$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: YxMgulJeMgCu/HhS+k7OmYwayBxHkXqGLbsd8wCRDog= Subject key identifier: FC:06:58:EB:8E:93:A2:BB:36:4E:02:B2:F9:3A:0F:53:91:8E:37:6F Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 01D2 Signing time: Fri 25 Apr 2025 02:00:58 +0000 Manifest this update: Fri 25 Apr 2025 02:00:58 +0000 Manifest next update: Fri 02 May 2025 02:00:57 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: cih86Nuw97ws3nXL9/KaAlsnoSZx798yfchuowmaD8I=) 2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: X2hAsppM/jRjKRsLmyjCzm5Ax50DSNDAipyDKhugtZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: Apr 25 02:00:58 2025 GMT Not After : May 2 02:00:57 2025 GMT Subject: CN=680aecda-76da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:33:50:30:7b:2c:2d:c3:13:26:90:23:4d: 1d:57:8a:d1:79:71:1e:6b:05:79:21:d3:dd:91:3b: 2b:d1:ea:37:ef:a9:d9:79:f5:97:81:5b:92:2b:0f: e4:6e:a9:6c:6c:61:b2:fe:82:e7:cf:3d:40:be:eb: dc:08:36:8b:e8:88:ca:b9:be:0d:5f:10:94:73:a4: c7:3e:c9:d7:8a:86:6f:e0:0e:b4:4d:8a:ca:8a:5f: e4:61:8f:43:0b:56:dd:9f:5f:16:76:d3:d6:27:8f: 66:a1:f2:c7:10:29:da:a8:fa:f3:75:e7:b6:59:f1: 79:22:18:ad:2f:55:55:6d:13:db:5f:83:76:6e:ac: 59:c9:39:36:4a:01:cc:15:32:f4:b6:5a:36:6f:b8: 9c:af:94:f4:e7:a6:a0:54:fa:54:54:fb:83:e5:be: ab:4c:30:1d:e2:45:e4:cc:ef:2f:1f:02:3f:6a:9e: dd:e7:f9:df:87:88:37:0b:51:97:fa:00:01:d6:95: ae:c3:f0:65:83:42:d9:8d:ed:d8:27:18:29:37:1c: e1:03:e1:6b:c0:67:ea:36:e1:a3:d1:50:c2:fd:b4: ed:e2:d4:1a:d8:a0:4f:6d:10:3a:86:54:de:66:62: b7:ea:8c:d5:b7:35:9c:58:29:30:e4:78:1d:29:8b: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:06:58:EB:8E:93:A2:BB:36:4E:02:B2:F9:3A:0F:53:91:8E:37:6F X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:02:25:2a:e2:55:ef:9b:89:25:4c:48:e6:18:3e:c3:94:61: 0a:76:c6:4d:87:44:b9:ba:9e:0e:b1:cb:78:e3:b1:fa:b1:44: a9:ad:53:34:ea:e9:d0:03:20:fa:59:da:29:e1:18:70:f0:2e: 87:80:a4:6e:b4:83:99:a9:b0:d2:66:1a:e9:6e:72:41:04:6f: 15:a7:d1:46:9e:bd:eb:58:84:26:6c:c9:ee:d5:df:c9:a9:9e: 79:9d:83:f5:a3:3c:66:86:a5:4f:ed:c7:67:6a:8c:4b:e2:c3: cb:50:bb:23:67:17:9c:fd:60:64:6f:1b:25:ff:cc:2c:cc:57: ea:54:31:c7:3b:81:bf:03:df:9c:37:60:27:fc:73:44:a2:af: 88:3e:41:3c:ee:94:52:19:d4:a2:88:b3:89:af:15:1b:fb:a3: 5f:fe:7c:df:cd:1f:ce:26:6c:ab:7a:69:c7:cb:d3:71:bb:2f: 9c:45:81:83:0f:28:b8:17:91:1e:50:95:3d:d6:29:be:b8:de: 30:3b:fd:e5:4d:78:7f:08:66:32:56:4a:ea:02:20:ef:17:79: 0a:43:d4:da:d3:77:2e:89:b7:c6:e0:a6:83:d7:36:b1:b6:6b: 2b:81:06:b2:d9:24:47:60:38:53:7e:cd:4f:cf:83:4f:60:47: ff:67:35:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjUwNDI1MDIwMDU4WhcNMjUwNTAyMDIwMDU3WjAYMRYwFAYD VQQDEw02ODBhZWNkYS03NmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RAzUDB7LC3DEyaQI00dV4rReXEeawV5IdPdkTsr0eo376nZefWXgVuSKw/k bqlsbGGy/oLnzz1AvuvcCDaL6IjKub4NXxCUc6THPsnXioZv4A60TYrKil/kYY9D C1bdn18WdtPWJ49mofLHECnaqPrzdee2WfF5IhitL1VVbRPbX4N2bqxZyTk2SgHM FTL0tlo2b7icr5T056agVPpUVPuD5b6rTDAd4kXkzO8vHwI/ap7d5/nfh4g3C1GX +gAB1pWuw/Blg0LZje3YJxgpNxzhA+FrwGfqNuGj0VDC/bTt4tQa2KBPbRA6hlTe ZmK36ozVtzWcWCkw5HgdKYvazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwGWOuO k6K7Nk4Csvk6D1ORjjdvMB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbAiUq4lXvm4klTEjmGD7DlGEKdsZNh0S5up4Osct447H6sUSprVM0 6unQAyD6Wdop4Rhw8C6HgKRutIOZqbDSZhrpbnJBBG8Vp9FGnr3rWIQmbMnu1d/J qZ55nYP1ozxmhqVP7cdnaoxL4sPLULsjZxec/WBkbxsl/8wszFfqVDHHO4G/A9+c N2An/HNEoq+IPkE87pRSGdSiiLOJrxUb+6Nf/nzfzR/OJmyremnHy9Nxuy+cRYGD Dyi4F5EeUJU91im+uN4wO/3lTXh/CGYyVkrqAiDvF3kKQ9Ta03cuibfG4KaD1zax tmsrgQay2SRHYDhTfs1Pz4NPYEf/ZzVU -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:00 2025 by rpki-client