$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: RyC4PyCWDM+4tT2/BOYrPdDdvstmHIaf8KeKQL6570k= Subject key identifier: DF:10:F5:BC:D0:CE:1B:8C:1D:95:84:99:C1:66:9F:3E:C5:5C:B4:08 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 0120 Signing time: Tue 17 Jun 2025 03:47:11 +0000 Manifest this update: Tue 17 Jun 2025 03:47:11 +0000 Manifest next update: Tue 24 Jun 2025 03:47:11 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: AaKwzoefKVPILonObi94UL7/yFHHQPgWOI4kfg8u/7Y=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Jun 17 03:47:11 2025 GMT Not After : Jun 24 03:47:11 2025 GMT Subject: CN=6850e53f-5cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:5e:3e:ee:64:5e:4b:54:b3:0e:84:8a:5b: ec:dc:c1:ef:2e:d1:65:9c:dd:f7:76:a7:79:ee:a7: 65:10:64:31:d9:1c:11:f4:73:b5:87:5f:b7:aa:bf: 2d:af:99:a2:67:e5:a5:ae:4c:0d:ed:1f:ae:85:c7: 5e:f0:78:fe:57:ad:a6:c3:1b:4a:6a:03:8d:18:9e: 1e:5b:8a:91:f4:15:b9:a5:87:c6:8b:0f:9b:a8:74: c5:67:ef:ae:b9:9f:1a:0e:dc:5f:6e:5c:72:16:54: d6:a2:a1:13:5a:ee:4d:78:35:47:94:f9:79:49:97: 87:81:5b:9f:d7:ea:5d:97:1d:47:12:81:c9:8c:ad: aa:15:c2:80:c6:18:e4:ac:4e:d0:8a:41:aa:db:f9: e5:66:f2:51:46:c3:17:57:b5:a4:2a:30:68:30:ce: 3e:35:d0:aa:99:f5:2d:6a:87:3e:9b:69:aa:28:0c: 9d:21:3e:22:8a:19:16:15:44:da:7f:17:5f:5d:ea: 87:83:e1:b5:ba:a9:9a:f4:dc:89:bc:c5:fc:b4:9d: be:2b:bc:97:b8:f9:ce:2f:d4:23:78:24:6b:13:b8: c2:8d:84:89:89:e4:58:23:c2:1d:b3:7e:3a:8d:09: c0:d3:70:68:bc:4b:66:58:ab:73:d0:c9:dc:fa:19: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:F5:BC:D0:CE:1B:8C:1D:95:84:99:C1:66:9F:3E:C5:5C:B4:08 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d2:68:1d:2a:f7:22:02:b2:fd:f2:b9:06:d9:ce:48:b0:3e: 3f:1a:32:89:bf:04:03:84:e6:4e:e8:a3:c8:d2:68:fc:88:e1: 90:76:af:19:69:0f:b6:37:f8:5b:53:d1:3c:1a:10:4a:5e:40: 53:e6:27:40:2e:37:f3:5a:b0:7d:41:2e:87:dd:1d:a9:e2:ce: 1a:39:92:a9:c0:1a:bc:eb:8f:9e:74:c1:19:42:68:5b:b4:df: f3:44:fa:cb:bb:5c:68:c7:99:c2:d5:3b:85:83:c2:15:df:e9: 02:4f:9f:89:29:cd:13:ee:77:8b:2a:46:3e:ab:55:ee:e1:46: 7d:56:d8:8a:86:00:bf:90:b5:7a:a2:f9:c3:4d:4e:81:3a:25: 40:c1:a3:9a:be:3e:44:6f:6d:5f:70:76:44:1c:56:eb:b3:ac: 01:a0:bb:c8:83:cb:87:8b:49:75:7e:28:26:0a:1c:8b:f8:25: dc:cf:7c:f4:9d:0a:42:51:b8:7e:87:89:f0:ce:c3:f0:1e:a2: b5:56:79:18:7a:28:37:80:97:cd:f4:e5:4a:38:30:87:67:e7: e2:a9:ce:6f:64:98:58:69:bf:d3:2d:7d:84:56:bb:b4:53:82: 19:69:c4:f5:1e:96:4f:bd:2f:cb:47:43:d0:27:f8:20:34:0d: b2:47:2a:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUwNjE3MDM0NzExWhcNMjUwNjI0MDM0NzExWjAYMRYwFAYD VQQDEw02ODUwZTUzZi01Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwdePu5kXktUsw6Eilvs3MHvLtFlnN33dqd57qdlEGQx2RwR9HO1h1+3qr8t r5miZ+WlrkwN7R+uhcde8Hj+V62mwxtKagONGJ4eW4qR9BW5pYfGiw+bqHTFZ++u uZ8aDtxfblxyFlTWoqETWu5NeDVHlPl5SZeHgVuf1+pdlx1HEoHJjK2qFcKAxhjk rE7QikGq2/nlZvJRRsMXV7WkKjBoMM4+NdCqmfUtaoc+m2mqKAydIT4iihkWFUTa fxdfXeqHg+G1uqma9NyJvMX8tJ2+K7yXuPnOL9QjeCRrE7jCjYSJieRYI8Ids346 jQnA03BovEtmWKtz0Mnc+hlkzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8Q9bzQ zhuMHZWEmcFmnz7FXLQIMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv0mgdKvciArL98rkG2c5IsD4/GjKJvwQDhOZO6KPI0mj8iOGQdq8Z aQ+2N/hbU9E8GhBKXkBT5idALjfzWrB9QS6H3R2p4s4aOZKpwBq864+edMEZQmhb tN/zRPrLu1xox5nC1TuFg8IV3+kCT5+JKc0T7neLKkY+q1Xu4UZ9VtiKhgC/kLV6 ovnDTU6BOiVAwaOavj5Eb21fcHZEHFbrs6wBoLvIg8uHi0l1figmChyL+CXcz3z0 nQpCUbh+h4nwzsPwHqK1VnkYeig3gJfN9OVKODCHZ+fiqc5vZJhYab/TLX2EVru0 U4IZacT1HpZPvS/LR0PQJ/ggNA2yRypD -----END CERTIFICATE-----Generated at Tue Jun 17 12:08:21 2025 by rpki-client