$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: 6VcJLNOTdORmc0g5tPcbNjYPDVL7sBFA8c7vr+mLTFs= Subject key identifier: 3C:7F:90:C6:2D:7E:C8:59:C0:64:73:1E:4C:DD:29:1A:66:95:F0:72 Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: FF Signing time: Sat 21 Jun 2025 04:14:59 +0000 Manifest this update: Sat 21 Jun 2025 04:14:58 +0000 Manifest next update: Sat 28 Jun 2025 04:14:58 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: E4iLb+OX1Gc/sY+0G4OZ+SsLuL4wPoCub5xDbQRgee4=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 04:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: Jun 21 04:14:58 2025 GMT Not After : Jun 28 04:14:58 2025 GMT Subject: CN=685631c3-2ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d6:24:86:a1:77:95:a9:21:f9:e9:95:5f:c2: 4a:18:74:31:38:d3:42:e0:f6:60:3c:91:12:00:7f: 04:64:b2:63:8a:82:c5:52:c2:6a:42:b0:6e:78:3f: 62:76:d7:b8:06:17:4c:0c:f8:92:c7:4c:ab:64:20: 43:64:4f:47:50:9f:cc:8c:85:f6:00:eb:0d:b8:9b: 57:12:11:89:73:ee:cb:5f:ad:a5:a6:94:d2:05:52: cf:6d:95:3d:6c:dd:4f:50:5a:1b:ad:4a:44:62:d3: bc:38:b5:8a:f4:de:4b:76:b5:a2:6f:ce:d1:fb:48: 94:8d:eb:dc:a0:7f:56:85:64:1a:5b:2f:c1:76:99: 9b:79:85:d6:9b:3d:d1:f0:88:78:68:52:1b:05:c5: c0:2e:be:b7:d0:f0:eb:10:96:80:31:e8:4f:ee:63: 76:a0:36:38:f8:1a:4a:da:44:7c:8d:20:37:e7:bc: a0:0c:35:1c:12:c8:4f:b4:a4:de:c6:c8:59:33:c7: 60:17:ab:ae:e0:e4:62:55:d4:46:7e:95:9b:2e:d0: 64:0d:23:c9:f5:55:0d:45:44:94:13:b6:9e:fe:14: 0e:18:04:e5:18:65:24:a9:2b:29:01:d1:67:b2:0f: c8:f3:48:78:e5:dc:e1:de:ff:3f:56:cb:e2:8f:04: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7F:90:C6:2D:7E:C8:59:C0:64:73:1E:4C:DD:29:1A:66:95:F0:72 X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:93:e8:4d:65:b9:02:2e:7d:6f:61:11:0f:b2:0b:9c:57:6a: 4f:ec:e5:4d:c7:8f:09:a7:69:d5:db:12:9a:4a:96:ce:b9:2f: 01:d1:db:db:05:ac:e8:75:0d:6d:6a:9c:75:5f:d0:e1:a5:c3: eb:39:22:53:27:f7:c6:24:d9:d8:27:66:ad:be:c0:01:54:8d: 6a:5e:11:41:91:6c:99:84:1e:a9:cc:20:9a:f3:f7:d4:d8:92: ee:0c:80:8a:7a:13:7c:48:d1:ec:f3:61:d5:b9:74:c0:cc:df: c7:83:47:79:9d:27:62:14:87:b9:8e:00:06:b3:8e:ef:d3:a0: d2:12:ff:87:03:87:fa:b5:0a:6c:cf:a8:04:38:6a:36:ac:04: 9f:15:f4:cd:b4:1f:ef:67:15:4b:27:68:c9:65:40:12:62:b7: ea:05:74:70:bb:1f:52:c6:9e:ed:a8:f1:8f:cf:17:91:bc:bb: 25:34:6d:1b:3f:6f:9c:e1:6b:92:40:9a:b6:48:23:b8:6d:fd: da:e2:77:a2:2d:cb:00:ea:a6:64:3d:f4:fe:89:ab:a7:2b:3b: 55:60:24:84:3e:cd:8c:06:2a:86:c4:3c:e0:72:45:8c:88:7a: db:1f:13:af:c7:3f:d7:b2:01:39:be:7f:d3:01:a9:86:9b:91: a3:09:e1:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUwNjIxMDQxNDU4WhcNMjUwNjI4MDQxNDU4WjAYMRYwFAYD VQQDEw02ODU2MzFjMy0yZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9YkhqF3lakh+emVX8JKGHQxONNC4PZgPJESAH8EZLJjioLFUsJqQrBueD9i dte4BhdMDPiSx0yrZCBDZE9HUJ/MjIX2AOsNuJtXEhGJc+7LX62lppTSBVLPbZU9 bN1PUFobrUpEYtO8OLWK9N5LdrWib87R+0iUjevcoH9WhWQaWy/BdpmbeYXWmz3R 8Ih4aFIbBcXALr630PDrEJaAMehP7mN2oDY4+BpK2kR8jSA357ygDDUcEshPtKTe xshZM8dgF6uu4ORiVdRGfpWbLtBkDSPJ9VUNRUSUE7ae/hQOGATlGGUkqSspAdFn sg/I80h45dzh3v8/VsvijwTVLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx/kMYt fshZwGRzHkzdKRpmlfByMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAk+hNZbkCLn1vYREPsgucV2pP7OVNx48Jp2nV2xKaSpbOuS8B0dvb BazodQ1tapx1X9DhpcPrOSJTJ/fGJNnYJ2atvsABVI1qXhFBkWyZhB6pzCCa8/fU 2JLuDICKehN8SNHs82HVuXTAzN/Hg0d5nSdiFIe5jgAGs47v06DSEv+HA4f6tQps z6gEOGo2rASfFfTNtB/vZxVLJ2jJZUASYrfqBXRwux9Sxp7tqPGPzxeRvLslNG0b P2+c4WuSQJq2SCO4bf3a4neiLcsA6qZkPfT+iaunKztVYCSEPs2MBiqGxDzgckWM iHrbHxOvxz/XsgE5vn/TAamGm5GjCeGv -----END CERTIFICATE-----Generated at Sun Jun 22 14:46:36 2025 by rpki-client