$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: fp6B9iG26Pf3QJCMvoN/hXP3CYEraGO66iSJW1rbUls= Subject key identifier: DA:F3:89:D8:CD:16:E6:45:D1:93:BA:97:62:23:EE:D2:EC:E2:AD:49 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0221 Signing time: Sun 15 Jun 2025 01:38:04 +0000 Manifest this update: Sun 15 Jun 2025 01:38:03 +0000 Manifest next update: Sun 22 Jun 2025 01:38:03 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: DlOt2UYkMhyIVJpqoAglJamtnQVDvJhaKRXBRwuHG5I=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: 6NVu2HEI/2vQueP99wzaqxsinrZpCobkN5jNBib82oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Jun 15 01:38:03 2025 GMT Not After : Jun 22 01:38:03 2025 GMT Subject: CN=684e23fb-bc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:68:c6:07:3c:67:11:50:91:d0:4f:fd:11: 22:62:82:62:c1:77:b4:64:41:40:f5:c8:e3:eb:b0: 99:b7:c8:1d:12:96:f4:ff:5b:29:6c:29:8b:4f:71: 7f:cb:30:37:2d:eb:f1:39:83:82:e2:3e:36:7c:31: 19:68:d1:00:99:5a:5c:1e:cf:41:f4:c4:95:2e:51: c5:29:90:a3:bd:2c:c4:71:78:8c:67:84:b2:a0:f2: f2:b1:d2:31:50:f3:51:80:d8:bd:12:5e:f7:0d:fc: 72:79:0b:18:f7:da:26:0d:dc:75:8a:d4:5d:a1:13: 7d:e8:85:f2:a6:63:ae:01:84:9c:86:e6:6a:b6:51: 22:b0:ce:9f:a9:e1:4b:12:cd:2a:93:4f:f2:0c:7d: da:98:8a:71:86:fa:24:29:64:41:03:20:e3:b4:cc: 2c:c1:2d:42:36:47:d7:c6:a4:8f:1e:ca:38:8e:9a: 9c:92:e8:1d:02:14:61:14:51:66:2a:43:fc:71:35: cd:d9:01:c4:ad:76:ba:06:56:6f:5e:6a:0c:d4:86: f9:1d:c9:77:99:d2:dd:4a:56:c8:bc:ba:46:b1:89: 67:75:c0:a3:6b:85:b0:51:e9:c9:a8:ca:50:7a:81: d0:eb:02:c9:62:b1:ad:f3:a2:31:66:aa:36:45:2a: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F3:89:D8:CD:16:E6:45:D1:93:BA:97:62:23:EE:D2:EC:E2:AD:49 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c8:aa:b3:34:85:ac:12:5a:f8:87:22:41:97:45:a4:89:93: d4:d2:d1:f5:61:40:ce:63:ad:a0:04:0d:57:89:cd:06:ac:d3: 61:ee:a4:43:a4:4c:a6:1c:c2:b0:f7:5d:ed:ee:1f:c8:ab:77: e5:9f:c7:90:e1:8f:ee:3e:1d:f2:07:2b:bc:a4:c6:eb:e0:a0: 93:09:d7:9e:34:de:30:36:7f:20:52:b4:ad:64:ed:ec:92:48: 2e:89:07:ef:61:8d:d4:7d:9b:f1:5a:12:8f:df:d1:4f:45:4e: 48:58:3c:a8:0f:fd:64:7c:11:a4:23:86:65:06:eb:6e:83:94: 2d:33:70:41:36:a0:6b:b7:46:24:f0:d5:00:ad:e9:65:6c:fa: 02:17:3f:3c:a7:65:42:15:24:79:5f:99:55:d2:f5:1c:49:aa: 2a:1c:03:93:52:3d:00:8e:03:f9:10:01:4a:a1:04:a8:76:10: f6:cb:18:60:bb:4c:a3:96:c5:3c:5c:86:fd:b1:2e:05:ca:e4: c0:3b:d6:ff:65:95:ae:90:f4:20:64:0d:54:98:58:b6:9f:8d: 63:b0:24:03:30:a1:5a:9e:0a:74:15:10:4d:0d:ab:a2:13:ea: 8f:a1:06:b3:2e:55:df:69:45:49:00:d7:8f:55:1c:da:ce:c6: 11:86:f9:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUwNjE1MDEzODAzWhcNMjUwNjIyMDEzODAzWjAYMRYwFAYD VQQDEw02ODRlMjNmYi1iYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaxoxgc8ZxFQkdBP/REiYoJiwXe0ZEFA9cjj67CZt8gdEpb0/1spbCmLT3F/ yzA3LevxOYOC4j42fDEZaNEAmVpcHs9B9MSVLlHFKZCjvSzEcXiMZ4SyoPLysdIx UPNRgNi9El73DfxyeQsY99omDdx1itRdoRN96IXypmOuAYSchuZqtlEisM6fqeFL Es0qk0/yDH3amIpxhvokKWRBAyDjtMwswS1CNkfXxqSPHso4jpqckugdAhRhFFFm KkP8cTXN2QHErXa6BlZvXmoM1Ib5Hcl3mdLdSlbIvLpGsYlndcCja4WwUenJqMpQ eoHQ6wLJYrGt86IxZqo2RSoyRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrzidjN FuZF0ZO6l2Ij7tLs4q1JMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADyKqzNIWsElr4hyJBl0WkiZPU0tH1YUDOY62gBA1Xic0GrNNh7qRD pEymHMKw913t7h/Iq3fln8eQ4Y/uPh3yByu8pMbr4KCTCdeeNN4wNn8gUrStZO3s kkguiQfvYY3UfZvxWhKP39FPRU5IWDyoD/1kfBGkI4ZlButug5QtM3BBNqBrt0Yk 8NUArellbPoCFz88p2VCFSR5X5lV0vUcSaoqHAOTUj0AjgP5EAFKoQSodhD2yxhg u0yjlsU8XIb9sS4FyuTAO9b/ZZWukPQgZA1UmFi2n41jsCQDMKFangp0FRBNDaui E+qPoQazLlXfaUVJANePVRzazsYRhvlE -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:29 2025 by rpki-client