$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: v9OJQVv649IvJNpIQWoZUNmvg4PN1a3uF6mSmuumvgY= Subject key identifier: D9:2C:3B:BB:A1:D7:4E:D5:2E:2D:19:E1:B1:1C:B9:12:39:8C:37:B2 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 46 Signing time: Sat 21 Jun 2025 06:30:59 +0000 Manifest this update: Sat 21 Jun 2025 06:30:58 +0000 Manifest next update: Sat 28 Jun 2025 06:30:58 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: WOMCgybU1hJguXm23TG5RNTCWaybi+rdSMKvRoxojQc=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: KNC2/s+vZ/9r775F1mGNGMou3oGOdH7k+vpChxT9cqQ=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: zMJUwcQ85fc9WyQBZ4Df3FrM+qiFXLoVLbfqvgsrYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Jun 21 06:30:58 2025 GMT Not After : Jun 28 06:30:58 2025 GMT Subject: CN=685651a2-910b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:1c:d9:f1:85:af:db:e4:2b:3c:cc:42:16: 6d:9b:b5:d4:1e:87:07:2b:a6:8c:9c:d8:cb:09:98: 66:bc:8f:f3:27:95:f6:3b:74:12:10:28:57:dc:5c: de:8a:f7:54:29:b6:95:22:5f:a1:1a:4b:ce:bc:cf: db:a0:28:c0:23:51:dd:64:3b:a1:03:9b:41:45:f2: 82:3f:f7:78:fa:04:d4:49:fd:12:55:4d:c6:59:88: 4f:2f:45:47:ab:ce:62:13:88:c0:8f:00:1c:cf:41: 07:ac:2f:63:db:ed:8d:7e:c1:53:6a:d0:a7:7a:86: a3:ed:8a:83:7a:ba:d7:4e:fe:c0:df:eb:60:82:d0: 72:c5:a4:62:9d:64:67:58:06:83:6a:28:fb:85:96: b6:eb:11:bd:ac:03:e6:66:5b:74:f2:98:ee:39:59: f2:76:28:ce:d3:29:7d:fc:51:b8:98:f2:a6:1a:41: 86:25:65:fb:d1:0d:33:0e:7f:f3:0a:4f:b0:2c:38: 41:6f:1c:d7:88:f7:f3:cc:74:16:f9:70:57:ab:63: 83:11:87:58:a1:93:ec:9a:b2:cf:c8:f5:23:1c:7e: 96:81:ce:fe:fd:95:be:45:69:4d:44:e8:e0:6f:4f: 50:f9:d3:a4:81:ea:16:62:f4:5d:2c:1a:6b:d8:1a: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:3B:BB:A1:D7:4E:D5:2E:2D:19:E1:B1:1C:B9:12:39:8C:37:B2 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:96:7d:ec:98:a2:56:65:c2:d8:16:79:77:d7:83:3e:c0:e2: dd:78:0a:68:0f:f2:ca:56:02:9b:41:51:05:a3:4a:b9:ed:4c: 67:b1:8b:ba:8f:47:dd:f0:64:53:79:e5:fd:17:67:54:fb:5a: 4b:df:8b:99:cd:53:cd:ed:ba:dd:d8:db:ca:75:e4:38:2f:7e: 05:e5:0b:81:49:c0:4f:bd:aa:1e:4d:64:80:76:35:24:fa:70: bb:7d:97:a3:13:9d:14:3a:4e:be:f2:54:56:05:5d:ef:5e:e2: 86:75:6c:2f:ae:27:13:6b:b5:be:b6:e6:13:68:7d:36:3e:00: a6:32:e7:8b:ae:8e:2f:91:63:be:fa:c2:1b:f5:5b:56:1d:d3: f4:46:dc:5b:0f:66:dd:29:ca:12:a3:44:02:48:4c:9d:dc:ba: 0a:30:fc:36:64:56:b0:49:aa:ee:e4:4e:d5:31:51:16:63:76: 32:28:18:4b:e7:7c:c3:de:56:11:be:6f:c6:0b:e8:17:83:1f: c8:d0:1f:c0:d7:cf:fc:78:60:2a:fc:c4:25:2b:15:6e:53:fe: b5:a8:36:dc:61:cf:0e:aa:f9:34:23:ee:25:91:9f:fa:1c:e5: c5:f1:63:c2:18:24:47:e1:34:4e:14:74:b1:0f:8f:3e:a9:8a: a5:c5:54:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA2MjEwNjMwNThaFw0yNTA2MjgwNjMwNThaMBgxFjAUBgNV BAMTDTY4NTY1MWEyLTkxMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzMBzZ8YWv2+QrPMxCFm2btdQehwcrpoyc2MsJmGa8j/MnlfY7dBIQKFfcXN6K 91QptpUiX6EaS868z9ugKMAjUd1kO6EDm0FF8oI/93j6BNRJ/RJVTcZZiE8vRUer zmITiMCPABzPQQesL2Pb7Y1+wVNq0Kd6hqPtioN6utdO/sDf62CC0HLFpGKdZGdY BoNqKPuFlrbrEb2sA+ZmW3TymO45WfJ2KM7TKX38UbiY8qYaQYYlZfvRDTMOf/MK T7AsOEFvHNeI9/PMdBb5cFerY4MRh1ihk+yass/I9SMcfpaBzv79lb5FaU1E6OBv T1D506SB6hZi9F0sGmvYGn1tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2Sw7u6HX TtUuLRnhsRy5EjmMN7IwHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK6WfeyYolZlwtgWeXfXgz7A4t14CmgP8spWAptBUQWjSrntTGexi7qP R93wZFN55f0XZ1T7Wkvfi5nNU83tut3Y28p15DgvfgXlC4FJwE+9qh5NZIB2NST6 cLt9l6MTnRQ6Tr7yVFYFXe9e4oZ1bC+uJxNrtb625hNofTY+AKYy54uuji+RY776 whv1W1Yd0/RG3FsPZt0pyhKjRAJITJ3cugow/DZkVrBJqu7kTtUxURZjdjIoGEvn fMPeVhG+b8YL6BeDH8jQH8DXz/x4YCr8xCUrFW5T/rWoNtxhzw6q+TQj7iWRn/oc 5cXxY8IYJEfhNE4UdLEPjz6piqXFVDs= -----END CERTIFICATE-----Generated at Sat Jun 21 16:18:48 2025 by rpki-client