$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: U/ecK0vGSCkBTrwVPA8/x6Td9j2r50K+9C4RteznmP0= Subject key identifier: 22:39:5E:BB:E4:44:7D:9F:0B:78:17:62:E0:A2:DA:18:BE:FC:42:E5 Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 016F Signing time: Sun 15 Jun 2025 03:12:29 +0000 Manifest this update: Sun 15 Jun 2025 03:12:28 +0000 Manifest next update: Sun 22 Jun 2025 03:12:28 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: gb40qAh1h33/5GM8Q/DF8gJ/x+j1PPtCo400Li0rgSg=) 2: 4950E3D278DD11EE8A6C4021C4F9AE02.roa (hash: XJ2frVOASLhAvqkv+zQc/5xzWS6OZM6oMLHjmbYH1SM=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Jun 15 03:12:28 2025 GMT Not After : Jun 22 03:12:28 2025 GMT Subject: CN=684e3a1c-719a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:32:ef:8c:80:a5:6e:c0:54:81:ed:7d:76: d3:8a:c1:7b:97:06:b5:40:94:85:ff:58:7a:7d:cf: 6e:62:8d:5f:9d:ec:cb:df:4b:f9:ae:16:39:67:2a: f1:f4:1a:f5:7d:c0:33:67:83:a5:e8:f9:6b:97:e4: 6d:1b:1b:6d:28:0a:fd:15:41:7a:4b:e7:6b:3d:4c: b6:1c:db:0e:56:39:ab:84:a2:6a:b7:8b:9a:b6:e5: a5:94:83:05:25:b8:03:a7:2b:9e:11:4c:ab:86:d9: d2:75:13:df:22:5a:40:a0:9f:73:0e:30:a9:a2:a1: be:df:ea:7c:de:d3:ae:ff:3f:49:7c:a3:0c:dc:bc: ef:c4:b2:9d:2a:4c:3c:0c:4f:48:41:4b:c4:ea:b2: 72:d1:04:6e:93:c7:fa:5d:5e:e9:ca:5e:61:23:60: b7:e7:88:6f:0e:7a:2c:88:db:c9:ad:f0:dd:ff:4e: 4d:58:fe:a7:12:aa:8b:c1:2e:8c:d0:71:bf:21:ea: ce:bd:c8:db:39:d9:7c:60:fb:4c:6c:19:bb:b4:c0: f9:f8:f9:23:5c:14:e9:63:d9:20:7e:c5:d3:cd:fb: 45:e4:50:d5:5b:eb:b0:90:07:d7:ad:d6:ac:b6:6f: 7a:4e:e5:fa:a9:e5:7f:d4:9e:7d:6a:81:9b:38:ad: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:39:5E:BB:E4:44:7D:9F:0B:78:17:62:E0:A2:DA:18:BE:FC:42:E5 X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:27:c6:8d:78:c1:ee:df:63:ee:ef:f5:2a:3e:7c:f8:7f:9c: 66:63:84:78:9d:b8:34:59:a4:0e:66:9e:3b:31:d5:d0:f8:b1: 70:f6:c8:fa:c9:58:29:e9:eb:04:7a:eb:97:59:72:a8:9d:8d: 4d:f7:ec:0e:47:11:13:64:80:4c:f8:54:2c:20:df:4c:0e:f7: 09:8b:37:c6:eb:b3:09:93:18:73:b3:08:96:6b:bb:a6:08:f7: 41:f3:70:8f:2b:3c:d9:77:4f:f3:3d:cf:7a:ca:3c:ee:1f:0b: 54:eb:f5:4f:fe:e9:86:de:f9:b8:6b:c2:61:4e:e1:a7:0d:a1: ac:e7:b0:b2:f9:38:3f:36:2a:10:88:65:11:28:b2:7c:56:27: 08:7d:c3:5d:43:69:17:1f:00:1e:6f:e2:51:e7:6f:dc:d6:1a: 3d:92:c3:1f:de:3d:c3:c3:48:2d:dc:a3:ec:5b:61:e0:c8:4b: 38:63:98:f2:70:e5:56:83:1c:bd:e3:0d:38:db:0f:f2:29:a8: 4a:c7:c6:50:d0:59:0b:39:97:b9:f4:68:78:b6:0d:59:e3:ec: 90:9f:8a:93:65:64:fc:34:aa:be:bf:5d:9d:e6:fc:b8:ac:7d: c8:a7:8a:3d:92:51:25:8b:13:a1:49:e2:02:32:03:3e:24:e5: 62:9b:d3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjUwNjE1MDMxMjI4WhcNMjUwNjIyMDMxMjI4WjAYMRYwFAYD VQQDEw02ODRlM2ExYy03MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+8y74yApW7AVIHtfXbTisF7lwa1QJSF/1h6fc9uYo1fnezL30v5rhY5Zyrx 9Br1fcAzZ4Ol6Plrl+RtGxttKAr9FUF6S+drPUy2HNsOVjmrhKJqt4uatuWllIMF JbgDpyueEUyrhtnSdRPfIlpAoJ9zDjCpoqG+3+p83tOu/z9JfKMM3LzvxLKdKkw8 DE9IQUvE6rJy0QRuk8f6XV7pyl5hI2C354hvDnosiNvJrfDd/05NWP6nEqqLwS6M 0HG/IerOvcjbOdl8YPtMbBm7tMD5+PkjXBTpY9kgfsXTzftF5FDVW+uwkAfXrdas tm96TuX6qeV/1J59aoGbOK2Y1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI5Xrvk RH2fC3gXYuCi2hi+/ELlMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxJ8aNeMHu32Pu7/UqPnz4f5xmY4R4nbg0WaQOZp47MdXQ+LFw9sj6 yVgp6esEeuuXWXKonY1N9+wORxETZIBM+FQsIN9MDvcJizfG67MJkxhzswiWa7um CPdB83CPKzzZd0/zPc96yjzuHwtU6/VP/umG3vm4a8JhTuGnDaGs57Cy+Tg/NioQ iGURKLJ8VicIfcNdQ2kXHwAeb+JR52/c1ho9ksMf3j3Dw0gt3KPsW2HgyEs4Y5jy cOVWgxy94w042w/yKahKx8ZQ0FkLOZe59Gh4tg1Z4+yQn4qTZWT8NKq+v12d5vy4 rH3Ip4o9klElixOhSeICMgM+JOVim9Og -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:12 2025 by rpki-client