$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: Zrrlz6uT2O+fhE9pvS4pBDTunn0+0rykjSykImhuiR4= Subject key identifier: 0D:AE:78:FB:09:48:BF:6C:BB:F6:59:7C:DA:13:72:01:B9:89:81:FC Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 0448 Signing time: Sat 21 Jun 2025 00:02:08 +0000 Manifest this update: Sat 21 Jun 2025 00:02:08 +0000 Manifest next update: Sat 28 Jun 2025 00:02:08 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: l2F78D7JSCSSNSKmGVEWZF/3qusiVN4+z9UvI2XnOHY=) 2: 5590E4766AD111EFB8AD551AC4F9AE02.roa (hash: u4534TN3FipMq5w+c3LILmi2ZS4NbdKmjDpYBOie5OM=) 3: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 00:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Jun 21 00:02:08 2025 GMT Not After : Jun 28 00:02:08 2025 GMT Subject: CN=6855f680-8d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:51:88:c3:fd:7c:53:ab:cc:3c:bf:aa:47: df:72:2b:59:f2:9c:a6:bb:b8:e3:67:ec:b6:6f:1b: d6:bb:db:38:07:dc:d7:aa:aa:e8:19:59:17:c7:72: 6f:55:0f:53:89:9c:93:8c:0f:bc:23:4c:ca:67:b1: 9b:d1:bb:51:52:53:eb:c7:8c:19:d2:d8:a7:9d:ad: e5:bb:bb:37:bd:be:5e:9f:e0:76:51:4e:8d:20:94: a1:33:63:ea:73:96:af:3b:d7:93:e4:55:47:3b:c3: b1:65:1e:f9:25:ce:ff:47:58:3a:5e:71:e3:22:10: 9b:30:66:8d:b5:cb:c9:0c:e7:ed:2d:c8:3a:dc:2a: 8d:5e:1f:f0:9b:b9:2b:19:72:39:14:17:03:5e:14: 61:06:b4:00:24:2f:15:63:1a:7f:f1:2e:de:69:87: d4:d9:09:07:6f:71:76:d2:21:6b:ff:10:66:ca:7e: 9c:f2:60:d9:c3:42:e3:37:ac:95:95:a5:41:4a:d8: a4:c4:48:d2:17:a1:1b:f2:24:16:88:3a:c3:4d:d3: 23:d9:09:8d:89:a2:1c:16:75:b6:2c:1f:b6:96:7f: db:97:c8:9c:4c:6c:79:a4:c9:00:82:e2:1d:29:d4: db:e9:89:19:d2:38:53:d8:6b:b9:bf:a8:20:49:ac: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:78:FB:09:48:BF:6C:BB:F6:59:7C:DA:13:72:01:B9:89:81:FC X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f1:94:7e:51:f7:cb:2b:08:00:6d:aa:f1:e6:a9:76:4c:5c: d1:38:56:93:40:40:95:cb:9a:6e:20:f9:b0:84:05:85:a6:20: 12:29:c9:e3:72:59:1a:d3:55:3e:91:53:fa:6e:87:eb:93:0a: bc:c9:a9:d9:88:f8:cc:f8:49:c2:f7:f0:0e:59:4b:df:5b:4a: ea:d2:c8:36:31:3a:5d:4f:fb:c5:98:be:b5:99:b1:a9:5d:65: 58:30:38:e7:bf:74:fe:d3:06:ff:15:4f:48:57:8f:37:19:61: 62:2f:15:92:ed:7f:57:82:1f:b1:04:56:a6:e2:53:b0:7d:d1: bc:df:00:9a:23:ef:73:dd:25:f9:f0:69:35:c6:9c:d3:48:10: fc:51:c6:75:e7:5d:e8:ea:92:7c:08:c6:1e:6f:1c:d5:42:9c: 14:25:8c:d5:08:35:c9:8f:a2:7c:ee:5f:79:ec:34:8e:ed:c7: 97:a2:08:e9:24:ac:e8:a9:ce:c0:c4:06:ea:17:15:49:bd:10: 24:29:59:06:e3:4f:83:f7:bc:b6:b7:1e:6c:31:80:b6:78:c2: 44:dd:08:50:51:ea:27:41:1e:e0:4d:a9:82:57:2b:71:80:ee: 61:55:46:6c:26:78:89:44:88:e4:74:f1:dc:5b:eb:d0:39:c2: da:89:b9:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUwNjIxMDAwMjA4WhcNMjUwNjI4MDAwMjA4WjAYMRYwFAYD VQQDEw02ODU1ZjY4MC04ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRZRiMP9fFOrzDy/qkffcitZ8pymu7jjZ+y2bxvWu9s4B9zXqqroGVkXx3Jv VQ9TiZyTjA+8I0zKZ7Gb0btRUlPrx4wZ0tinna3lu7s3vb5en+B2UU6NIJShM2Pq c5avO9eT5FVHO8OxZR75Jc7/R1g6XnHjIhCbMGaNtcvJDOftLcg63CqNXh/wm7kr GXI5FBcDXhRhBrQAJC8VYxp/8S7eaYfU2QkHb3F20iFr/xBmyn6c8mDZw0LjN6yV laVBStikxEjSF6Eb8iQWiDrDTdMj2QmNiaIcFnW2LB+2ln/bl8icTGx5pMkAguId KdTb6YkZ0jhT2Gu5v6ggSayrGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2uePsJ SL9su/ZZfNoTcgG5iYH8MB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj8ZR+UffLKwgAbarx5ql2TFzROFaTQECVy5puIPmwhAWFpiASKcnj clka01U+kVP6bofrkwq8yanZiPjM+EnC9/AOWUvfW0rq0sg2MTpdT/vFmL61mbGp XWVYMDjnv3T+0wb/FU9IV483GWFiLxWS7X9Xgh+xBFam4lOwfdG83wCaI+9z3SX5 8Gk1xpzTSBD8UcZ1513o6pJ8CMYebxzVQpwUJYzVCDXJj6J87l957DSO7ceXogjp JKzoqc7AxAbqFxVJvRAkKVkG40+D97y2tx5sMYC2eMJE3QhQUeonQR7gTamCVytx gO5hVUZsJniJRIjkdPHcW+vQOcLaibnD -----END CERTIFICATE-----Generated at Sat Jun 21 09:28:46 2025 by rpki-client