$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: EU1KWM2MEfYySRp1/Ow5MoMNt02SP44N5naOmmWiBAg= Subject key identifier: 35:20:52:7D:66:D6:B7:A3:5C:8E:DA:88:D1:4B:8E:A7:EB:31:62:F3 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: B8 Signing time: Sun 15 Jun 2025 05:01:38 +0000 Manifest this update: Sun 15 Jun 2025 05:01:37 +0000 Manifest next update: Sun 22 Jun 2025 05:01:37 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: h50AsT8tHCQZjiNnGfRgmgHkef7ifalUHVrVbjnl9gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Jun 15 05:01:37 2025 GMT Not After : Jun 22 05:01:37 2025 GMT Subject: CN=684e53b1-1822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:35:56:5c:5a:a6:c7:7b:9e:5d:3b:29:c7:25: 96:32:14:c3:e1:16:cd:8a:a4:8d:0d:fb:7a:07:cb: aa:35:d2:d3:bf:ad:9c:60:5b:55:28:56:de:da:9a: 05:cf:d4:3a:19:18:ab:21:81:10:b8:77:9b:bd:76: b4:c3:75:1e:d7:09:8f:96:4d:95:40:12:d1:c2:87: a6:4b:c8:eb:d9:30:42:95:94:f5:05:b9:b6:30:44: 7f:25:be:78:8e:03:13:fd:ad:32:b0:e7:7a:74:ec: 6b:79:67:62:25:ee:eb:79:c1:d7:1f:1d:61:40:50: fd:80:5e:07:44:e8:6c:21:1a:3f:7a:90:ac:06:67: 15:43:70:5c:42:61:c1:b3:67:ca:27:d0:b6:ac:43: 1a:da:93:f8:cf:7b:b8:3f:95:86:7d:dc:09:9d:07: 03:06:b7:d6:f4:b1:39:61:48:f7:44:51:08:da:93: cc:fa:9e:35:18:0a:5c:c2:38:a8:c4:5e:89:0d:89: 58:9a:9b:ad:03:6c:75:44:37:0f:82:96:9b:82:51: 3e:6c:be:38:d3:10:ae:1f:55:50:2a:a0:c1:25:7a: 83:e7:92:96:1a:5c:ea:ba:71:ca:fc:89:c0:0f:c7: e7:f4:9f:f0:03:19:ad:82:d5:df:d5:b8:53:26:d0: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:20:52:7D:66:D6:B7:A3:5C:8E:DA:88:D1:4B:8E:A7:EB:31:62:F3 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a3:ea:81:ed:fd:c2:98:8e:04:d3:bb:c2:c8:1a:b1:25:83: f8:11:b0:2b:45:09:81:c1:3a:17:9b:81:24:94:63:6e:26:41: 83:e4:f2:86:eb:54:f5:6a:7c:aa:59:f3:37:ab:be:41:f8:21: 45:34:d6:6b:d9:88:64:cf:e4:96:7d:82:c7:92:c3:b7:f9:55: 1a:6a:51:44:32:b5:bd:6c:9c:63:0f:af:03:75:b7:57:6b:8a: 8c:2d:ab:76:ea:eb:b9:75:7c:13:48:7d:e6:18:9a:1b:9c:bc: c5:df:3a:4e:ad:ae:d9:c4:b6:99:5b:91:0c:94:13:b5:c7:06: b7:bf:c5:2b:24:26:b5:b7:b4:f2:ba:8e:32:c0:ee:43:90:ee: 2f:3e:c8:35:94:8b:6a:2c:1c:05:b7:57:09:4e:1d:45:df:85: b6:28:d8:33:d3:ad:c9:87:28:5c:be:3c:ea:b3:c8:4e:1a:4f: f1:b4:99:35:99:b2:86:11:61:09:05:bd:d9:b5:86:37:81:13: bb:21:a7:33:c2:84:a2:5b:ee:be:5f:e8:f0:bd:91:1d:05:53: fe:dd:18:5c:84:e8:32:1a:bd:6f:a1:70:0b:c7:4c:35:e9:a6: bb:36:ea:47:bb:12:28:39:02:30:56:ff:67:1e:39:84:ec:6b: af:1c:0a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjUwNjE1MDUwMTM3WhcNMjUwNjIyMDUwMTM3WjAYMRYwFAYD VQQDEw02ODRlNTNiMS0xODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jVWXFqmx3ueXTspxyWWMhTD4RbNiqSNDft6B8uqNdLTv62cYFtVKFbe2poF z9Q6GRirIYEQuHebvXa0w3Ue1wmPlk2VQBLRwoemS8jr2TBClZT1Bbm2MER/Jb54 jgMT/a0ysOd6dOxreWdiJe7recHXHx1hQFD9gF4HROhsIRo/epCsBmcVQ3BcQmHB s2fKJ9C2rEMa2pP4z3u4P5WGfdwJnQcDBrfW9LE5YUj3RFEI2pPM+p41GApcwjio xF6JDYlYmputA2x1RDcPgpabglE+bL440xCuH1VQKqDBJXqD55KWGlzqunHK/InA D8fn9J/wAxmtgtXf1bhTJtDQgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUgUn1m 1rejXI7aiNFLjqfrMWLzMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKo+qB7f3CmI4E07vCyBqxJYP4EbArRQmBwToXm4EklGNuJkGD5PKG 61T1anyqWfM3q75B+CFFNNZr2Yhkz+SWfYLHksO3+VUaalFEMrW9bJxjD68DdbdX a4qMLat26uu5dXwTSH3mGJobnLzF3zpOra7ZxLaZW5EMlBO1xwa3v8UrJCa1t7Ty uo4ywO5DkO4vPsg1lItqLBwFt1cJTh1F34W2KNgz063Jhyhcvjzqs8hOGk/xtJk1 mbKGEWEJBb3ZtYY3gRO7IaczwoSiW+6+X+jwvZEdBVP+3RhchOgyGr1voXALx0w1 6aa7NupHuxIoOQIwVv9nHjmE7GuvHApa -----END CERTIFICATE-----Generated at Mon Jun 16 22:01:56 2025 by rpki-client