$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json) Hash identifier: jLXKLZvAUplrcM0ShKxVeJgejkXGfIRFGyIReJY5g3k= Subject key identifier: 9A:C7:75:E0:62:E4:4A:B3:EA:A8:CE:E5:76:1B:D8:D2:8E:AA:AE:04 Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 13D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft Manifest number: 13CA Signing time: Mon 16 Jun 2025 16:59:35 +0000 Manifest this update: Mon 16 Jun 2025 16:59:35 +0000 Manifest next update: Mon 23 Jun 2025 16:59:35 +0000 Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: SZ8TTr0n+E3vzvQ0OVdJ6EfK2UhMUozQc3hwq9y5HJ0=) 2: A59866188BC311E88445685EC4F9AE02.roa (hash: UY4nyIE+VkK/iFAfXsE3PqiNSHJ4rK/Ulyy62xkzmis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5073 (0x13d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Jun 16 16:59:35 2025 GMT Not After : Jun 23 16:59:35 2025 GMT Subject: CN=68504d77-aa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:9e:e4:bc:95:94:75:e8:ce:33:5f:e2:78:ce: c2:9f:b0:88:22:36:8b:2e:8d:c7:93:c3:0f:d2:ea: ef:b7:a9:c7:6d:aa:dc:64:f0:76:8d:9d:fd:0a:ca: 86:69:23:62:b9:e1:b3:c8:fa:85:4c:1f:19:ca:a2: 90:6d:d6:d2:5f:54:1d:83:22:21:03:cc:f1:a6:f3: 7c:9a:bd:d4:ff:b7:a7:ee:86:05:f6:2b:ea:61:a6: 1a:bc:cd:7d:c5:cf:dc:d6:b5:d7:51:a6:2f:f6:47: 1f:23:fd:1e:9b:96:41:c3:f8:11:15:ce:e4:83:07: 2a:52:55:c8:ed:6a:47:bc:49:30:3b:13:89:42:9a: 69:b2:e9:1d:d8:cf:ba:ca:a5:ca:d5:62:9f:55:6b: 22:a4:53:64:e5:31:4c:cb:fe:4c:bf:23:42:e7:3a: 2e:62:f5:f2:e2:b9:73:98:7b:44:e5:33:62:f1:17: 1c:8e:c5:a1:5b:bf:7e:da:f6:b7:d8:87:c2:80:26: 8b:5d:77:03:34:45:eb:e9:fa:34:c4:10:be:d4:28: c4:99:01:bc:17:5d:4a:5c:2f:a4:dc:40:80:45:c6: 24:58:c8:8f:f1:e9:8c:4d:cd:19:ff:55:5b:04:58: d0:f0:21:98:f6:5c:28:03:46:f0:1d:38:05:62:33: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:75:E0:62:E4:4A:B3:EA:A8:CE:E5:76:1B:D8:D2:8E:AA:AE:04 X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:e9:5d:89:42:78:66:63:13:b9:1a:ba:a8:2c:5d:31:14: f3:05:0d:14:7e:ee:5f:a1:a1:f9:0c:1d:a6:e0:af:98:0d:8e: d1:61:03:98:95:ac:dd:4c:4c:56:e8:6c:a3:c8:89:a5:80:ee: 8b:3e:84:33:cf:c1:99:77:70:5c:cb:8b:1f:9b:50:eb:f9:be: 6e:0e:14:7f:4f:b7:5a:f6:7f:88:94:09:81:c6:07:1f:b0:00: 7f:32:00:f4:94:d0:b9:ce:46:1d:c1:dd:2e:b2:ac:95:b8:f4: b0:49:98:90:e0:da:6b:84:74:99:df:99:89:66:34:03:dc:03: 5a:93:14:7a:f1:37:3e:e6:d0:72:16:66:1d:d4:2d:25:1e:d3: 95:3c:bf:28:5c:5a:64:00:2d:ec:5b:3a:29:e9:4c:66:a3:5f: f9:24:e5:c7:7c:b4:cc:de:36:5e:59:3c:96:46:ae:58:cb:bd: af:54:bf:ac:bc:ce:7e:43:1d:c6:4b:ab:5e:38:50:93:27:fa: 3a:e6:1e:0f:07:f5:c2:3d:8e:f6:35:ab:10:23:7a:4d:5e:ad: da:d5:3b:af:3d:e5:75:e4:ff:e8:e3:09:0b:e3:47:e0:85:b8: 9e:03:c4:96:a7:9c:23:26:b7:7d:46:9b:44:cc:d2:a4:78:d3: 89:98:55:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjUwNjE2MTY1OTM1WhcNMjUwNjIzMTY1OTM1WjAYMRYwFAYD VQQDEw02ODUwNGQ3Ny1hYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+p7kvJWUdejOM1/ieM7Cn7CIIjaLLo3Hk8MP0urvt6nHbarcZPB2jZ39CsqG aSNiueGzyPqFTB8ZyqKQbdbSX1QdgyIhA8zxpvN8mr3U/7en7oYF9ivqYaYavM19 xc/c1rXXUaYv9kcfI/0em5ZBw/gRFc7kgwcqUlXI7WpHvEkwOxOJQpppsukd2M+6 yqXK1WKfVWsipFNk5TFMy/5MvyNC5zouYvXy4rlzmHtE5TNi8RccjsWhW79+2va3 2IfCgCaLXXcDNEXr6fo0xBC+1CjEmQG8F11KXC+k3ECARcYkWMiP8emMTc0Z/1Vb BFjQ8CGY9lwoA0bwHTgFYjPKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrHdeBi 5Eqz6qjO5XYb2NKOqq4EMB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0RCMS9EQTJBNDJCRThCQzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VD WklVdkV0R0xJWXdGNUVpRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANreldiUJ4ZmMTuRq6qCxdMRTzBQ0Ufu5foaH5DB2m4K+YDY7RYQOY lazdTExW6GyjyImlgO6LPoQzz8GZd3Bcy4sfm1Dr+b5uDhR/T7da9n+IlAmBxgcf sAB/MgD0lNC5zkYdwd0usqyVuPSwSZiQ4NprhHSZ35mJZjQD3ANakxR68Tc+5tBy FmYd1C0lHtOVPL8oXFpkAC3sWzop6Uxmo1/5JOXHfLTM3jZeWTyWRq5Yy72vVL+s vM5+Qx3GS6teOFCTJ/o65h4PB/XCPY72NasQI3pNXq3a1TuvPeV15P/o4wkL40fg hbieA8SWp5wjJrd9RptEzNKkeNOJmFWo -----END CERTIFICATE-----Generated at Mon Jun 16 22:06:24 2025 by rpki-client