$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: B25ukELgEUIK/Mxik04X/9JW0Lqq3QQatYwrg1uLz9c= Subject key identifier: 6F:5A:B7:8C:F2:BE:1C:F2:86:60:32:CE:B1:74:27:D4:C6:0F:70:A0 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 3D Signing time: Fri 13 Jun 2025 06:26:30 +0000 Manifest this update: Fri 13 Jun 2025 06:26:29 +0000 Manifest next update: Fri 20 Jun 2025 06:26:29 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: b6is4Pnx5bGQ1HwqSC6vKV8evwKjbA9Wczm0iNfMCmQ=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Jun 13 06:26:29 2025 GMT Not After : Jun 20 06:26:29 2025 GMT Subject: CN=684bc495-f8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:cc:fe:2a:10:25:04:ed:b8:4f:d1:6b:6c: 3e:8d:3a:75:ea:23:0a:16:c8:58:24:fd:d5:bb:11: f7:c3:0d:48:9c:f8:0b:2a:cb:d7:01:5a:98:c1:b0: 3d:46:8c:07:91:8b:73:5d:71:e6:75:f7:f0:e9:13: d5:62:ec:55:92:3a:10:fb:ec:f1:64:c3:5a:d8:10: 68:aa:98:1b:bd:64:1f:9a:f2:18:42:c8:04:2c:9b: 17:2b:ea:c9:4b:29:9b:c1:17:2d:c4:f0:74:7f:eb: 31:41:13:01:a7:a4:ba:40:dc:2c:26:5b:f4:c4:ec: 7d:5f:d4:1d:61:1f:72:ef:77:ae:a0:c0:94:ac:24: 0a:14:7c:dd:c9:99:9a:2b:1a:3d:87:12:ad:dd:0a: ab:2c:61:37:be:cf:9b:99:2e:bb:88:60:90:5c:05: 26:5d:a4:ec:5b:93:f0:38:be:16:07:3e:09:37:dc: 2d:2d:9b:a0:af:fc:da:1a:c4:1d:43:9d:da:02:03: 13:4d:bd:b9:5b:9e:54:cb:aa:26:59:42:cc:b1:77: 15:5d:17:5b:e7:5e:58:d7:8e:d9:4a:1b:9a:bd:58: 01:a9:de:d4:36:83:6a:9e:3a:1c:e7:5a:52:f2:5d: 0d:75:e6:e2:99:79:1d:79:14:31:6e:4e:c1:57:ee: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5A:B7:8C:F2:BE:1C:F2:86:60:32:CE:B1:74:27:D4:C6:0F:70:A0 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ca:83:b0:3e:df:e5:e9:0a:d5:f8:64:83:27:b9:da:3e:ca: d4:86:2e:d2:a7:7d:b3:e2:36:14:54:bc:66:7b:bf:b3:a0:44: 0f:4b:60:68:f4:53:3e:ea:15:11:28:77:98:4d:a8:83:8b:aa: 9f:42:cb:c6:c1:6d:d3:93:29:dd:b5:0a:8a:36:29:51:50:d4: 8c:c1:56:1d:42:d2:38:02:cd:a9:8c:f4:6d:88:e6:96:6c:05: 1f:f5:2b:20:63:c3:30:c7:09:ec:54:85:25:28:b4:e2:1a:0c: a5:05:59:ad:90:37:39:eb:53:33:89:d0:b5:9e:e6:8e:85:d1: ca:36:25:56:7a:a8:78:1f:63:0f:e7:f5:68:46:db:71:ac:e4: fa:9c:b6:14:e1:37:77:ec:65:be:e5:af:72:6c:8d:96:31:73: c3:7a:b5:73:35:5d:69:ec:09:ab:b0:ac:69:35:e2:8f:39:c2: 82:47:1f:8e:74:f4:5c:c2:fe:91:00:a2:d6:0b:0c:62:ea:d9: 56:b3:59:c3:69:04:13:8b:db:9e:92:8d:92:65:5e:f0:1a:2b: 32:64:df:ae:52:0f:f6:3e:cc:c6:59:b2:ab:82:f8:1e:d3:8d: 00:5d:ff:2c:7e:75:21:72:6f:c8:7f:55:17:65:fa:f7:3a:61: 17:2f:9e:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA2MTMwNjI2MjlaFw0yNTA2MjAwNjI2MjlaMBgxFjAUBgNV BAMTDTY4NGJjNDk1LWY4YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj78z+KhAlBO24T9FrbD6NOnXqIwoWyFgk/dW7EffDDUic+Asqy9cBWpjBsD1G jAeRi3NdceZ19/DpE9Vi7FWSOhD77PFkw1rYEGiqmBu9ZB+a8hhCyAQsmxcr6slL KZvBFy3E8HR/6zFBEwGnpLpA3CwmW/TE7H1f1B1hH3Lvd66gwJSsJAoUfN3JmZor Gj2HEq3dCqssYTe+z5uZLruIYJBcBSZdpOxbk/A4vhYHPgk33C0tm6Cv/NoaxB1D ndoCAxNNvblbnlTLqiZZQsyxdxVdF1vnXljXjtlKG5q9WAGp3tQ2g2qeOhznWlLy XQ115uKZeR15FDFuTsFX7pYjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb1q3jPK+ HPKGYDLOsXQn1MYPcKAwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFzKg7A+3+XpCtX4ZIMnudo+ytSGLtKnfbPiNhRUvGZ7v7OgRA9LYGj0 Uz7qFREod5hNqIOLqp9Cy8bBbdOTKd21Coo2KVFQ1IzBVh1C0jgCzamM9G2I5pZs BR/1KyBjwzDHCexUhSUotOIaDKUFWa2QNznrUzOJ0LWe5o6F0co2JVZ6qHgfYw/n 9WhG23Gs5PqcthThN3fsZb7lr3JsjZYxc8N6tXM1XWnsCauwrGk14o85woJHH450 9FzC/pEAotYLDGLq2VazWcNpBBOL256SjZJlXvAaKzJk365SD/Y+zMZZsquC+B7T jQBd/yx+dSFyb8h/VRdl+vc6YRcvnuY= -----END CERTIFICATE-----Generated at Sun Jun 15 08:04:54 2025 by rpki-client