$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: 9DNJFL6PH68AX00u7w7k1nBeQdvZUw8KcALZoOiLups= Subject key identifier: F4:F9:74:53:49:A7:71:24:FE:26:B0:60:89:E8:42:3E:65:28:E9:6B Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 09CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 09C4 Signing time: Thu 12 Jun 2025 19:44:07 +0000 Manifest this update: Thu 12 Jun 2025 19:44:07 +0000 Manifest next update: Thu 19 Jun 2025 19:44:07 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: aI8AwSv6os/mNUBsF+fIt3+5TV2HJ9m4sjR6fhmrZfY=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2506 (0x9ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: Jun 12 19:44:07 2025 GMT Not After : Jun 19 19:44:07 2025 GMT Subject: CN=684b2e07-641b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a9:73:8c:e8:c6:0d:8d:f1:4f:5e:09:67:de: fc:48:5d:53:b8:25:c2:80:2e:49:46:78:94:87:32: 4d:44:40:9d:0b:fd:7a:42:86:80:c0:14:b5:04:2c: d8:8b:a8:22:1d:08:c0:9f:84:2f:d1:3b:7d:8d:23: 33:ea:b1:7b:2f:dc:20:f5:ef:c1:0f:f9:5c:0b:ab: c7:0c:81:73:d4:9b:58:ff:f7:99:b4:1c:3f:c9:06: 88:19:c4:ea:46:ba:e2:52:a5:b0:cd:5b:37:c9:07: ab:12:92:c3:f9:62:17:2d:d7:65:24:42:7c:b1:1a: 31:70:cc:fd:45:64:7f:45:54:96:12:26:7d:e0:55: 2f:31:7d:fc:4a:c8:82:55:5a:f2:42:ba:ee:4d:3f: 5d:51:ee:13:43:42:5d:fc:39:a2:57:3d:10:5a:7c: d2:3a:09:2d:be:0c:4a:03:b5:9e:6e:b0:4c:ac:61: 30:ef:77:5b:67:47:ae:e7:f3:63:8c:a9:c8:86:0b: 73:07:4d:33:a4:6e:30:14:09:6e:db:3b:ba:62:4f: 9d:ec:e9:35:e1:79:62:02:95:a1:ca:60:a8:d8:65: 50:34:a8:70:dd:95:c9:2c:69:d3:f8:09:e5:0a:83: 6e:42:1f:d0:60:17:db:dd:5b:33:3f:93:6a:69:8a: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F9:74:53:49:A7:71:24:FE:26:B0:60:89:E8:42:3E:65:28:E9:6B X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d0:f8:59:ec:79:b3:80:f7:37:b9:9b:36:83:9d:c4:48:b2: c6:55:17:35:b2:8d:10:d0:32:03:69:c2:fd:2b:c1:28:ea:08: f4:5b:09:73:e0:ba:76:c8:ac:3b:18:45:38:27:e8:ba:6a:e3: 4f:23:91:45:7b:a3:6d:8a:d3:7f:13:70:9b:d1:a1:c4:41:2a: a8:ec:cf:31:1d:cb:3b:f6:cb:a8:cb:af:9f:27:c9:74:65:7f: fa:11:dc:a6:d9:d7:63:46:d8:bf:ff:76:e3:ac:db:12:b3:b6: 22:7e:de:60:f1:4a:a2:52:77:ef:c6:1b:26:c7:51:1d:ea:95: 38:1f:88:77:25:f4:90:0e:fa:7c:d7:ce:6f:e2:af:20:6b:a4: 52:ab:f9:c1:59:ae:d0:c8:51:76:9a:27:0f:b0:83:27:48:07: 97:f9:d1:b2:cd:91:25:2f:5c:ba:1c:07:ba:63:72:41:e8:9c: f4:3d:ce:e4:5b:ee:26:3d:f8:1a:bc:fc:ef:36:a2:d0:92:5a: 74:7f:b0:f4:7a:4b:3d:96:d9:2d:20:b3:39:a5:6b:14:9a:db: 65:59:68:a7:f9:05:a1:a8:12:87:05:dd:6f:3c:77:b9:24:a2: 16:f7:64:ed:f1:43:0d:57:41:eb:0b:90:9d:e5:9c:21:c4:7c: ea:f7:d3:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjUwNjEyMTk0NDA3WhcNMjUwNjE5MTk0NDA3WjAYMRYwFAYD VQQDEw02ODRiMmUwNy02NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qlzjOjGDY3xT14JZ978SF1TuCXCgC5JRniUhzJNRECdC/16QoaAwBS1BCzY i6giHQjAn4Qv0Tt9jSMz6rF7L9wg9e/BD/lcC6vHDIFz1JtY//eZtBw/yQaIGcTq RrriUqWwzVs3yQerEpLD+WIXLddlJEJ8sRoxcMz9RWR/RVSWEiZ94FUvMX38SsiC VVryQrruTT9dUe4TQ0Jd/DmiVz0QWnzSOgktvgxKA7WebrBMrGEw73dbZ0eu5/Nj jKnIhgtzB00zpG4wFAlu2zu6Yk+d7Ok14XliApWhymCo2GVQNKhw3ZXJLGnT+Anl CoNuQh/QYBfb3VszP5NqaYqnPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPT5dFNJ p3Ek/iawYInoQj5lKOlrMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ0PhZ7HmzgPc3uZs2g53ESLLGVRc1so0Q0DIDacL9K8Eo6gj0Wwlz 4Lp2yKw7GEU4J+i6auNPI5FFe6NtitN/E3Cb0aHEQSqo7M8xHcs79suoy6+fJ8l0 ZX/6Edym2ddjRti//3bjrNsSs7Yift5g8UqiUnfvxhsmx1Ed6pU4H4h3JfSQDvp8 185v4q8ga6RSq/nBWa7QyFF2micPsIMnSAeX+dGyzZElL1y6HAe6Y3JB6Jz0Pc7k W+4mPfgavPzvNqLQklp0f7D0eks9ltktILM5pWsUmttlWWin+QWhqBKHBd1vPHe5 JKIW92Tt8UMNV0HrC5Cd5ZwhxHzq99Pv -----END CERTIFICATE-----Generated at Sat Jun 14 19:22:26 2025 by rpki-client