$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: mTPCbr1RUuTUQJohTf2nIhWglJMpgThhoZc5J/Gz17s= Subject key identifier: 41:8B:48:E6:69:2D:BE:6C:E4:5E:FF:FA:A8:4E:5D:6D:A7:AF:A7:57 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 015F Signing time: Fri 13 Jun 2025 03:00:07 +0000 Manifest this update: Fri 13 Jun 2025 03:00:07 +0000 Manifest next update: Fri 20 Jun 2025 03:00:07 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: IOZa+xmIRsS8HpkgE6sEa43pedpx/n2Tb3cHT/0KjGg=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Jun 13 03:00:07 2025 GMT Not After : Jun 20 03:00:07 2025 GMT Subject: CN=684b9437-c180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:e3:57:e6:b4:83:a8:dd:95:ee:30:88:0f: 52:bd:23:30:2d:33:db:b4:ee:49:2f:80:34:76:c2: 65:43:81:9e:11:8a:05:99:0c:a9:f8:a9:5e:3a:41: 8d:ee:55:7f:65:c8:ac:31:97:dc:3f:77:ab:9b:7d: 56:a0:ca:15:c2:cf:16:5e:5b:46:0b:a7:70:8f:57: 0b:8f:5a:c1:9a:b9:b7:df:a0:a2:ca:33:b1:7a:e5: 5d:a0:6d:cf:da:5d:90:4a:be:d7:85:a3:b2:11:1b: 80:b7:32:36:e5:ec:77:95:54:2e:00:e2:06:b6:ab: 0f:81:ed:e2:26:d6:ed:46:ee:99:e8:ed:9d:c8:f7: c7:78:51:0f:6c:f2:9f:27:9d:0d:33:26:96:a4:c6: 97:34:98:0b:f7:ca:92:27:c7:bd:41:06:c8:83:01: 24:4f:9d:2a:9e:dc:64:c2:8c:a7:7b:10:99:5e:cb: 69:b6:9d:98:1d:d2:01:20:c0:12:79:8f:2f:d7:3d: 1c:c4:21:37:35:28:d5:48:52:ef:a4:f0:d3:c8:d9: 3a:9b:67:24:e6:c2:e1:c4:ee:c8:a6:12:bf:06:88: 33:ac:4c:56:98:75:20:e7:db:42:dc:b9:49:3a:31: 7f:79:b7:23:68:d6:ea:3b:56:15:d9:9b:25:85:6a: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8B:48:E6:69:2D:BE:6C:E4:5E:FF:FA:A8:4E:5D:6D:A7:AF:A7:57 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:12:e7:50:97:05:7c:01:6c:5e:11:86:74:6a:47:e2:2f:bc: 6c:54:23:0e:a4:1c:6e:bb:19:e7:11:1d:50:3a:68:f3:aa:34: aa:fa:d0:66:16:81:18:ab:b6:16:6b:c2:e1:1d:8a:83:8d:7d: cb:2a:dd:3a:86:64:ae:1a:a2:ac:a8:55:7a:69:7f:6d:34:96: 2d:c3:b2:8f:3c:0e:17:1a:e5:08:ad:e0:5d:31:00:f4:2f:cd: 3c:f7:80:51:d5:c0:f2:c5:c2:35:eb:17:65:6e:79:28:cc:20: a2:fc:b0:58:dd:a3:19:05:87:f9:c7:17:d4:5b:0e:5e:60:da: 16:88:9a:a6:c0:75:8a:94:5a:ea:a8:4c:15:bf:2f:06:a9:0d: 01:da:99:ca:44:b7:64:e6:4c:3d:ee:ad:48:54:33:55:2c:7d: ac:fb:3a:4f:b6:cf:83:fe:41:d3:02:04:85:e0:ae:27:0c:30: bb:70:4f:4e:9d:c8:0c:29:8d:b5:91:2b:87:3a:7e:f9:80:b0: b9:dc:b9:a3:2f:6d:58:0a:84:72:ec:41:d2:f8:cf:14:68:34: 86:a2:b3:32:97:0b:3b:69:9b:5d:08:76:dc:35:1a:cf:00:68: fa:6e:02:1d:fa:a8:3c:b4:00:a6:c6:ce:13:b7:c1:30:b7:bd: 9f:d9:6d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwNjEzMDMwMDA3WhcNMjUwNjIwMDMwMDA3WjAYMRYwFAYD VQQDEw02ODRiOTQzNy1jMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V/jV+a0g6jdle4wiA9SvSMwLTPbtO5JL4A0dsJlQ4GeEYoFmQyp+KleOkGN 7lV/ZcisMZfcP3erm31WoMoVws8WXltGC6dwj1cLj1rBmrm336CiyjOxeuVdoG3P 2l2QSr7XhaOyERuAtzI25ex3lVQuAOIGtqsPge3iJtbtRu6Z6O2dyPfHeFEPbPKf J50NMyaWpMaXNJgL98qSJ8e9QQbIgwEkT50qntxkwoynexCZXstptp2YHdIBIMAS eY8v1z0cxCE3NSjVSFLvpPDTyNk6m2ck5sLhxO7IphK/BogzrExWmHUg59tC3LlJ OjF/ebcjaNbqO1YV2ZslhWr6AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGLSOZp Lb5s5F7/+qhOXW2nr6dXMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBEudQlwV8AWxeEYZ0akfiL7xsVCMOpBxuuxnnER1QOmjzqjSq+tBm FoEYq7YWa8LhHYqDjX3LKt06hmSuGqKsqFV6aX9tNJYtw7KPPA4XGuUIreBdMQD0 L80894BR1cDyxcI16xdlbnkozCCi/LBY3aMZBYf5xxfUWw5eYNoWiJqmwHWKlFrq qEwVvy8GqQ0B2pnKRLdk5kw97q1IVDNVLH2s+zpPts+D/kHTAgSF4K4nDDC7cE9O ncgMKY21kSuHOn75gLC53LmjL21YCoRy7EHS+M8UaDSGorMylws7aZtdCHbcNRrP AGj6bgId+qg8tACmxs4Tt8Ewt72f2W3C -----END CERTIFICATE-----Generated at Sat Jun 14 18:15:03 2025 by rpki-client