$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: kzM+ANSHp6NCfc45xfdjxcvL5UbOvqRO8uKzsXmG1VM= Subject key identifier: 64:23:A6:10:17:9D:1E:B8:7B:21:7E:A8:DE:92:75:DD:99:4A:96:6E Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: DB Signing time: Fri 25 Apr 2025 15:44:34 +0000 Manifest this update: Fri 25 Apr 2025 15:44:33 +0000 Manifest next update: Fri 02 May 2025 15:44:33 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: Z6ZHApZ2eiCM3l7iRSFMBpTg2M6OR7PqE1r/d7A8EXE=) 2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: aHVJTpWDHGU0Bcrlo4rBrarOkBF9q7lS/3bS8x602qo=) 3: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=) 4: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=) 5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 15:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Apr 25 15:44:33 2025 GMT Not After : May 2 15:44:33 2025 GMT Subject: CN=680bade1-2956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:44:9f:02:eb:29:62:39:4f:54:07:62:61: 19:60:ac:e2:14:c2:74:cd:33:f9:72:ea:58:e6:cb: d3:47:c3:1a:3d:de:8c:41:4e:50:5c:67:d1:07:87: a1:0f:e7:ad:ab:e3:46:a2:b0:5c:08:93:6b:40:f6: 72:3d:08:14:3b:55:83:89:f4:18:9a:a1:f6:8d:14: 9c:6c:d9:82:84:c7:79:96:22:1e:0c:64:5f:da:93: 8b:5c:2f:d8:b3:e8:83:9d:28:53:b5:e8:3f:89:43: 29:1e:f2:50:b0:52:40:9b:0a:5e:6d:68:08:6f:ae: 3e:3f:e1:14:3f:b2:d4:6b:d1:50:92:80:35:20:4e: b1:e8:4e:34:94:0b:ea:1b:a3:c6:09:c2:27:8c:a9: 87:5e:58:6f:8c:fa:36:aa:3e:b2:be:ad:f8:d5:e9: f8:32:e6:7b:55:8e:a3:c0:d1:0c:39:07:ec:2b:0b: 21:5b:68:37:c4:1d:3f:6f:90:a1:17:2e:bf:94:59: e9:a4:c3:46:13:d8:1d:68:76:b9:d0:fd:15:50:a5: 38:5a:57:9c:f4:3a:99:f4:82:f9:fe:56:73:e7:17: 91:0c:48:7b:d6:b7:dd:7f:86:99:1a:15:fc:27:1a: a5:8b:0c:da:f9:12:ba:ff:11:9d:51:c7:17:11:8f: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:23:A6:10:17:9D:1E:B8:7B:21:7E:A8:DE:92:75:DD:99:4A:96:6E X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3e:f7:c3:cd:01:cd:9b:f1:eb:6c:a4:17:84:4d:c0:36:99: b8:14:9f:38:fc:a9:fe:7b:37:4b:9f:35:45:a8:4c:b4:00:5f: b3:9e:66:d4:42:6d:16:d7:e5:4a:df:24:53:29:a0:94:17:fc: e1:3d:a5:a9:a3:a5:a6:b1:82:da:38:41:89:53:cb:ca:8a:ba: d3:67:f1:0e:92:1c:73:9d:b5:6c:4a:c8:84:61:9d:29:59:38: 45:88:ea:e5:b0:8b:4e:c8:dd:b3:a3:67:83:bc:d1:87:c2:e6: fb:21:79:ed:2f:b4:1c:d9:4a:43:9a:6b:a8:2e:9f:37:36:ef: f1:0c:77:60:6a:90:86:ed:21:c3:90:87:ca:e9:51:68:ee:7a: 54:bb:ab:d9:af:bd:d6:f5:0e:53:32:23:f6:ed:3b:a7:07:8e: c0:1b:fe:f7:64:48:45:09:31:ed:b1:e6:e9:26:c3:22:1d:84: 08:68:a4:49:d7:8a:bd:ef:43:6a:9b:ea:fd:e6:d0:83:a0:7c: a9:2e:d6:c0:f0:75:a0:9d:17:5f:1e:e1:be:6e:bd:12:d9:80: 32:cf:00:6a:b6:46:5a:1c:b2:e0:fa:35:3d:05:d9:99:37:56: 94:75:c7:2a:fe:b0:83:e3:cd:32:59:f2:b5:bc:a5:1a:d6:dc: 79:f8:b4:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUwNDI1MTU0NDMzWhcNMjUwNTAyMTU0NDMzWjAYMRYwFAYD VQQDEw02ODBiYWRlMS0yOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucFEnwLrKWI5T1QHYmEZYKziFMJ0zTP5cupY5svTR8MaPd6MQU5QXGfRB4eh D+etq+NGorBcCJNrQPZyPQgUO1WDifQYmqH2jRScbNmChMd5liIeDGRf2pOLXC/Y s+iDnShTteg/iUMpHvJQsFJAmwpebWgIb64+P+EUP7LUa9FQkoA1IE6x6E40lAvq G6PGCcInjKmHXlhvjPo2qj6yvq341en4MuZ7VY6jwNEMOQfsKwshW2g3xB0/b5Ch Fy6/lFnppMNGE9gdaHa50P0VUKU4Wlec9DqZ9IL5/lZz5xeRDEh71rfdf4aZGhX8 Jxqliwza+RK6/xGdUccXEY+M7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQjphAX nR64eyF+qN6Sdd2ZSpZuMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxPvfDzQHNm/HrbKQXhE3ANpm4FJ84/Kn+ezdLnzVFqEy0AF+znmbU Qm0W1+VK3yRTKaCUF/zhPaWpo6WmsYLaOEGJU8vKirrTZ/EOkhxznbVsSsiEYZ0p WThFiOrlsItOyN2zo2eDvNGHwub7IXntL7Qc2UpDmmuoLp83Nu/xDHdgapCG7SHD kIfK6VFo7npUu6vZr73W9Q5TMiP27TunB47AG/73ZEhFCTHtsebpJsMiHYQIaKRJ 14q970Nqm+r95tCDoHypLtbA8HWgnRdfHuG+br0S2YAyzwBqtkZaHLLg+jU9BdmZ N1aUdccq/rCD480yWfK1vKUa1tx5+LQz -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:35 2025 by rpki-client