$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: +cCJoOT2Snvbl43NrVo1LtOH2YukGP6xEcsibt5tblM= Subject key identifier: 2D:F9:D3:77:6C:7D:A9:20:4D:C4:8F:FC:10:8D:79:A6:AD:9D:88:03 Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 021E Signing time: Fri 13 Jun 2025 01:28:41 +0000 Manifest this update: Fri 13 Jun 2025 01:28:41 +0000 Manifest next update: Fri 20 Jun 2025 01:28:41 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: PSSQ8CQq16ZPvvXt+zKuz7VulIxvJdC+ZzY+u1CM02I=) 2: 3366A64616EE11F092BB8D27C4F9AE02.roa (hash: BqVy/ukdl/6/b56EtxQ8tAIR6Cjii/d5BEoVe0J+mjI=) 3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 1g2p3b2YKG05onOBUGFQwxLWWfgUtvMtLCVSZMC3Z1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: Jun 13 01:28:41 2025 GMT Not After : Jun 20 01:28:41 2025 GMT Subject: CN=684b7ec9-bc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:d9:9a:e6:ba:7b:70:a4:54:c0:96:15:0f: 47:a4:27:76:92:79:36:86:12:e4:bd:0b:41:b6:ff: 3c:8c:5f:c7:62:77:97:92:a7:d1:66:00:15:a1:ca: 1a:ff:3a:62:c3:4d:47:3e:0d:82:8e:1a:a2:4b:da: 79:12:26:14:26:01:46:60:88:57:8f:f3:da:6b:8c: 54:a7:d3:c3:c9:51:49:41:71:49:bd:3f:03:89:3a: de:33:20:b0:df:57:39:a1:bd:21:c3:7b:61:da:e8: 65:fb:b2:94:8f:c3:e8:d7:cc:5b:c7:a4:0a:c4:e8: 92:05:ac:7e:59:76:79:bd:c9:db:63:11:9e:7c:42: 2f:f2:ff:3d:95:a8:e9:e2:94:e9:71:73:83:01:50: 27:0c:b2:92:15:53:3a:93:c4:84:06:e2:05:c1:4c: 7d:49:f6:34:c0:a1:26:c3:6b:d9:a9:00:93:b3:8f: 89:a5:9a:ea:22:ea:76:e3:72:0d:d5:3f:50:5f:c2: b8:51:40:cb:f9:4f:83:60:92:97:7f:ca:fc:7b:66: 2d:ef:9e:e0:f1:a6:48:cf:c4:d7:03:80:05:2f:fb: d5:2b:54:d4:0b:11:01:b4:5b:87:6c:bb:81:e0:ce: b7:f0:e4:64:94:de:ba:6a:1b:2c:c0:e6:8e:b7:49: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F9:D3:77:6C:7D:A9:20:4D:C4:8F:FC:10:8D:79:A6:AD:9D:88:03 X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:d4:62:56:fd:d7:38:51:9c:b7:37:a8:61:41:3f:19:e0: 01:45:e6:b9:95:69:3c:a6:8f:98:e9:81:19:fc:97:20:1f:02: 42:87:dd:a7:18:fc:65:b8:e0:13:3a:eb:8e:83:42:8f:73:67: cd:d3:2c:5a:df:3e:9f:ab:7a:c1:72:cf:65:f7:a4:9a:36:05: 9a:14:9a:2b:58:59:03:b1:b9:45:27:7c:15:d7:fb:2f:59:84: 73:c1:ca:5b:d8:79:46:49:a5:d4:a9:4d:81:e1:57:e1:9a:27: 58:35:5b:55:fc:74:00:dc:2d:da:6d:14:5d:79:5f:bf:f9:41: c1:59:fe:d0:9a:66:33:da:5c:46:a4:5b:e9:e2:24:d8:45:29: 22:a8:15:85:65:26:f9:98:07:11:3f:81:42:12:14:64:ae:88: 96:84:51:83:fb:e5:9d:c9:6f:0d:d3:6e:b2:ba:65:10:9f:8e: bf:2c:24:79:7c:f6:aa:5f:04:20:8a:cc:ba:0f:06:ad:19:e4: 45:7a:c6:78:b2:8a:36:0c:b8:ce:7d:72:0b:4c:59:3a:59:c8: 59:c4:b8:1a:1c:10:9e:00:2d:38:60:b8:9a:e3:71:49:ad:25: b3:94:66:ca:a6:c3:31:31:48:90:d8:bb:e0:d4:47:46:66:cb: 08:6a:54:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjUwNjEzMDEyODQxWhcNMjUwNjIwMDEyODQxWjAYMRYwFAYD VQQDEw02ODRiN2VjOS1iYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNzZmua6e3CkVMCWFQ9HpCd2knk2hhLkvQtBtv88jF/HYneXkqfRZgAVocoa /zpiw01HPg2CjhqiS9p5EiYUJgFGYIhXj/Paa4xUp9PDyVFJQXFJvT8DiTreMyCw 31c5ob0hw3th2uhl+7KUj8Po18xbx6QKxOiSBax+WXZ5vcnbYxGefEIv8v89lajp 4pTpcXODAVAnDLKSFVM6k8SEBuIFwUx9SfY0wKEmw2vZqQCTs4+JpZrqIup243IN 1T9QX8K4UUDL+U+DYJKXf8r8e2Yt757g8aZIz8TXA4AFL/vVK1TUCxEBtFuHbLuB 4M638ORklN66ahsswOaOt0l+gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3503ds fakgTcSP/BCNeaatnYgDMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2TdRiVv3XOFGctzeoYUE/GeABRea5lWk8po+Y6YEZ/JcgHwJCh92n GPxluOATOuuOg0KPc2fN0yxa3z6fq3rBcs9l96SaNgWaFJorWFkDsblFJ3wV1/sv WYRzwcpb2HlGSaXUqU2B4VfhmidYNVtV/HQA3C3abRRdeV+/+UHBWf7QmmYz2lxG pFvp4iTYRSkiqBWFZSb5mAcRP4FCEhRkroiWhFGD++WdyW8N026yumUQn46/LCR5 fPaqXwQgisy6DwatGeRFesZ4soo2DLjOfXILTFk6WchZxLgaHBCeAC04YLia43FJ rSWzlGbKpsMxMUiQ2Lvg1EdGZssIalRv -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:19 2025 by rpki-client