$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: Mf6unOhCDF+gHIAQKkM9TEQDo/n7AyYDiP+J7u674Gc= Subject key identifier: B4:2C:51:DD:CE:9D:00:C3:E0:B0:72:67:0E:40:4B:CF:8C:5A:C5:71 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 091D Signing time: Wed 18 Jun 2025 20:08:24 +0000 Manifest this update: Wed 18 Jun 2025 20:08:24 +0000 Manifest next update: Wed 25 Jun 2025 20:08:24 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: FeJaxeWKNvZBh3hub3SmXT9rD4z9jZUDm4/VZBfu0fc=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339 (0x923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Jun 18 20:08:24 2025 GMT Not After : Jun 25 20:08:24 2025 GMT Subject: CN=68531cb8-208e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ad:04:d0:1c:47:be:eb:e9:50:2d:f5:b2:3f: 9a:90:25:1e:bd:3f:a3:30:27:a0:c4:39:aa:ac:e8: c2:ba:bf:e1:0c:45:ba:0d:10:91:0a:50:0f:e4:ee: d3:c3:10:83:c8:71:43:cb:f7:85:7d:88:28:dd:ea: c7:ac:24:a6:b2:9d:ce:27:15:52:18:55:f4:61:cd: eb:35:fd:48:3e:61:c5:8e:da:f1:56:f8:06:8f:4d: 1f:88:04:e1:c7:76:67:d8:a7:5e:61:d5:ab:c9:c4: 1b:2c:5f:79:6a:5b:ae:e4:bb:84:d9:a1:c0:9e:77: 8c:32:70:1a:66:1e:2a:f6:92:c1:70:a7:2f:fe:8b: a7:96:9a:b8:c7:91:7d:d6:3e:6c:d2:8a:df:c9:f1: 14:9f:9a:83:09:38:6a:2c:c6:56:d5:97:84:fe:e1: 35:76:35:00:f3:d3:e4:21:1a:e9:43:4d:c3:c3:17: 6b:b5:01:df:0e:e0:23:d0:f8:bc:f9:ba:6b:d9:d4: 01:6b:c6:c4:67:64:c3:cc:58:ef:12:65:db:11:8f: 17:9f:9c:ff:98:0d:6c:5a:73:81:31:3e:94:ed:ce: 53:16:8f:92:1f:fd:db:f3:bf:b8:f4:63:aa:4f:4c: 41:16:da:f3:ec:fa:5c:01:de:99:86:4e:01:a5:de: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2C:51:DD:CE:9D:00:C3:E0:B0:72:67:0E:40:4B:CF:8C:5A:C5:71 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:31:ad:06:3a:d8:8a:16:72:c4:08:58:f1:17:49:1b:32:4f: 97:d7:b5:d8:8e:d8:84:f7:8c:2c:7e:4d:5f:3b:4b:25:13:47: 70:93:27:e0:6a:69:df:9d:1b:4d:f8:41:05:8c:34:f5:31:ac: e0:5e:fc:e6:b0:d3:e6:31:c3:fb:f9:4d:c5:2e:43:74:27:36: 9a:07:34:9a:57:36:77:1e:b5:56:7b:c6:cf:95:6e:01:57:64: 42:cc:84:97:47:e7:fd:6f:49:19:fd:80:36:fd:46:6c:3b:5f: a4:52:36:b7:7f:7e:82:fc:66:46:fe:0d:10:11:ff:6c:a1:0d: b8:90:ab:7d:1a:5f:ff:99:9c:8a:45:98:1b:06:8a:91:ca:4d: c1:aa:65:a3:9d:9b:bf:85:97:d5:f6:9b:e1:3a:a8:be:4b:dd: d1:a4:79:dc:df:33:05:52:2e:42:d9:36:f6:28:71:eb:aa:da: e0:46:3a:84:f4:47:07:f1:1a:fe:64:43:ef:b9:46:86:25:73: d0:98:6f:bf:fc:ab:b2:b3:30:92:01:21:21:fc:15:b3:b8:dd: eb:be:6b:89:b6:8e:74:2f:11:d9:2a:78:ca:3c:8e:e6:c4:21: 59:28:c5:24:fb:fc:a1:5b:ea:39:4c:e8:2a:d9:46:1d:3d:d0: 53:77:91:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUwNjE4MjAwODI0WhcNMjUwNjI1MjAwODI0WjAYMRYwFAYD VQQDEw02ODUzMWNiOC0yMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9a0E0BxHvuvpUC31sj+akCUevT+jMCegxDmqrOjCur/hDEW6DRCRClAP5O7T wxCDyHFDy/eFfYgo3erHrCSmsp3OJxVSGFX0Yc3rNf1IPmHFjtrxVvgGj00fiATh x3Zn2KdeYdWrycQbLF95aluu5LuE2aHAnneMMnAaZh4q9pLBcKcv/ounlpq4x5F9 1j5s0orfyfEUn5qDCThqLMZW1ZeE/uE1djUA89PkIRrpQ03DwxdrtQHfDuAj0Pi8 +bpr2dQBa8bEZ2TDzFjvEmXbEY8Xn5z/mA1sWnOBMT6U7c5TFo+SH/3b87+49GOq T0xBFtrz7PpcAd6Zhk4Bpd77KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQsUd3O nQDD4LByZw5AS8+MWsVxMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkMa0GOtiKFnLECFjxF0kbMk+X17XYjtiE94wsfk1fO0slE0dwkyfg amnfnRtN+EEFjDT1MazgXvzmsNPmMcP7+U3FLkN0JzaaBzSaVzZ3HrVWe8bPlW4B V2RCzISXR+f9b0kZ/YA2/UZsO1+kUja3f36C/GZG/g0QEf9soQ24kKt9Gl//mZyK RZgbBoqRyk3BqmWjnZu/hZfV9pvhOqi+S93RpHnc3zMFUi5C2Tb2KHHrqtrgRjqE 9EcH8Rr+ZEPvuUaGJXPQmG+//KuyszCSASEh/BWzuN3rvmuJto50LxHZKnjKPI7m xCFZKMUk+/yhW+o5TOgq2UYdPdBTd5H9 -----END CERTIFICATE-----Generated at Fri Jun 20 20:54:37 2025 by rpki-client