$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: X3BJX9by1akwKV3zxfx153VTA/5+YjpIWwZov3d10R8= Subject key identifier: FA:14:DC:82:1C:2A:FC:A7:56:90:09:89:AF:15:11:2A:C4:C4:71:6A Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 79 Signing time: Fri 25 Apr 2025 05:43:41 +0000 Manifest this update: Fri 25 Apr 2025 05:43:41 +0000 Manifest next update: Fri 02 May 2025 05:43:41 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: e6LUyQMAocsMpQZRzJClw0TJslBWllcxuilZWG5xMT4=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: Fnj7JWgwdsaeofMVq5UcxcqhmE7c7PXdT8GOJ7pFYSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Apr 25 05:43:41 2025 GMT Not After : May 2 05:43:41 2025 GMT Subject: CN=680b210d-2824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b0:80:d9:f1:d0:23:d1:5d:b3:13:14:63:d4: a1:39:c7:28:94:73:e7:3b:ac:2b:92:e1:01:7e:8b: 9a:8f:47:09:44:77:c7:77:a4:49:d9:65:c4:33:06: 61:4f:34:4a:28:fc:c4:9a:d7:e0:90:59:1d:61:91: 05:f2:6d:d4:29:8f:ac:71:a1:16:b9:1f:56:79:c4: 21:0f:36:30:cb:17:c3:cd:29:b8:49:21:1a:1a:08: 59:4b:66:f4:ba:85:2e:83:af:50:7f:44:86:74:b6: 17:76:2a:ec:ca:ad:44:82:94:5d:32:77:f2:29:de: 73:22:9e:c6:11:e9:60:ca:d5:1a:4b:49:0d:c7:84: c7:1f:63:05:c4:7e:60:98:84:d9:01:35:43:62:9f: 41:16:31:1a:d4:f5:c4:e8:34:a8:46:5a:a8:ed:bf: 1f:ba:d1:c2:6e:72:ae:a8:92:4a:65:d5:32:e0:0f: fd:97:b8:73:98:87:f5:51:e7:92:56:d4:03:8c:15: 9d:27:e1:3f:1f:81:b4:cd:41:21:62:d2:61:2d:22: 97:34:b1:bb:25:68:0c:c1:aa:4b:35:9b:67:1e:9c: e3:e7:c8:ad:fa:34:78:6f:3d:19:0e:64:cd:76:00: 39:bb:3b:db:fa:47:f9:73:7f:a2:03:4f:5c:24:44: ad:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:14:DC:82:1C:2A:FC:A7:56:90:09:89:AF:15:11:2A:C4:C4:71:6A X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:cf:4e:d7:21:15:34:56:61:2c:06:3b:8e:38:8c:3c:02: f3:bc:37:64:64:7a:4f:9d:a3:e1:32:69:a2:e6:b4:6b:42:f4: fa:a8:0a:57:8e:c0:67:68:97:49:f7:72:1e:4b:4b:06:b7:20: 37:12:b5:5f:49:0a:a3:df:3e:96:fd:1f:d3:cf:1a:f5:36:3a: 0c:f1:2c:57:cc:50:6d:70:58:ee:0d:e6:47:9d:0b:b9:21:f4: 6d:5a:1c:2a:55:89:83:83:53:3f:48:4c:fc:d8:9e:3f:9b:16: cd:af:ae:7d:d2:e7:d2:ec:0c:9e:8b:b9:6d:e2:23:a3:d2:13: 20:7c:39:2f:38:49:22:c6:20:1f:60:d2:fd:41:cc:2d:dd:f2: e7:34:42:9c:bb:c4:a2:00:c4:83:ea:6e:a8:61:58:69:45:40: 2b:57:4a:e6:96:27:c6:83:12:bd:7a:ec:39:18:82:bc:7a:7b: 28:30:7a:bc:95:45:71:ae:fe:97:e4:66:f8:50:5f:a0:cc:58: 59:f4:76:8b:11:d6:7d:63:f1:3c:bb:0d:5f:8d:df:b4:7e:23: 90:ed:b5:b3:d1:b6:92:6b:d9:4a:9f:36:62:7c:ff:12:cb:b1: 85:30:27:86:94:cc:9a:52:e8:a1:92:b1:75:45:ac:01:ea:4d: 10:aa:f0:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTRBRjExMC8GA1UEBRMoQ0VFNDg3NjRBQTJDMTZGNzVBMDY3MjQ0RUJBNTg2Njk3 NEUxQ0VENjAeFw0yNTA0MjUwNTQzNDFaFw0yNTA1MDIwNTQzNDFaMBgxFjAUBgNV BAMTDTY4MGIyMTBkLTI4MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqsIDZ8dAj0V2zExRj1KE5xyiUc+c7rCuS4QF+i5qPRwlEd8d3pEnZZcQzBmFP NEoo/MSa1+CQWR1hkQXybdQpj6xxoRa5H1Z5xCEPNjDLF8PNKbhJIRoaCFlLZvS6 hS6Dr1B/RIZ0thd2KuzKrUSClF0yd/Ip3nMinsYR6WDK1RpLSQ3HhMcfYwXEfmCY hNkBNUNin0EWMRrU9cToNKhGWqjtvx+60cJucq6okkpl1TLgD/2XuHOYh/VR55JW 1AOMFZ0n4T8fgbTNQSFi0mEtIpc0sbslaAzBqks1m2cenOPnyK36NHhvPRkOZM12 ADm7O9v6R/lzf6IDT1wkRK1pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+hTcghwq /KdWkAmJrxURKsTEcWowHwYDVR0jBBgwFoAUzuSHZKosFvdaBnJE66WGaXThztYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNEFGLzQ2NjQ2NkNBNjlG NjExRUZCMkI4QUY1MEM0RjlBRTAyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenVTSFpLb3NGdmRhQm5KRTY2V0dhWFRoenRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB NEFGLzQ2NjQ2NkNBNjlGNjExRUZCMkI4QUY1MEM0RjlBRTAyL3p1U0haS29zRnZk YUJuSkU2NldHYVhUaHp0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHgbz07XIRU0VmEsBjuOOIw8AvO8N2Rkek+do+EyaaLmtGtC9PqoCleO wGdol0n3ch5LSwa3IDcStV9JCqPfPpb9H9PPGvU2OgzxLFfMUG1wWO4N5kedC7kh 9G1aHCpViYODUz9ITPzYnj+bFs2vrn3S59LsDJ6LuW3iI6PSEyB8OS84SSLGIB9g 0v1BzC3d8uc0Qpy7xKIAxIPqbqhhWGlFQCtXSuaWJ8aDEr167DkYgrx6eygweryV RXGu/pfkZvhQX6DMWFn0dosR1n1j8Ty7DV+N37R+I5DttbPRtpJr2UqfNmJ8/xLL sYUwJ4aUzJpS6KGSsXVFrAHqTRCq8O4= -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:43 2025 by rpki-client