$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: 7QzsA7Jw1FORTQ0ZEThb0JiArLY1tgXuU3Uo5NHzJ2E= Subject key identifier: AF:5F:94:40:65:7A:9D:BB:F5:34:AC:69:8A:75:C4:E2:07:74:84:B2 Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0DDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0DD8 Signing time: Sat 14 Jun 2025 17:47:43 +0000 Manifest this update: Sat 14 Jun 2025 17:47:43 +0000 Manifest next update: Sat 21 Jun 2025 17:47:43 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: HxLapDig0g65O14ihjE8vhsBbBC2YwKyEfQYxRyTv0k=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: zpjIrqbuu6FZf6yZ6yRXtcMiYEO9icrMtSLSk/Oo5Eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3550 (0xdde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Jun 14 17:47:43 2025 GMT Not After : Jun 21 17:47:43 2025 GMT Subject: CN=684db5bf-9cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:71:d3:5c:0b:ae:22:ee:79:26:b5:e9:51: ee:bd:be:9e:fe:4d:b7:75:17:85:8d:41:ad:de:de: 1d:30:16:f1:56:9b:38:45:df:5e:4e:f7:53:d2:61: f5:58:62:9d:08:cf:b0:34:f2:95:b1:f5:4b:5f:73: cb:68:b6:e1:c4:ed:f3:aa:42:f7:00:8e:d7:98:1c: 8d:2e:62:c1:85:ed:b0:f6:45:d8:da:ea:db:5a:ce: c0:c3:ab:f2:7f:27:de:54:a9:cd:5b:53:8a:d4:ed: b6:c7:6e:a7:22:2e:b7:e8:f9:36:dc:43:23:11:62: ea:51:3e:f1:59:ef:13:48:e2:fa:eb:3e:02:93:81: 47:be:08:3c:29:99:9a:24:54:e9:14:dd:e6:21:69: 0a:8c:d3:ce:50:64:26:86:45:0b:be:13:84:b4:df: c0:5e:01:96:db:b3:eb:5d:b5:72:ab:52:f1:8a:fa: a1:6f:24:a7:a4:1c:8a:45:68:6b:39:94:0b:d3:a4: 9b:46:0c:7e:a1:a1:01:35:73:4b:98:aa:c2:15:59: 80:c4:da:11:99:89:de:2a:ea:db:96:a3:09:5e:71: c5:1a:56:fc:3c:90:d4:8f:cb:0f:20:59:cf:32:93: a9:68:7a:07:e6:80:f0:d5:6b:6b:5c:76:c4:0b:db: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:94:40:65:7A:9D:BB:F5:34:AC:69:8A:75:C4:E2:07:74:84:B2 X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:28:ac:c3:3e:09:52:0e:e2:af:6a:6a:e3:d7:b7:71:7f:88: 24:17:d9:aa:5c:f1:7c:8f:32:da:98:5c:37:b7:1e:a9:4d:72: bf:5a:3e:8b:01:b4:9d:8e:9a:10:5e:6f:6f:c8:52:95:73:2c: 0f:15:dc:89:ae:a5:c6:fa:55:31:9e:32:a9:5f:3a:a6:bd:50: ed:54:86:76:7b:18:48:cb:0e:b1:0b:20:28:33:dd:cf:46:57: 60:3c:14:d2:44:52:2a:5e:42:1e:ef:59:cb:de:60:9f:94:78: 5c:48:f7:c9:1f:e5:69:c1:fb:bd:43:8c:01:15:7e:7f:00:9b: 07:2f:1a:8b:98:3d:33:0f:ae:f7:80:f6:89:7e:25:84:ba:66: 86:00:84:eb:ba:ca:de:63:e8:94:41:ad:49:6b:d5:1f:20:d8: 4f:ea:aa:ce:8a:51:0d:cb:63:38:f1:54:9e:61:a3:44:c0:ad: ee:2b:2d:d8:c4:ec:7e:82:3e:4d:67:f8:39:ec:29:9a:fe:81: df:f6:e6:e1:5a:b4:c4:ac:10:c2:0c:85:d7:b0:91:1f:8b:77: 0a:c9:51:bf:cd:c9:8c:25:20:6f:5c:e4:53:8f:6f:93:01:1e: 76:d0:08:62:6b:23:ff:3e:96:21:f1:f2:65:5d:7d:80:b6:be: f3:67:ba:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUwNjE0MTc0NzQzWhcNMjUwNjIxMTc0NzQzWjAYMRYwFAYD VQQDEw02ODRkYjViZi05Y2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf9x01wLriLueSa16VHuvb6e/k23dReFjUGt3t4dMBbxVps4Rd9eTvdT0mH1 WGKdCM+wNPKVsfVLX3PLaLbhxO3zqkL3AI7XmByNLmLBhe2w9kXY2urbWs7Aw6vy fyfeVKnNW1OK1O22x26nIi636Pk23EMjEWLqUT7xWe8TSOL66z4Ck4FHvgg8KZma JFTpFN3mIWkKjNPOUGQmhkULvhOEtN/AXgGW27PrXbVyq1LxivqhbySnpByKRWhr OZQL06SbRgx+oaEBNXNLmKrCFVmAxNoRmYneKurblqMJXnHFGlb8PJDUj8sPIFnP MpOpaHoH5oDw1WtrXHbEC9sWPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9flEBl ep279TSsaYp1xOIHdISyMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnKKzDPglSDuKvamrj17dxf4gkF9mqXPF8jzLamFw3tx6pTXK/Wj6L AbSdjpoQXm9vyFKVcywPFdyJrqXG+lUxnjKpXzqmvVDtVIZ2exhIyw6xCyAoM93P RldgPBTSRFIqXkIe71nL3mCflHhcSPfJH+Vpwfu9Q4wBFX5/AJsHLxqLmD0zD673 gPaJfiWEumaGAITrusreY+iUQa1Ja9UfINhP6qrOilENy2M48VSeYaNEwK3uKy3Y xOx+gj5NZ/g57Cma/oHf9ubhWrTErBDCDIXXsJEfi3cKyVG/zcmMJSBvXORTj2+T AR520AhiayP/PpYh8fJlXX2Atr7zZ7po -----END CERTIFICATE-----Generated at Sun Jun 15 10:20:47 2025 by rpki-client