$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: LgQ4r8tmnlp4fIVQ7X27n2UUmvwtbuUeEY5RdBYSIJY= Subject key identifier: 32:A1:05:2A:F1:A7:25:A4:40:6E:92:C0:C4:22:1B:93:73:D5:C8:3D Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 040A Signing time: Fri 13 Jun 2025 00:21:30 +0000 Manifest this update: Fri 13 Jun 2025 00:21:29 +0000 Manifest next update: Fri 20 Jun 2025 00:21:29 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: /kWJDxNs9WqCecauH9PiUfZ2dnA92Pbx2ig2KhOH0zo=) 2: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (hash: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI=) 3: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=) 4: 8ED9161EB08F11EF8E3C4F2FC4F9AE02.roa (hash: CH8GchMto/uPRqPYkKGBpICTR9Zi45Sn6IDLqaBYXYk=) 5: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=) 6: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=) 7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=) 8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=) 9: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=) 10: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (hash: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Jun 13 00:21:29 2025 GMT Not After : Jun 20 00:21:29 2025 GMT Subject: CN=684b6f09-0c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:9a:a4:1e:ba:0e:d6:ca:e9:35:70:ba:45: 87:53:1a:55:e7:00:9e:65:c7:89:b0:14:46:10:37: 3c:9c:a4:21:84:a8:ff:1d:68:ff:7f:f4:9f:dd:00: 44:67:66:cb:4f:11:9b:09:c4:9c:f0:9f:1f:80:7e: c7:49:a6:52:a8:7b:d9:e6:86:5b:00:05:c6:36:87: 2f:3d:43:e4:e0:57:d8:06:50:74:41:31:6e:97:58: bc:65:33:8a:90:42:e4:19:47:8a:8c:a4:f1:cb:81: 19:8b:3d:fd:ab:fd:f9:12:ed:7b:36:23:3a:75:0d: 04:50:0b:66:1b:83:0c:ab:2a:f9:be:02:07:a0:d9: be:0a:0e:cc:b2:63:b7:33:21:45:17:28:11:a7:f3: bb:68:2c:73:3e:60:0d:0c:f2:ee:6c:d1:1d:e6:7f: b7:3a:a9:ed:c6:45:3e:19:75:4f:34:1b:de:20:c5: 56:65:f0:b4:e5:7e:cb:04:c8:4c:25:ea:c3:59:05: 6c:6c:eb:80:dc:20:6b:8a:3a:a3:09:d8:4d:9e:42: 94:f1:b8:da:9a:bb:9e:92:23:93:49:dc:e0:90:c9: 86:00:d5:2f:60:95:a8:9b:75:98:0a:6d:0c:fa:49: b9:38:ba:55:7c:7c:85:73:95:31:0a:0e:a3:9e:32: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:05:2A:F1:A7:25:A4:40:6E:92:C0:C4:22:1B:93:73:D5:C8:3D X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:34:f7:aa:60:c8:05:5d:55:32:26:e2:f8:39:46:49:51:04: b7:b6:bb:24:88:f6:18:5f:30:ea:9d:30:d4:06:38:74:f3:99: 8a:c1:e9:73:a6:45:5b:9c:5b:80:3f:60:dd:02:ac:3c:ac:ff: e2:05:a4:43:0a:53:3f:e5:54:c1:59:d3:f2:b1:78:97:d6:2c: 62:c6:55:be:da:36:88:88:48:08:19:16:92:a0:6c:d3:1e:00: 84:93:71:76:a3:d8:9b:79:5f:db:b3:5a:33:49:2d:3d:93:7a: d4:64:e6:88:73:d6:ee:37:9c:59:c1:97:54:b2:6e:0f:2f:1e: 25:44:40:51:56:03:67:0e:5b:57:79:7a:47:07:56:23:ca:07: 97:a5:ba:9a:8d:61:38:65:a0:72:9b:31:4a:77:61:d2:cd:a3: 41:8d:e1:a6:14:85:b4:e0:c4:6e:a2:ef:4f:05:43:69:a7:b6: d9:5c:31:e8:54:6b:67:6c:9c:e3:b1:af:1c:eb:a9:a7:5e:ed: 41:38:15:54:33:2d:58:14:63:20:05:33:62:54:a9:34:58:fc: 05:0c:43:bb:57:36:34:5e:32:71:89:38:da:6f:ac:e6:4a:c1: 8e:5b:88:7c:01:11:fb:7f:88:02:95:c3:52:19:31:88:ed:9a: 84:d1:97:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwNjEzMDAyMTI5WhcNMjUwNjIwMDAyMTI5WjAYMRYwFAYD VQQDEw02ODRiNmYwOS0wYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lmapB66DtbK6TVwukWHUxpV5wCeZceJsBRGEDc8nKQhhKj/HWj/f/Sf3QBE Z2bLTxGbCcSc8J8fgH7HSaZSqHvZ5oZbAAXGNocvPUPk4FfYBlB0QTFul1i8ZTOK kELkGUeKjKTxy4EZiz39q/35Eu17NiM6dQ0EUAtmG4MMqyr5vgIHoNm+Cg7MsmO3 MyFFFygRp/O7aCxzPmANDPLubNEd5n+3OqntxkU+GXVPNBveIMVWZfC05X7LBMhM JerDWQVsbOuA3CBrijqjCdhNnkKU8bjamruekiOTSdzgkMmGANUvYJWom3WYCm0M +km5OLpVfHyFc5UxCg6jnjLmJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKhBSrx pyWkQG6SwMQiG5Nz1cg9MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5NPeqYMgFXVUyJuL4OUZJUQS3trskiPYYXzDqnTDUBjh085mKwelz pkVbnFuAP2DdAqw8rP/iBaRDClM/5VTBWdPysXiX1ixixlW+2jaIiEgIGRaSoGzT HgCEk3F2o9ibeV/bs1ozSS09k3rUZOaIc9buN5xZwZdUsm4PLx4lREBRVgNnDltX eXpHB1YjygeXpbqajWE4ZaBymzFKd2HSzaNBjeGmFIW04MRuou9PBUNpp7bZXDHo VGtnbJzjsa8c66mnXu1BOBVUMy1YFGMgBTNiVKk0WPwFDEO7VzY0XjJxiTjab6zm SsGOW4h8ARH7f4gClcNSGTGI7ZqE0ZdQ -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:57 2025 by rpki-client