$ rpki-client -vvf rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft File: 1ZVULlIPSK9153kD6majnGTB0KM.mft (raw, json) Hash identifier: Cp80xR6D7l93B8T/GowvBYJYsgp8EPwEnOP6dKQ9mi0= Subject key identifier: 19:1F:FE:C7:6E:85:BA:B3:DA:E6:11:9F:2B:24:C0:63:B6:28:12:FD Authority key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 Certificate issuer: /CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft Manifest number: F5 Signing time: Fri 25 Apr 2025 04:18:34 +0000 Manifest this update: Fri 25 Apr 2025 04:18:34 +0000 Manifest next update: Fri 02 May 2025 04:18:34 +0000 Files and hashes: 1: 1ZVULlIPSK9153kD6majnGTB0KM.crl (hash: tmfizXbBDd2w/vtnO09PWGJvrhh6oM0WGZSSGhPoQs0=) 2: A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa (hash: 80qu5haW6721xx7xV/uutyDDcTxrv0bPQaiLvhProi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175866, serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3 Validity Not Before: Apr 25 04:18:34 2025 GMT Not After : May 2 04:18:34 2025 GMT Subject: CN=680b0d1a-adfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:1b:0f:6b:25:ad:03:9a:4b:8a:c1:b2:cb: 64:75:10:d7:29:60:eb:b1:e7:54:a7:ce:9e:a6:0c: 8d:4d:18:3a:3e:bb:8f:66:09:a7:66:9d:5b:b1:53: b3:91:dc:37:4e:de:73:7c:2a:d4:6c:b2:87:53:99: 43:45:4c:0f:6e:a4:c6:f1:43:40:44:35:df:0a:fc: 72:35:28:a9:a6:30:ba:6f:a4:5c:e7:b4:3a:e0:49: 2e:24:d8:c6:75:6b:71:2e:1e:50:4c:12:0d:cd:a3: 69:7e:6c:ff:1d:33:65:59:78:20:f3:16:4a:b8:08: 23:29:30:e3:0d:ed:3c:c4:84:dd:f3:87:ba:1f:31: f3:26:6e:b9:1a:5f:ce:2b:81:ff:f4:d6:e2:af:94: 4b:2f:1e:bd:9e:98:f5:20:ba:87:5d:e6:b7:6b:46: 5f:b0:63:c1:e8:ea:ce:7c:07:c5:6f:89:e4:a2:df: 18:e7:41:25:2c:b8:a7:82:2d:35:16:58:6d:9a:b3: 1c:40:d3:10:9f:e1:90:f6:5e:6b:ef:63:3e:93:e5: ec:07:14:e2:cc:98:54:45:c3:11:eb:94:03:fa:86: f8:45:d3:34:bd:c9:09:c4:f4:85:88:66:10:1c:e4: 5f:1c:71:71:8f:2e:31:cb:d6:2a:da:09:e4:83:dc: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1F:FE:C7:6E:85:BA:B3:DA:E6:11:9F:2B:24:C0:63:B6:28:12:FD X509v3 Authority Key Identifier: keyid:D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:72:e5:9c:61:78:66:5f:3d:c3:33:48:c3:8c:81:74:46:08: 30:a8:b9:aa:c1:ec:5f:63:a1:c7:4a:89:ab:05:8d:2c:99:e1: eb:50:f9:ae:9d:04:e7:5c:0b:e4:0c:66:60:9b:0e:86:63:09: 99:a3:d4:af:03:0a:a4:e5:6c:36:ae:a1:8e:dc:2b:10:9e:73: b4:71:18:58:96:06:70:72:5a:9a:af:cd:cd:5c:91:c6:97:11: 4f:aa:4a:d7:93:b6:d3:86:57:40:30:a8:1b:c3:57:da:1c:96: 84:bf:ff:1e:03:f8:26:7a:5c:72:4a:ed:e2:18:30:fb:7b:79: 4b:0d:75:f7:16:20:00:72:ea:21:35:29:41:16:e7:50:84:a3: d2:a7:3b:ff:ad:35:b9:2f:8e:e8:0f:6c:2c:22:0c:9a:e3:b9: de:63:4b:ac:bf:fe:1c:30:38:5b:f8:4f:4d:a7:ee:0f:77:a5: ab:12:f2:fa:8a:1f:4d:f4:cd:80:3a:66:8a:6c:c9:d5:cc:d3: f7:4e:9e:e2:96:b1:1e:4f:f8:60:f1:27:52:f7:16:a4:ef:64: da:72:17:c2:d2:bd:97:e3:6c:00:8b:49:d5:82:7d:60:8a:11: 20:ac:01:60:31:ae:4e:5a:34:b7:d8:ab:83:03:7a:68:64:6e: d9:a7:2d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NjYxMTAvBgNVBAUTKEQ1OTU1NDJFNTIwRjQ4QUY3NUU3NzkwM0VBNjZBMzlD NjRDMUQwQTMwHhcNMjUwNDI1MDQxODM0WhcNMjUwNTAyMDQxODM0WjAYMRYwFAYD VQQDEw02ODBiMGQxYS1hZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulcbD2slrQOaS4rBsstkdRDXKWDrsedUp86epgyNTRg6PruPZgmnZp1bsVOz kdw3Tt5zfCrUbLKHU5lDRUwPbqTG8UNARDXfCvxyNSippjC6b6Rc57Q64EkuJNjG dWtxLh5QTBINzaNpfmz/HTNlWXgg8xZKuAgjKTDjDe08xITd84e6HzHzJm65Gl/O K4H/9Nbir5RLLx69npj1ILqHXea3a0ZfsGPB6OrOfAfFb4nkot8Y50ElLLingi01 FlhtmrMcQNMQn+GQ9l5r72M+k+XsBxTizJhURcMR65QD+ob4RdM0vckJxPSFiGYQ HORfHHFxjy4xy9Yq2gnkg9ztcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkf/sdu hbqz2uYRnyskwGO2KBL9MB8GA1UdIwQYMBaAFNWVVC5SD0ivded5A+pmo5xkwdCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg2Ni9GMTlEMjIwMkFG RDkxMUVFODRDNkYyN0JDNEY5QUUwMi8xWlZVTGxJUFNLOTE1M2tENm1ham5HVEIw S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFaVlVMbElQU0s5MTUza0Q2bWFqbkdUQjBLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg2Ni9GMTlEMjIwMkFGRDkxMUVFODRDNkYyN0JDNEY5QUUwMi8xWlZVTGxJUFNL OTE1M2tENm1ham5HVEIwS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAcuWcYXhmXz3DM0jDjIF0RggwqLmqwexfY6HHSomrBY0smeHrUPmu nQTnXAvkDGZgmw6GYwmZo9SvAwqk5Ww2rqGO3CsQnnO0cRhYlgZwclqar83NXJHG lxFPqkrXk7bThldAMKgbw1faHJaEv/8eA/gmelxySu3iGDD7e3lLDXX3FiAAcuoh NSlBFudQhKPSpzv/rTW5L47oD2wsIgya47neY0usv/4cMDhb+E9Np+4Pd6WrEvL6 ih9N9M2AOmaKbMnVzNP3Tp7ilrEeT/hg8SdS9xak72TachfC0r2X42wAi0nVgn1g ihEgrAFgMa5OWjS32KuDA3poZG7Zpy2J -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:48 2025 by rpki-client