$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: H/56OSWilrHWclzGkHBbqN0PXL5DqAYFPkw1Gxsg8oo= Subject key identifier: 82:BD:CA:EE:49:23:AA:35:F7:0C:3A:0E:BF:BE:35:B0:37:77:1A:87 Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0D3A Signing time: Sat 14 Jun 2025 17:55:53 +0000 Manifest this update: Sat 14 Jun 2025 17:55:53 +0000 Manifest next update: Sat 21 Jun 2025 17:55:53 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: lGiCQXC+3wXj6ykLzwI+xY2YYffdrHiR3wCMUffrQrA=) 2: 73E16BB27C4711EFACFB1228C4F9AE02.roa (hash: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1, serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: Jun 14 17:55:53 2025 GMT Not After : Jun 21 17:55:53 2025 GMT Subject: CN=684db7a9-21df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c7:d2:b8:9c:85:b1:b3:4d:9e:af:0c:40:fa: a9:27:e4:9a:17:06:71:9d:b8:da:47:ca:ed:53:88: cf:cb:af:92:15:36:e6:02:bf:98:e2:ea:50:d0:5c: b3:15:d1:f0:14:d2:ec:df:f8:cb:38:7b:34:34:27: 24:cd:8f:77:03:af:e2:0e:b1:04:fb:2a:ae:bb:9b: 2d:8d:07:eb:f0:fb:a2:b4:1d:39:19:57:2b:52:34: 90:80:d6:3e:7e:f6:1f:bd:fd:2e:eb:54:e2:c3:bb: d3:6c:b6:6b:24:0f:b9:28:a8:bf:ba:1a:74:6a:1d: 3a:a2:d9:d4:81:5b:af:87:a4:d0:3e:9f:24:fd:b1: e1:54:95:e2:2b:40:ad:fc:0f:63:12:24:79:80:35: 4f:c3:0a:55:c6:f6:1b:ba:c1:bd:89:6a:37:1a:cf: 5b:16:b1:87:14:1d:1e:09:e1:cc:62:4a:c9:3e:f9: e4:db:6d:e3:ed:c0:eb:90:f8:e2:92:8c:41:c4:21: a8:5e:bd:a5:b6:da:24:32:8e:34:c3:d5:0d:4b:21: 7e:c0:44:3c:be:ea:48:9f:ae:bf:03:89:26:9f:c6: 12:f2:80:15:7a:bc:81:29:35:9d:d7:b5:1c:d9:a6: f0:d4:9a:f4:24:7c:b5:66:e9:25:b2:00:f8:94:9c: 07:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:CA:EE:49:23:AA:35:F7:0C:3A:0E:BF:BE:35:B0:37:77:1A:87 X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d5:af:f5:c3:d3:85:62:5a:a7:94:cf:bd:4a:4d:38:91:4a: 1c:ea:ab:f8:3b:fe:5a:cd:ad:df:c5:f0:4f:da:f5:6d:74:bc: 93:2e:db:82:e7:1a:3a:16:e0:4b:ae:17:52:f6:c9:1f:54:81: 7d:ea:52:a4:a7:d0:bf:b4:28:f6:0f:26:3f:36:3e:77:8f:73: 41:47:92:b3:8d:d5:4b:38:29:ec:d5:6b:02:f2:77:fc:30:af: 7b:83:84:26:bc:93:19:3c:b9:1a:01:ae:7e:47:65:85:7c:98: 2e:9a:ac:29:92:2e:fc:d3:29:b1:40:bb:40:aa:83:d0:9b:e6: 24:1e:66:0e:d1:af:03:66:ad:ef:3e:9a:08:8d:97:9b:e1:a3: 17:35:b4:39:3a:9f:36:19:38:90:04:9e:52:ee:08:d5:d5:87: ec:69:3b:fb:d0:c2:74:2d:7d:9e:9c:48:3e:aa:a1:4a:63:86: 35:67:c1:17:63:ab:12:07:95:69:4b:3e:f6:eb:71:48:0d:e0: 56:8a:12:0c:17:1b:14:c1:4a:f7:d5:12:e7:26:cc:e8:f7:67: 69:9e:62:ff:26:14:b4:3d:54:b8:3d:3d:9a:b5:59:90:2e:90: 50:3f:f9:e5:89:97:ee:7b:9f:d5:df:c4:cf:0a:de:32:e3:2b: 4a:28:f1:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjUwNjE0MTc1NTUzWhcNMjUwNjIxMTc1NTUzWjAYMRYwFAYD VQQDEw02ODRkYjdhOS0yMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sfSuJyFsbNNnq8MQPqpJ+SaFwZxnbjaR8rtU4jPy6+SFTbmAr+Y4upQ0Fyz FdHwFNLs3/jLOHs0NCckzY93A6/iDrEE+yquu5stjQfr8PuitB05GVcrUjSQgNY+ fvYfvf0u61Tiw7vTbLZrJA+5KKi/uhp0ah06otnUgVuvh6TQPp8k/bHhVJXiK0Ct /A9jEiR5gDVPwwpVxvYbusG9iWo3Gs9bFrGHFB0eCeHMYkrJPvnk223j7cDrkPji koxBxCGoXr2lttokMo40w9UNSyF+wEQ8vupIn66/A4kmn8YS8oAVeryBKTWd17Uc 2abw1Jr0JHy1ZuklsgD4lJwHwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK9yu5J I6o19ww6Dr++NbA3dxqHMB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc1a/1w9OFYlqnlM+9Sk04kUoc6qv4O/5aza3fxfBP2vVtdLyTLtuC 5xo6FuBLrhdS9skfVIF96lKkp9C/tCj2DyY/Nj53j3NBR5KzjdVLOCns1WsC8nf8 MK97g4QmvJMZPLkaAa5+R2WFfJgumqwpki780ymxQLtAqoPQm+YkHmYO0a8DZq3v PpoIjZeb4aMXNbQ5Op82GTiQBJ5S7gjV1YfsaTv70MJ0LX2enEg+qqFKY4Y1Z8EX Y6sSB5VpSz7263FIDeBWihIMFxsUwUr31RLnJszo92dpnmL/JhS0PVS4PT2atVmQ LpBQP/nliZfue5/V38TPCt4y4ytKKPFt -----END CERTIFICATE-----Generated at Mon Jun 16 16:35:00 2025 by rpki-client