$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: c8iqTyJEbgv90ixnAHw2gM+C46Pj5HkHO5661xCCZo0= Subject key identifier: 37:88:3F:0D:A2:3E:D5:A1:8A:88:16:DB:F6:13:05:43:BD:59:54:99 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: 9A Signing time: Sun 15 Jun 2025 05:35:44 +0000 Manifest this update: Sun 15 Jun 2025 05:35:44 +0000 Manifest next update: Sun 22 Jun 2025 05:35:44 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: CszQmGVtwRgFdq1I9EKElAascPghfCG/8pqeQGfV6C4=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: FLsSk6E317UI1n66jph+9Dir8yNvamWkdarfqoL42t0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Jun 15 05:35:44 2025 GMT Not After : Jun 22 05:35:44 2025 GMT Subject: CN=684e5bb0-350e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:ad:80:ed:58:c7:49:60:b1:65:ca:13:b2: 7e:d9:3e:9b:7e:2a:cd:56:06:53:d4:4e:ba:35:27: 8c:cd:74:7f:d3:28:c9:b4:10:7f:cf:34:c2:d6:2e: d7:d3:f5:e2:82:be:ee:9e:5c:b0:81:d2:03:90:0c: e0:a5:8c:94:e2:cd:2f:de:7e:a4:49:07:b6:b3:6a: 97:6f:91:75:98:1f:59:05:74:7f:ba:e8:1c:9c:5e: a4:95:99:3a:6e:74:5b:6f:43:91:01:df:0e:0c:52: e8:35:ae:3f:30:02:86:8d:cd:4f:27:f3:fb:2d:97: 94:d9:62:a3:cb:68:4f:36:fb:51:c4:0e:57:f6:e0: 34:1d:e4:75:c2:0c:61:c7:8e:93:18:cb:ee:96:78: 12:8a:e5:f1:f2:a5:32:0b:1e:4d:95:60:a8:2f:81: 0d:d0:43:90:a7:f7:1f:d5:65:80:10:d7:74:65:2d: 14:24:1d:eb:3f:74:bf:6c:cc:c1:b7:8f:22:1b:1f: c2:d3:cb:cb:5c:f1:d2:62:2d:da:23:64:b5:66:f3: 2a:7a:49:00:73:83:c2:fd:ac:e4:95:59:f9:87:23: ef:30:57:0a:6e:be:64:c4:a3:14:ef:5e:cb:35:8e: 98:6c:b3:9f:e9:48:46:d4:b0:37:54:b9:cd:2b:d2: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:88:3F:0D:A2:3E:D5:A1:8A:88:16:DB:F6:13:05:43:BD:59:54:99 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:cd:18:cb:ac:2d:f7:e6:a5:b1:47:fc:64:0a:cb:db:4d:54: 87:10:c1:43:75:e8:f7:e4:d5:e9:97:c8:7f:ac:8c:d3:38:e8: fc:13:ff:da:e5:4f:b1:e2:2f:33:96:21:0c:2a:f7:7b:71:f6: 3a:68:61:2f:18:08:3a:d2:c3:b6:39:e0:c2:e3:11:14:96:93: a7:59:58:4e:cf:08:2f:b3:46:d7:5a:10:b8:d1:4b:41:3e:a0: c9:bc:83:bc:a0:54:aa:4c:26:80:5e:eb:90:6e:60:18:bd:fc: 31:d4:6b:f3:31:d9:71:74:d4:f9:78:e5:f4:60:93:17:77:81: b1:70:cb:0a:99:1d:4a:cd:f8:3d:c1:d6:01:7c:ad:6d:44:ea: 17:9f:32:cb:2d:ca:9b:c3:c9:db:29:86:6b:65:7f:7a:e2:ba: 16:ad:b0:4c:be:db:13:53:82:fe:46:73:84:ed:d9:3d:99:8e: c3:30:88:96:ae:e9:15:3d:76:48:10:39:bd:a2:52:81:95:5e: 9a:83:97:44:87:ea:47:ac:54:b9:e6:b3:fb:eb:d4:c1:9e:90: bb:75:52:1a:c8:e2:a5:a3:4c:64:ac:a9:d5:f4:e3:d9:1d:c4: 75:32:67:8c:e5:95:2d:d4:76:1b:d2:5f:3c:f3:27:9b:37:a4: 44:ac:91:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUwNjE1MDUzNTQ0WhcNMjUwNjIyMDUzNTQ0WjAYMRYwFAYD VQQDEw02ODRlNWJiMC0zNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDGtgO1Yx0lgsWXKE7J+2T6bfirNVgZT1E66NSeMzXR/0yjJtBB/zzTC1i7X 0/Xigr7unlywgdIDkAzgpYyU4s0v3n6kSQe2s2qXb5F1mB9ZBXR/uugcnF6klZk6 bnRbb0ORAd8ODFLoNa4/MAKGjc1PJ/P7LZeU2WKjy2hPNvtRxA5X9uA0HeR1wgxh x46TGMvulngSiuXx8qUyCx5NlWCoL4EN0EOQp/cf1WWAENd0ZS0UJB3rP3S/bMzB t48iGx/C08vLXPHSYi3aI2S1ZvMqekkAc4PC/azklVn5hyPvMFcKbr5kxKMU717L NY6YbLOf6UhG1LA3VLnNK9LjtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeIPw2i PtWhiogW2/YTBUO9WVSZMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJzRjLrC335qWxR/xkCsvbTVSHEMFDdej35NXpl8h/rIzTOOj8E//a 5U+x4i8zliEMKvd7cfY6aGEvGAg60sO2OeDC4xEUlpOnWVhOzwgvs0bXWhC40UtB PqDJvIO8oFSqTCaAXuuQbmAYvfwx1GvzMdlxdNT5eOX0YJMXd4GxcMsKmR1Kzfg9 wdYBfK1tROoXnzLLLcqbw8nbKYZrZX964roWrbBMvtsTU4L+RnOE7dk9mY7DMIiW rukVPXZIEDm9olKBlV6ag5dEh+pHrFS55rP769TBnpC7dVIayOKlo0xkrKnV9OPZ HcR1MmeM5ZUt1HYb0l888yebN6RErJEA -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:31 2025 by rpki-client