$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: fibUFsXMeRvYKorAJ9IxzhR1Q3+dCkZnJivId6JlOkE= Subject key identifier: 13:20:BA:10:21:0A:77:F9:86:B5:5A:46:2D:DD:BA:A1:32:25:F8:85 Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: 95 Signing time: Sat 03 May 2025 05:46:30 +0000 Manifest this update: Sat 03 May 2025 05:46:29 +0000 Manifest next update: Sat 10 May 2025 05:46:29 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: 5MUccCj2mLZHlU5trqv1Z4C6QRx2/AS8NvCW674k+ik=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: hLvwEFk98bWRQGRyM9lagexFlMamyjjm31+1YE8+aHE=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: qhTLRhnOO7ik7RZ20f6PHZaEkopFMfPgBZc1HXBQUng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354, serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Validity Not Before: May 3 05:46:29 2025 GMT Not After : May 10 05:46:29 2025 GMT Subject: CN=6815adb5-fb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:cb:ec:e4:81:74:23:1e:32:6e:46:99:d9: 2f:c7:93:86:70:e3:05:be:ce:45:e7:08:69:f8:d6: de:1d:35:bd:58:c6:03:ec:25:46:c8:ba:b4:64:67: 08:50:d0:63:55:5d:e0:30:fb:b9:8e:57:26:8f:4c: 56:ae:a9:83:d0:a4:89:02:f2:0b:97:a8:3b:93:db: 36:9e:4c:0d:d8:4a:77:71:d9:c3:f7:3b:63:6d:28: 9f:17:ae:16:7a:72:fe:c3:9b:4b:28:01:05:9f:b3: 94:a5:ac:fb:d4:21:02:78:3e:78:9f:49:b7:74:9d: 59:77:a5:13:5f:80:89:2c:5e:3f:2f:6a:8c:5b:37: ad:6d:d5:33:26:b0:3f:64:94:67:a4:11:9a:4e:d9: 87:74:ad:6d:6c:2e:73:be:1e:64:4a:08:7c:49:00: 70:f7:ba:c4:76:b8:b6:e9:d5:3c:d3:7e:92:70:cc: 91:81:31:bd:47:01:a2:d0:60:a6:2f:49:a6:95:52: b1:66:a6:39:9c:68:8a:d8:40:31:69:c4:ee:19:81: b0:43:2a:79:8f:7c:62:34:60:a5:7d:ea:9b:61:29: a2:da:11:1f:91:bb:28:aa:6d:fc:d3:36:da:24:dc: 61:07:ff:e0:8d:06:a5:b2:f2:99:ec:3c:1b:f3:48: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:20:BA:10:21:0A:77:F9:86:B5:5A:46:2D:DD:BA:A1:32:25:F8:85 X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:54:77:5c:99:14:b1:99:b9:2f:a1:f2:20:e2:88:96:5b:33: e7:be:d0:61:2e:4f:2c:bd:57:d6:7e:86:a3:78:a1:77:a2:5c: da:6e:a8:b7:8a:f3:87:11:ee:73:1c:68:8c:b1:3f:f9:06:89: fb:fd:93:9f:97:10:f5:40:c3:ee:ad:1b:6a:a4:9b:91:e0:72: 26:93:e6:8d:6f:4f:2f:d6:9d:df:18:a5:cf:89:1f:3d:bc:1c: aa:a2:07:de:ba:b3:7c:62:9b:80:9e:ee:68:e2:65:33:d9:a8: 97:f0:61:06:ee:bc:c6:c9:60:dd:d3:52:39:f0:c0:15:bb:db: 15:8e:de:8a:93:90:7b:e9:34:74:13:07:0d:65:56:fa:ef:f4: 8d:57:c2:e9:b7:73:e5:fb:15:06:38:c9:2b:17:8c:ad:c0:cd: 0e:87:c1:60:0e:bd:c1:21:60:45:0c:1e:31:97:9c:01:42:c2: 48:d7:ea:8c:d9:b1:be:4a:ec:84:d6:5e:29:47:ba:10:bb:6d: cf:76:da:e1:12:d2:28:ac:3a:66:0c:53:81:59:03:a7:d2:ae: 42:c6:37:43:03:55:52:fd:56:1c:ae:68:af:05:db:d8:00:23: 37:81:d0:84:83:4c:45:98:7c:9e:c1:ae:b0:74:ff:ac:65:c9: ce:3e:71:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNTQxMTAvBgNVBAUTKENFQzlCMUIzNTlGRTU4RTkwMjNBODRDRkMyNjc0QzE2 MTgyOEY5OTkwHhcNMjUwNTAzMDU0NjI5WhcNMjUwNTEwMDU0NjI5WjAYMRYwFAYD VQQDEw02ODE1YWRiNS1mYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA3L7OSBdCMeMm5Gmdkvx5OGcOMFvs5F5whp+NbeHTW9WMYD7CVGyLq0ZGcI UNBjVV3gMPu5jlcmj0xWrqmD0KSJAvILl6g7k9s2nkwN2Ep3cdnD9ztjbSifF64W enL+w5tLKAEFn7OUpaz71CECeD54n0m3dJ1Zd6UTX4CJLF4/L2qMWzetbdUzJrA/ ZJRnpBGaTtmHdK1tbC5zvh5kSgh8SQBw97rEdri26dU8036ScMyRgTG9RwGi0GCm L0mmlVKxZqY5nGiK2EAxacTuGYGwQyp5j3xiNGClfeqbYSmi2hEfkbsoqm380zba JNxhB//gjQalsvKZ7Dwb80g3owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMguhAh Cnf5hrVaRi3duqEyJfiFMB8GA1UdIwQYMBaAFM7JsbNZ/ljpAjqEz8JnTBYYKPmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM1NC84RDRFQ0Y4NDRE ODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdPa0NPb1RQd21kTUZoZ28t WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdP a0NPb1RQd21kTUZoZ28tWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+VHdcmRSxmbkvofIg4oiWWzPnvtBhLk8svVfWfoajeKF3olzabqi3 ivOHEe5zHGiMsT/5Bon7/ZOflxD1QMPurRtqpJuR4HImk+aNb08v1p3fGKXPiR89 vByqogfeurN8YpuAnu5o4mUz2aiX8GEG7rzGyWDd01I58MAVu9sVjt6Kk5B76TR0 EwcNZVb67/SNV8Lpt3Pl+xUGOMkrF4ytwM0Oh8FgDr3BIWBFDB4xl5wBQsJI1+qM 2bG+SuyE1l4pR7oQu23PdtrhEtIorDpmDFOBWQOn0q5CxjdDA1VS/VYcrmivBdvY ACM3gdCEg0xFmHyewa6wdP+sZcnOPnG1 -----END CERTIFICATE-----Generated at Sat May 3 16:32:30 2025 by rpki-client