$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: pe2/Adw//j7Lvph3tp89lvbgUQh8//Dw8jjnoDCrTUA= Subject key identifier: 54:92:0A:C7:19:02:79:4F:83:78:D7:24:09:A7:47:BE:D0:28:14:D0 Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: 43 Signing time: Fri 13 Jun 2025 06:22:37 +0000 Manifest this update: Fri 13 Jun 2025 06:22:37 +0000 Manifest next update: Fri 20 Jun 2025 06:22:37 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: epjpJuFAGDuY9pRmffIqSIzW13Ccmo58ZRpsqTpR9AA=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: WdDKCuw5AVDiVR16mU2Qcjj1sSiCL+PgjYB8nFrV9pk=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: 4BAJS9jEp9Ynl4OHeHezZt4j8Xs2i+3cxugcfAGWWgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Jun 13 06:22:37 2025 GMT Not After : Jun 20 06:22:37 2025 GMT Subject: CN=684bc3ad-611c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:8c:cb:f6:c8:4e:c7:3d:11:87:23:db:63: f8:49:69:74:34:8a:db:ef:db:7e:7d:55:e4:70:ad: 55:3b:ca:83:2c:e7:95:66:57:ae:2d:bd:2f:5f:24: f3:c0:03:d6:eb:09:e2:97:15:9a:7d:01:d7:c5:b4: 13:c9:19:8b:7b:47:c4:8e:67:9f:56:22:81:7b:9f: 79:6d:bd:1f:76:d4:90:e6:c9:bc:aa:5c:6e:0a:33: 2a:e6:43:04:b1:8d:79:f5:07:2f:2d:29:20:99:64: 18:00:81:20:8b:0e:9b:e4:53:f4:0b:e2:b0:a5:4c: 3c:d7:0e:58:08:66:14:7a:8a:2f:7d:3b:51:4b:28: 67:24:bc:ef:39:44:01:b6:d5:cd:dc:7e:92:c5:d6: 77:bf:9c:e8:70:05:42:64:e1:18:90:c4:8a:3c:8c: ea:a6:f0:b3:66:5a:11:33:d1:e1:49:50:45:88:46: 80:9c:1a:3f:b1:53:41:fa:08:8b:ca:a7:11:aa:af: e8:3c:cb:17:2a:56:e1:d5:87:d2:45:c3:bf:9e:71: 2c:a4:ae:b0:4d:dd:72:95:82:d7:cf:eb:7a:48:89: 06:66:73:0c:f6:a7:1c:4e:d0:32:06:0e:de:e5:f6: 0a:e1:4b:28:8f:f4:4e:81:82:49:6d:a3:a3:67:12: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:92:0A:C7:19:02:79:4F:83:78:D7:24:09:A7:47:BE:D0:28:14:D0 X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ac:c7:03:0c:ff:c7:85:61:7a:88:14:5a:59:2f:5d:8d:04: 73:2f:be:27:7f:1a:98:31:ef:86:cb:89:d2:59:89:80:f8:2b: a5:62:69:66:49:54:f1:8a:e1:e9:8c:36:0e:6b:05:77:a8:c5: c2:00:9c:fa:af:e4:26:84:90:5e:3b:c3:df:64:02:d2:8c:1f: 52:93:78:b5:be:14:02:cc:20:05:59:aa:b9:49:dc:f5:a5:38: 46:32:c2:79:d7:57:f5:19:35:51:6e:60:fd:c0:c1:c8:1a:69: fd:9a:06:00:fe:c5:d1:ec:2b:6f:2f:57:37:1b:7a:c7:11:c6: 51:83:0f:44:3c:0a:47:db:cc:2e:cb:a8:ff:f0:9d:e1:9a:fb: dd:b1:9d:27:33:9e:69:ee:f5:11:38:be:a3:53:22:8a:04:9d: 93:c1:5b:eb:d6:03:63:b4:fd:bf:de:77:c8:02:c2:fc:63:f9: 48:27:1e:d7:c9:7c:52:06:c0:e7:8a:d5:65:d7:cf:96:90:a1: b0:c6:16:a0:f2:b5:94:8d:87:a4:7c:46:0d:09:63:b2:e4:e0: 51:54:6f:46:e4:a2:3e:fa:6f:05:7b:80:73:fb:ce:93:7a:18: 83:0e:49:50:c9:26:9e:09:9b:42:54:22:5c:a9:63:5f:59:2b: 5c:38:c5:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTU1NzExMC8GA1UEBRMoNjdDRTNEOUMyNkExNEJDREZGOUIzMzk0RDMzNTU3NjY4 MjE4QTE1NjAeFw0yNTA2MTMwNjIyMzdaFw0yNTA2MjAwNjIyMzdaMBgxFjAUBgNV BAMTDTY4NGJjM2FkLTYxMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNN4zL9shOxz0RhyPbY/hJaXQ0itvv2359VeRwrVU7yoMs55VmV64tvS9fJPPA A9brCeKXFZp9AdfFtBPJGYt7R8SOZ59WIoF7n3ltvR921JDmybyqXG4KMyrmQwSx jXn1By8tKSCZZBgAgSCLDpvkU/QL4rClTDzXDlgIZhR6ii99O1FLKGckvO85RAG2 1c3cfpLF1ne/nOhwBUJk4RiQxIo8jOqm8LNmWhEz0eFJUEWIRoCcGj+xU0H6CIvK pxGqr+g8yxcqVuHVh9JFw7+ecSykrrBN3XKVgtfP63pIiQZmcwz2pxxO0DIGDt7l 9grhSyiP9E6Bgklto6NnEmH/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVJIKxxkC eU+DeNckCadHvtAoFNAwHwYDVR0jBBgwFoAUZ849nCahS83/mzOU0zVXZoIYoVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNTU3LzkyNjgzRTNBRTg2 QzExRUZCMjMyMDU2RUM0RjlBRTAyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9W WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjg0OW5DYWhTODNfbXpPVTB6Vlhab0lZb1ZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NTU3LzkyNjgzRTNBRTg2QzExRUZCMjMyMDU2RUM0RjlBRTAyL1o4NDluQ2FoUzgz X216T1UwelZYWm9JWW9WWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2sxwMM/8eFYXqIFFpZL12NBHMvvid/Gpgx74bLidJZiYD4K6ViaWZJ VPGK4emMNg5rBXeoxcIAnPqv5CaEkF47w99kAtKMH1KTeLW+FALMIAVZqrlJ3PWl OEYywnnXV/UZNVFuYP3Awcgaaf2aBgD+xdHsK28vVzcbescRxlGDD0Q8CkfbzC7L qP/wneGa+92xnScznmnu9RE4vqNTIooEnZPBW+vWA2O0/b/ed8gCwvxj+UgnHtfJ fFIGwOeK1WXXz5aQobDGFqDytZSNh6R8Rg0JY7Lk4FFUb0bkoj76bwV7gHP7zpN6 GIMOSVDJJp4Jm0JUIlypY19ZK1w4xeE= -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:57 2025 by rpki-client