$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: ENLHVS/96O0CVzotYgYetPzJxhjBvtAgXnvuvwrl3Sg= Subject key identifier: 63:8A:9F:AC:77:ED:DE:22:D6:E1:DC:4D:D1:91:42:CD:FC:99:B0:C7 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: C3 Signing time: Sun 15 Jun 2025 04:57:27 +0000 Manifest this update: Sun 15 Jun 2025 04:57:27 +0000 Manifest next update: Sun 22 Jun 2025 04:57:27 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: llPdxjnuoiYW13UsTz0mqChCIUjYJKXGXaS9yjCUhAI=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Jun 15 04:57:27 2025 GMT Not After : Jun 22 04:57:27 2025 GMT Subject: CN=684e52b7-21dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:54:49:ea:b7:a6:1a:4e:fe:df:2b:d8:4c: f0:c7:1b:88:cb:c0:e9:0f:41:d2:88:fd:fb:de:70: ae:18:c8:ac:2b:a6:78:af:7f:48:bb:37:97:14:0f: ae:84:79:fa:46:70:94:5f:23:a3:c6:e5:b5:25:64: bd:01:62:b6:74:6b:fb:10:fd:1f:88:9e:98:26:3b: 02:28:fb:68:7b:dd:19:98:5d:f7:c9:23:c7:fb:41: e3:0e:a5:ab:cd:97:2b:71:a4:8a:6d:c8:18:0d:ce: 36:bb:65:fa:6a:60:0e:5a:7c:f6:d0:8e:40:da:53: 74:8b:28:3b:2f:60:46:24:59:38:86:32:62:5a:2d: 86:03:e9:b9:ee:f4:3a:25:a8:85:26:70:6a:ba:c5: f0:88:ba:ff:e1:ea:6d:db:e9:85:92:85:4e:de:f3: 4c:a6:cf:56:3c:c0:4d:9c:0b:f5:18:1c:8f:30:c7: 2d:81:b7:fc:c4:ce:29:8e:6b:33:b1:d8:45:3e:cb: cb:bf:f7:00:c8:5d:fa:70:83:60:c1:5e:d0:fd:ec: 7e:4a:94:55:7c:de:ed:ac:11:d9:c0:c6:88:3c:40: bc:a5:f9:60:40:1e:bd:c2:cc:f4:87:f3:6d:be:29: 9a:61:61:64:e2:7b:1c:ed:d2:b6:b3:8f:ac:40:2f: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8A:9F:AC:77:ED:DE:22:D6:E1:DC:4D:D1:91:42:CD:FC:99:B0:C7 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ae:ed:91:0b:b3:4a:b2:a6:4e:fb:f3:98:60:4b:8d:5a:50: db:ab:7f:ab:a2:9d:5b:e2:f6:25:63:7d:bf:c7:4d:a8:82:48: 7d:03:23:b2:97:70:a9:bd:a3:8e:6f:32:f7:78:32:91:6d:7d: 3d:f3:ad:11:d2:11:1f:16:7c:a8:36:60:66:f1:63:85:bf:97: cd:b6:dc:46:fc:59:ee:36:f2:66:18:01:a0:27:06:fc:bd:93: 06:df:33:13:f8:94:70:64:7c:cf:28:93:f4:1b:a7:9f:d7:0b: eb:a9:64:fc:08:09:6c:c1:dc:5b:1d:60:36:19:b9:7a:9b:f0: 35:53:76:9d:60:40:49:6d:44:30:df:fa:b7:c2:f9:64:57:ba: 31:f8:3e:93:9a:7a:7d:ba:cf:2f:93:40:ca:a0:25:32:f4:79: d9:bc:0f:52:b9:29:da:74:36:1c:e8:52:07:57:a4:61:a4:c5: 9d:a5:d1:3b:3c:75:cb:b0:05:1b:eb:d8:7c:c5:a9:d8:31:53: 1d:e4:4d:7c:2b:06:9d:f0:b3:bf:35:f0:93:e9:43:57:5e:61: 3c:46:b5:5a:14:1b:75:11:10:df:35:83:84:fb:7f:5a:d4:fa: 00:df:ab:5e:b1:e2:50:fc:5d:e9:cb:8b:75:63:ff:9d:17:03: 97:97:d3:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwNjE1MDQ1NzI3WhcNMjUwNjIyMDQ1NzI3WjAYMRYwFAYD VQQDEw02ODRlNTJiNy0yMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1BUSeq3phpO/t8r2EzwxxuIy8DpD0HSiP373nCuGMisK6Z4r39IuzeXFA+u hHn6RnCUXyOjxuW1JWS9AWK2dGv7EP0fiJ6YJjsCKPtoe90ZmF33ySPH+0HjDqWr zZcrcaSKbcgYDc42u2X6amAOWnz20I5A2lN0iyg7L2BGJFk4hjJiWi2GA+m57vQ6 JaiFJnBqusXwiLr/4ept2+mFkoVO3vNMps9WPMBNnAv1GByPMMctgbf8xM4pjmsz sdhFPsvLv/cAyF36cINgwV7Q/ex+SpRVfN7trBHZwMaIPEC8pflgQB69wsz0h/Nt vimaYWFk4nsc7dK2s4+sQC84GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOKn6x3 7d4i1uHcTdGRQs38mbDHMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADru2RC7NKsqZO+/OYYEuNWlDbq3+rop1b4vYlY32/x02ogkh9AyOy l3CpvaOObzL3eDKRbX09860R0hEfFnyoNmBm8WOFv5fNttxG/FnuNvJmGAGgJwb8 vZMG3zMT+JRwZHzPKJP0G6ef1wvrqWT8CAlswdxbHWA2Gbl6m/A1U3adYEBJbUQw 3/q3wvlkV7ox+D6Tmnp9us8vk0DKoCUy9HnZvA9SuSnadDYc6FIHV6RhpMWdpdE7 PHXLsAUb69h8xanYMVMd5E18Kwad8LO/NfCT6UNXXmE8RrVaFBt1ERDfNYOE+39a 1PoA36teseJQ/F3py4t1Y/+dFwOXl9Oh -----END CERTIFICATE-----Generated at Sun Jun 15 10:27:01 2025 by rpki-client