$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: Ck1EmpA1B9WYfcNPw12wcyf4brea4P7942NtzaNFBfY= Subject key identifier: 49:9D:5A:DC:C4:9F:F5:8F:A3:37:0A:86:EF:EF:FC:63:68:0E:0D:15 Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 14 Signing time: Sat 21 Jun 2025 06:59:38 +0000 Manifest this update: Sat 21 Jun 2025 06:59:37 +0000 Manifest next update: Sat 28 Jun 2025 06:59:37 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: AsKB26EshLUcQOiRdh9DMKPmlHqIIg38qyE8Uz+TJoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 06:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Jun 21 06:59:37 2025 GMT Not After : Jun 28 06:59:37 2025 GMT Subject: CN=68565859-acab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:10:d9:8f:4b:0d:a4:a3:65:5d:b9:5c:b6: 31:ab:7f:38:32:62:3a:4f:e0:93:b7:12:57:76:14: f4:df:e2:2c:38:f3:0a:b8:22:cb:ab:81:61:ac:e2: 78:c4:87:f1:af:d9:88:d2:64:82:03:0f:57:96:c5: 94:d1:30:d1:46:08:a2:7d:2f:cd:e1:8e:43:a6:69: 8a:71:b7:15:63:f8:df:e6:36:1f:bd:58:aa:30:d7: a8:63:6b:67:d3:b3:df:e2:39:fa:50:21:e5:56:ab: d0:75:a1:b1:34:b2:a2:2f:46:62:d3:75:57:ad:c6: 6b:9f:9f:b4:2b:f9:39:69:2b:15:76:45:b8:86:27: 1f:2e:61:31:c6:92:14:62:a9:20:61:aa:3d:82:0f: 79:6b:6a:48:bf:43:9c:f6:be:84:73:c7:3e:a7:1a: ed:17:f8:db:2b:02:57:6f:b7:51:ad:a5:6a:a2:28: e1:b5:21:aa:04:d3:1a:6f:44:8d:35:f1:8f:84:62: cc:e3:b4:7f:b7:cd:84:c9:5b:08:8c:8b:0e:2a:c7: d4:6c:96:6e:d9:67:3f:a5:3f:b6:14:d8:bf:b7:1e: 22:a4:95:7e:7d:9f:cd:e4:90:16:2e:80:41:0c:d3: 7a:51:ea:80:ae:c6:61:ca:a2:61:68:41:bb:c5:79: 9d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:5A:DC:C4:9F:F5:8F:A3:37:0A:86:EF:EF:FC:63:68:0E:0D:15 X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:7d:08:0a:a4:2b:7a:2a:19:53:e8:a1:ea:02:a2:a7:b0:57: 75:07:f7:bd:61:02:c1:b1:80:06:46:55:7a:22:e6:81:1d:2b: 17:d7:28:b1:4b:2c:ad:00:5f:53:0d:e5:e3:ad:47:5f:50:67: e6:59:d1:ca:ed:27:e2:50:ff:f9:25:74:04:96:59:fe:5d:63: 36:07:63:41:08:1e:3c:22:3a:7a:64:f8:d8:06:fc:15:b8:06: 87:e4:47:02:4e:cc:cb:61:0c:85:b8:a4:5d:ba:ae:46:c3:5f: 46:4b:b3:28:69:33:93:33:00:38:b7:41:ca:3f:50:4d:2c:97: 13:ed:14:5f:27:32:7e:23:ac:ed:ef:97:db:76:87:96:31:5f: fe:9c:5a:7e:1c:3a:55:3d:d8:1a:70:55:38:47:d2:95:ef:8f: fd:3c:00:8b:57:00:30:2b:af:8e:31:ec:e5:e1:3f:30:e2:1b: 70:0a:19:5f:65:a4:a0:af:24:9e:c5:4d:19:d7:d2:07:b8:83: 9f:55:0c:a7:31:0e:84:1b:a8:89:cc:cc:12:57:58:63:5f:ad: cc:49:b6:19:c9:2e:4c:18:39:12:d6:44:ca:f6:b1:70:30:3b: 76:9c:e7:da:12:b5:c2:e3:fb:3a:92:af:eb:4b:37:26:27:f3: 77:05:d6:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTA2MjEwNjU5MzdaFw0yNTA2MjgwNjU5MzdaMBgxFjAUBgNV BAMTDTY4NTY1ODU5LWFjYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBGhDZj0sNpKNlXblctjGrfzgyYjpP4JO3Eld2FPTf4iw48wq4IsurgWGs4njE h/Gv2YjSZIIDD1eWxZTRMNFGCKJ9L83hjkOmaYpxtxVj+N/mNh+9WKow16hja2fT s9/iOfpQIeVWq9B1obE0sqIvRmLTdVetxmufn7Qr+TlpKxV2RbiGJx8uYTHGkhRi qSBhqj2CD3lraki/Q5z2voRzxz6nGu0X+NsrAldvt1GtpWqiKOG1IaoE0xpvRI01 8Y+EYszjtH+3zYTJWwiMiw4qx9Rslm7ZZz+lP7YU2L+3HiKklX59n83kkBYugEEM 03pR6oCuxmHKomFoQbvFeZ1HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSZ1a3MSf 9Y+jNwqG7+/8Y2gODRUwHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGN9CAqkK3oqGVPooeoCoqewV3UH971hAsGxgAZGVXoi5oEdKxfXKLFL LK0AX1MN5eOtR19QZ+ZZ0crtJ+JQ//kldASWWf5dYzYHY0EIHjwiOnpk+NgG/BW4 BofkRwJOzMthDIW4pF26rkbDX0ZLsyhpM5MzADi3Qco/UE0slxPtFF8nMn4jrO3v l9t2h5YxX/6cWn4cOlU92BpwVThH0pXvj/08AItXADArr44x7OXhPzDiG3AKGV9l pKCvJJ7FTRnX0ge4g59VDKcxDoQbqInMzBJXWGNfrcxJthnJLkwYORLWRMr2sXAw O3ac59oStcLj+zqSr+tLNyYn83cF1vY= -----END CERTIFICATE-----Generated at Sat Jun 21 14:15:46 2025 by rpki-client