9ALBXm/FRxtJy5Mm98ntWlo+xHNldpmrpUGuXT4= Subject key identifier: 3B:90:C9:9D:B0:5E:4E:75:46:E2:ED:BD:73:B6:E5:36:CE:4D:97:C0 Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D Certificate issuer: /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft Manifest number: 68 Signing time: Fri 25 Apr 2025 05:59:22 +0000 Manifest this update: Fri 25 Apr 2025 05:59:22 +0000 Manifest next update: Fri 02 May 2025 05:59:22 +0000 Files and hashes: 1: ZWJxEurnsskvifeninGipPqV9T0.crl (hash: drKBfoj3cYKxTlcclklnAk7jKFC5YdZTynO4yHAeXZA=) 2: 74D48D868CED11EF820CF762C4F9AE02.roa (hash: lEKcqkGGYKFU4hSf3vJKxp5n9BmHjN5M8357AH3FFg8=) 3: 495B172A8B5711EFBFF2106FC4F9AE02.roa (hash: MhogdXMXWdfoyHIaoKQrGcF6Sk+HvCM+oofBtx7j+pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D Validity Not Before: Apr 25 05:59:22 2025 GMT Not After : May 2 05:59:22 2025 GMT Subject: CN=680b24ba-1200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:8a:32:86:d6:d4:f1:e3:e9:3e:eb:75:69: 04:ce:83:5d:67:ae:67:c7:77:9c:1c:f8:86:c4:3f: 0c:98:5f:02:0a:a9:6f:67:cf:d4:f8:7b:c0:2f:6d: 8d:70:f3:70:9c:90:4d:9f:3e:35:87:9c:8d:e6:7a: 2d:e1:d0:c2:85:02:75:bf:37:23:99:77:ea:ba:57: b5:35:f6:ff:91:07:9c:73:6e:a0:83:d6:e4:ce:e7: 54:8f:6a:e2:ad:45:ec:58:1a:07:59:64:e8:64:55: 68:ee:9c:46:46:52:a1:54:5d:d8:5f:6b:9a:8c:82: b1:ad:f5:dc:62:3e:56:3d:c0:bb:35:15:2f:fb:50: b2:62:c7:40:2c:47:0d:e3:f9:3b:d0:6f:5c:15:f2: b4:39:d2:7d:3a:fe:38:e1:15:62:dd:37:9d:d3:c8: 50:83:08:ae:47:1d:d0:46:d2:78:8a:bb:af:a8:35: 29:b7:d5:40:7b:53:99:4c:9f:31:8c:ca:c4:71:4b: aa:e4:b5:02:fb:c2:bb:e0:0c:5c:25:07:d5:a1:1d: ed:6a:70:1e:67:19:88:ff:55:1c:fa:d8:08:76:d5: 72:05:d1:cb:f2:0d:ec:bb:d0:42:fc:ee:a5:9a:4b: 6f:5f:f4:92:c5:d8:ed:74:f1:bb:5e:5b:f2:ff:ec: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:90:C9:9D:B0:5E:4E:75:46:E2:ED:BD:73:B6:E5:36:CE:4D:97:C0 X509v3 Authority Key Identifier: keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e2:69:6c:53:18:fa:e9:a1:2d:2b:c4:b6:90:6c:c7:2d:c6: 71:d4:41:cf:9e:a4:f7:ac:96:e0:ae:ff:95:4f:e5:c3:3e:d8: 29:17:11:ee:51:99:93:ac:4b:f3:dc:bb:6e:d3:9b:a9:c6:76: ba:b1:ca:ad:b3:49:8a:f5:d0:22:76:ff:94:9c:f6:10:38:8f: 11:78:5d:46:75:50:1b:e1:29:f7:fa:c1:9e:27:1e:c3:c5:41: 8b:a7:37:6a:27:c1:e7:d7:09:bb:90:ab:a0:58:91:29:4b:74: ce:4a:49:a4:f6:78:77:33:ce:a8:6b:f8:c9:3a:7c:81:44:80: 12:4a:98:8b:5e:d7:b3:b7:18:ae:a3:63:f2:44:1d:a4:5d:b4: 62:5e:be:dd:90:47:16:90:e5:2e:2f:99:0b:2d:a4:0e:b4:4e: 41:cb:aa:30:84:ec:f3:c9:9a:d6:ff:a1:5f:e8:08:c8:99:00: 26:33:67:69:b6:af:cc:12:1c:c4:73:f3:4e:fc:71:d2:9e:e0: bf:06:4d:8b:03:d7:f7:f0:6c:43:8c:0e:d6:ca:b3:15:15:67: 2a:4a:b0:c5:b0:ab:ae:2e:6a:da:44:b2:bd:39:48:d8:ad:0f: 2c:5a:19:8a:d6:75:1d:57:a4:cd:65:ce:7b:29:82:e5:24:a7: 9a:04:60:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODYwQTExMC8GA1UEBRMoNjU2MjcxMTJFQUU3QjJDOTJGODlGN0E3OEE3MUEyQTRG QTk1RjUzRDAeFw0yNTA0MjUwNTU5MjJaFw0yNTA1MDIwNTU5MjJaMBgxFjAUBgNV BAMTDTY4MGIyNGJhLTEyMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC594oyhtbU8ePpPut1aQTOg11nrmfHd5wc+IbEPwyYXwIKqW9nz9T4e8AvbY1w 83CckE2fPjWHnI3mei3h0MKFAnW/NyOZd+q6V7U19v+RB5xzbqCD1uTO51SPauKt RexYGgdZZOhkVWjunEZGUqFUXdhfa5qMgrGt9dxiPlY9wLs1FS/7ULJix0AsRw3j +TvQb1wV8rQ50n06/jjhFWLdN53TyFCDCK5HHdBG0niKu6+oNSm31UB7U5lMnzGM ysRxS6rktQL7wrvgDFwlB9WhHe1qcB5nGYj/VRz62Ah21XIF0cvyDey70EL87qWa S29f9JLF2O108bteW/L/7ES1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO5DJnbBe TnVG4u29c7blNs5Nl8AwHwYDVR0jBBgwFoAUZWJxEurnsskvifeninGipPqV9T0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NjBBL0I1MEEzQzI0OEI1 NDExRUY5NDc0NzI0OUM0RjlBRTAyL1pXSnhFdXJuc3NrdmlmZW5pbkdpcFBxVjlU MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWldKeEV1cm5zc2t2aWZlbmluR2lwUHFWOVQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NjBBL0I1MEEzQzI0OEI1NDExRUY5NDc0NzI0OUM0RjlBRTAyL1pXSnhFdXJuc3Nr dmlmZW5pbkdpcFBxVjlUMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADbiaWxTGPrpoS0rxLaQbMctxnHUQc+epPesluCu/5VP5cM+2CkXEe5R mZOsS/Pcu27Tm6nGdrqxyq2zSYr10CJ2/5Sc9hA4jxF4XUZ1UBvhKff6wZ4nHsPF QYunN2onwefXCbuQq6BYkSlLdM5KSaT2eHczzqhr+Mk6fIFEgBJKmIte17O3GK6j Y/JEHaRdtGJevt2QRxaQ5S4vmQstpA60TkHLqjCE7PPJmtb/oV/oCMiZACYzZ2m2 r8wSHMRz8078cdKe4L8GTYsD1/fwbEOMDtbKsxUVZypKsMWwq64uatpEsr05SNit DyxaGYrWdR1XpM1lznspguUkp5oEYCQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:21 2025 by rpki-client