$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: sbTR248lFAuQBfa+IuDjF5GXFt2pIY0sHaeYYNkGGTw= Subject key identifier: B6:54:84:EB:DC:2A:7D:E0:21:45:86:D8:76:91:69:84:93:11:49:9B Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 111A Signing time: Sat 14 Jun 2025 17:12:45 +0000 Manifest this update: Sat 14 Jun 2025 17:12:45 +0000 Manifest next update: Sat 21 Jun 2025 17:12:45 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: QixNllOj8q79dn9Huh6VEgGyMXC3VX1o8zDKx42abXQ=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4386 (0x1122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Jun 14 17:12:45 2025 GMT Not After : Jun 21 17:12:45 2025 GMT Subject: CN=684dad8d-862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:70:89:b3:40:75:11:1d:76:b9:e8:4e:e3: 80:b1:94:84:79:9e:0a:d1:e7:e6:58:cd:27:b4:b3: 37:a4:66:fc:b2:1f:72:b1:40:5d:36:be:66:1a:03: cb:38:eb:40:69:b4:b0:e7:54:11:2c:8c:15:e7:2c: ac:39:70:01:73:20:b3:af:f5:49:44:8d:3e:4f:20: 3c:f1:04:7c:4a:6e:00:f4:36:c0:b5:cd:d5:39:1d: 03:b7:5b:3a:cb:29:7e:09:bf:68:a3:ed:8f:9b:88: 8b:c3:9e:a1:61:d8:9d:12:a9:1f:29:37:6f:10:44: 36:88:19:5b:70:66:68:a6:15:96:f6:ee:65:8c:2c: 79:7f:89:4d:14:e9:f4:36:d2:d1:86:7a:6b:e6:47: 40:cb:12:33:13:41:d6:ba:72:69:ea:2b:34:ba:f3: 03:ef:b4:61:20:ca:96:17:d3:41:3e:77:38:35:50: 78:67:ff:2d:8f:63:b6:ce:6b:5b:eb:5e:b1:23:7e: 05:fd:b0:c0:a1:04:8e:eb:e7:e8:a1:ee:21:18:70: 40:2e:29:ee:72:4b:3c:a6:48:25:a8:46:49:23:d6: 28:73:92:e2:9d:af:c1:09:38:3b:d6:90:53:7f:32: 88:f2:74:a2:1a:be:d6:c5:8a:df:c5:cf:cd:f4:58: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:54:84:EB:DC:2A:7D:E0:21:45:86:D8:76:91:69:84:93:11:49:9B X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7a:5d:c0:3e:3c:fc:37:33:70:8b:37:cf:ad:8a:08:44:15: c9:5e:9c:43:0e:b9:c5:aa:e1:75:4d:bb:9b:11:96:1b:4d:fd: 2c:51:22:b0:76:0f:c5:ce:47:a7:e9:a5:fb:75:92:79:37:c6: 4e:56:45:f5:e9:68:10:7a:ac:f0:7c:22:ea:b7:36:3f:d0:11: e7:35:a9:8b:80:58:0f:9c:a4:75:5a:72:53:04:08:5a:17:31: 74:d1:e9:4c:74:72:d8:5f:73:73:78:39:4d:7f:27:df:94:26: e6:52:de:7a:48:4c:e1:90:6a:80:21:3b:50:03:e4:ac:0a:c9: fe:56:d7:c1:c4:a2:35:1f:95:c9:99:50:3e:66:6c:74:7c:f9: 44:d2:84:16:6f:ad:51:8c:86:7f:e7:0c:90:17:7a:16:ca:cc: eb:c5:ef:fe:dd:64:29:c1:c9:ac:f3:b4:f7:1f:b9:70:1f:e4: 51:34:f6:3b:05:e9:43:aa:8f:fe:58:72:07:91:f6:3d:bf:24: e4:3b:73:81:37:1b:a6:e9:4f:55:95:93:9e:de:f7:49:d1:a6: 73:19:74:e0:f2:3a:c9:28:ed:66:4b:7a:33:90:8e:34:b0:84: e1:8c:35:de:1c:06:fa:c3:2c:f1:21:98:00:6d:da:98:ff:52: fc:9f:42:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUwNjE0MTcxMjQ1WhcNMjUwNjIxMTcxMjQ1WjAYMRYwFAYD VQQDEw02ODRkYWQ4ZC04NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGtwibNAdREddrnoTuOAsZSEeZ4K0efmWM0ntLM3pGb8sh9ysUBdNr5mGgPL OOtAabSw51QRLIwV5yysOXABcyCzr/VJRI0+TyA88QR8Sm4A9DbAtc3VOR0Dt1s6 yyl+Cb9oo+2Pm4iLw56hYdidEqkfKTdvEEQ2iBlbcGZophWW9u5ljCx5f4lNFOn0 NtLRhnpr5kdAyxIzE0HWunJp6is0uvMD77RhIMqWF9NBPnc4NVB4Z/8tj2O2zmtb 616xI34F/bDAoQSO6+fooe4hGHBALinucks8pkglqEZJI9Yoc5Lina/BCTg71pBT fzKI8nSiGr7WxYrfxc/N9Fi06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZUhOvc Kn3gIUWG2HaRaYSTEUmbMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7el3APjz8NzNwizfPrYoIRBXJXpxDDrnFquF1TbubEZYbTf0sUSKw dg/Fzken6aX7dZJ5N8ZOVkX16WgQeqzwfCLqtzY/0BHnNamLgFgPnKR1WnJTBAha FzF00elMdHLYX3NzeDlNfyfflCbmUt56SEzhkGqAITtQA+SsCsn+VtfBxKI1H5XJ mVA+Zmx0fPlE0oQWb61RjIZ/5wyQF3oWyszrxe/+3WQpwcms87T3H7lwH+RRNPY7 BelDqo/+WHIHkfY9vyTkO3OBNxum6U9VlZOe3vdJ0aZzGXTg8jrJKO1mS3ozkI40 sIThjDXeHAb6wyzxIZgAbdqY/1L8n0Je -----END CERTIFICATE-----Generated at Sun Jun 15 05:50:32 2025 by rpki-client