$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: 5mcrTE9AhbSzlKPgwndEay/+ADLw6ubO9dtRU3hHB6E= Subject key identifier: 89:95:FB:84:EC:71:BC:91:9F:25:F6:C8:DC:40:FD:B5:D0:9E:3E:59 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 0279 Signing time: Fri 13 Jun 2025 01:11:56 +0000 Manifest this update: Fri 13 Jun 2025 01:11:56 +0000 Manifest next update: Fri 20 Jun 2025 01:11:56 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: UU14Y8s3MZT1O9d7YpVrtwzP0c9L9wHKEmtGVLI0yWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Jun 13 01:11:56 2025 GMT Not After : Jun 20 01:11:56 2025 GMT Subject: CN=684b7adc-1d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:3b:47:6b:ea:1a:4e:cd:15:ab:5c:02:51: f5:fc:c5:3c:3e:e7:e7:bc:10:6b:ee:3d:bd:74:fd: 66:dd:f0:c7:96:d6:ff:fd:21:84:9b:5d:fa:66:87: 2a:5d:1b:07:c2:a5:c3:83:f0:c4:ee:fa:3d:43:ed: a5:62:29:94:4e:78:b6:e5:65:23:7c:36:08:b9:94: 80:61:25:f4:bc:cc:ca:28:9c:b0:c9:7b:66:77:b3: 67:ab:b0:64:60:af:27:27:be:2f:74:a2:0b:f7:b8: ce:89:a7:7b:62:4d:52:b5:d8:1a:aa:f3:1f:eb:db: 59:82:d1:56:72:1c:94:f6:ac:90:e5:6d:ee:0e:f7: 30:b0:8d:c0:82:3f:9c:19:a1:8f:61:3b:95:32:4e: 6f:c0:be:84:6a:8b:66:fd:53:47:fb:05:d8:db:1f: 30:fe:19:4c:7a:8c:fb:a4:b5:c6:32:d7:df:aa:1a: 43:08:a5:66:cb:17:e3:02:02:3b:9d:f5:3a:e5:0e: aa:0b:d0:ac:ac:7d:14:3e:75:77:80:99:d8:1e:92: 96:cd:21:fe:d2:64:e0:82:77:8b:58:a7:7d:02:b4: 08:3b:18:4f:58:3b:a8:81:a9:a5:e9:90:5a:15:da: bc:de:e2:f7:a1:a5:29:f8:fa:35:2e:f5:3e:a7:ac: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:95:FB:84:EC:71:BC:91:9F:25:F6:C8:DC:40:FD:B5:D0:9E:3E:59 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:21:19:84:e1:0a:bd:f3:1e:71:f5:a5:e7:cc:dc:43:f3:61: c2:22:e0:ad:87:84:12:f1:94:7f:2c:09:56:87:78:0d:96:76: f4:5f:86:9b:15:ea:f4:92:80:6e:f2:8b:7d:14:e7:5f:21:25: 72:86:2a:8c:74:9d:c9:4e:9c:38:d4:7f:b9:79:14:3b:79:1d: 09:89:f9:67:54:23:fa:c9:0d:ab:64:4d:11:0d:ce:0b:bd:69: 6d:8c:39:d1:79:b1:50:53:f9:70:b0:24:88:2c:7b:1b:70:a5: aa:df:a5:64:d7:b4:05:37:85:95:f9:a1:ed:23:b2:9c:d3:92: 6f:c7:7e:1f:ef:fd:26:62:1d:f0:ae:5b:84:2d:e6:c3:d1:6f: 13:82:23:01:c6:d9:c5:b1:af:83:05:fd:86:7b:44:2d:f6:13: 51:48:51:1c:0a:2d:96:2a:6d:82:b4:0e:7f:37:19:77:ea:b9: a7:d5:59:f8:d3:4e:c2:f0:71:3b:69:c6:eb:ac:6e:58:bb:04: bf:51:bb:9d:dc:66:15:6e:84:77:90:8c:5b:4b:5a:c3:4b:02: 83:b2:02:ed:f9:14:61:16:a2:1a:d0:0c:e3:62:02:4d:7d:83: fc:d3:2b:7a:eb:bb:5f:4f:6f:7a:9a:06:38:f5:47:4f:09:2d: c9:61:27:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUwNjEzMDExMTU2WhcNMjUwNjIwMDExMTU2WjAYMRYwFAYD VQQDEw02ODRiN2FkYy0xZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvM7R2vqGk7NFatcAlH1/MU8PufnvBBr7j29dP1m3fDHltb//SGEm136Zocq XRsHwqXDg/DE7vo9Q+2lYimUTni25WUjfDYIuZSAYSX0vMzKKJywyXtmd7Nnq7Bk YK8nJ74vdKIL97jOiad7Yk1StdgaqvMf69tZgtFWchyU9qyQ5W3uDvcwsI3Agj+c GaGPYTuVMk5vwL6Eaotm/VNH+wXY2x8w/hlMeoz7pLXGMtffqhpDCKVmyxfjAgI7 nfU65Q6qC9CsrH0UPnV3gJnYHpKWzSH+0mTggneLWKd9ArQIOxhPWDuogaml6ZBa Fdq83uL3oaUp+Po1LvU+p6xZ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImV+4Ts cbyRnyX2yNxA/bXQnj5ZMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWIRmE4Qq98x5x9aXnzNxD82HCIuCth4QS8ZR/LAlWh3gNlnb0X4ab Fer0koBu8ot9FOdfISVyhiqMdJ3JTpw41H+5eRQ7eR0JiflnVCP6yQ2rZE0RDc4L vWltjDnRebFQU/lwsCSILHsbcKWq36Vk17QFN4WV+aHtI7Kc05Jvx34f7/0mYh3w rluELebD0W8TgiMBxtnFsa+DBf2Ge0Qt9hNRSFEcCi2WKm2CtA5/Nxl36rmn1Vn4 007C8HE7acbrrG5YuwS/Ubud3GYVboR3kIxbS1rDSwKDsgLt+RRhFqIa0AzjYgJN fYP80yt667tfT296mgY49UdPCS3JYScg -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:01 2025 by rpki-client