$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: vYiL6aLKI7QjbfZkrNkL5NQfa2cf0ppKrBHwfzbdhc0= Subject key identifier: 9E:3F:84:8D:69:53:84:9C:DB:87:B7:CE:27:C1:EF:08:03:47:CC:AF Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 08AF Signing time: Thu 12 Jun 2025 20:15:28 +0000 Manifest this update: Thu 12 Jun 2025 20:15:28 +0000 Manifest next update: Thu 19 Jun 2025 20:15:28 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: 94+jFgkxxYWuK4dbYukt/2hrNrL9APNvil+2nHNmgqs=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Jun 12 20:15:28 2025 GMT Not After : Jun 19 20:15:28 2025 GMT Subject: CN=684b3560-0f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:a1:df:0a:56:c6:49:fa:9e:87:61:e9:f1: 66:c3:50:d5:23:42:4c:90:48:7c:b1:1d:c1:5c:2f: ac:18:39:d9:bb:cd:be:54:0c:a3:2d:5b:42:4f:98: c6:1a:4e:c2:2c:94:d3:6b:78:dc:6e:45:66:f4:d0: 91:ce:9e:ad:b0:15:92:1e:5a:f1:68:5d:d7:3e:aa: 9e:85:8a:01:b7:2f:5e:63:bb:33:53:0f:c5:25:a4: b5:4e:51:45:77:2d:9b:1f:0c:20:82:90:e4:19:00: c3:b5:93:56:75:e6:bd:36:ea:a1:de:75:7b:0e:c1: c4:b7:6a:a2:d0:dc:c2:4e:10:be:b8:12:51:b7:32: 0a:6b:19:0f:92:1d:d1:13:f1:b7:24:fb:92:ce:82: 80:5d:8d:e4:db:a8:08:35:34:d9:90:5b:da:e6:25: e4:e1:74:ef:54:ca:53:2e:44:52:60:48:26:54:cc: 8c:98:7b:f4:0d:bc:91:b6:1e:3e:43:23:a6:79:76: 8e:6b:db:6c:9c:90:43:e8:16:65:28:9c:23:af:21: 32:41:bb:92:3c:44:3a:29:8d:cf:fe:03:61:87:29: 58:27:26:1e:11:de:03:5b:b7:b9:9c:c1:e1:70:bc: c6:47:44:b4:5b:fd:5e:62:f5:a2:eb:5b:52:23:18: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3F:84:8D:69:53:84:9C:DB:87:B7:CE:27:C1:EF:08:03:47:CC:AF X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:68:73:a2:cc:fb:b1:b6:88:9f:19:9e:c5:50:c8:54:88: 9e:a5:12:ac:46:1b:40:a8:c2:0e:0d:d8:10:bc:c9:18:af:73: ea:2d:7d:28:6d:5d:5e:08:c6:4b:f0:f5:35:8f:65:1f:d0:ce: 01:fe:57:f9:d4:26:40:2d:1a:21:a7:0f:ba:85:91:31:51:d5: 05:4f:cd:43:46:43:3c:f9:d1:d6:9d:bd:38:eb:d9:cc:b4:55: de:dd:a9:46:9d:0b:77:aa:d9:78:31:68:ce:68:d5:3b:e9:9c: f3:cc:fd:7c:d8:d1:ba:6f:a8:af:36:d8:ea:e0:ad:40:3f:af: 22:84:78:cf:cb:2e:0d:2e:3e:19:61:c8:9d:45:c6:74:33:16: 56:b2:82:9f:34:a2:40:75:c9:5c:1f:ce:f0:ca:1b:84:d2:5e: a4:07:a9:f5:03:b6:f3:fd:af:90:cb:51:85:90:4b:b9:f5:7c: ae:38:c7:d8:3e:a0:ce:21:72:cd:b7:fb:de:86:6a:c1:5a:eb: 0c:19:a5:89:88:82:4f:a6:df:93:18:0a:ad:f8:41:c1:9a:2a: bd:6d:fb:ea:7c:2f:98:a7:74:c0:35:67:2b:de:e9:26:81:71: 13:1e:90:7c:d7:04:39:9a:37:2f:58:35:43:b1:69:0a:ce:f7: 36:fa:ef:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjUwNjEyMjAxNTI4WhcNMjUwNjE5MjAxNTI4WjAYMRYwFAYD VQQDEw02ODRiMzU2MC0wZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEmh3wpWxkn6nodh6fFmw1DVI0JMkEh8sR3BXC+sGDnZu82+VAyjLVtCT5jG Gk7CLJTTa3jcbkVm9NCRzp6tsBWSHlrxaF3XPqqehYoBty9eY7szUw/FJaS1TlFF dy2bHwwggpDkGQDDtZNWdea9Nuqh3nV7DsHEt2qi0NzCThC+uBJRtzIKaxkPkh3R E/G3JPuSzoKAXY3k26gINTTZkFva5iXk4XTvVMpTLkRSYEgmVMyMmHv0DbyRth4+ QyOmeXaOa9tsnJBD6BZlKJwjryEyQbuSPEQ6KY3P/gNhhylYJyYeEd4DW7e5nMHh cLzGR0S0W/1eYvWi61tSIxim4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4/hI1p U4Sc24e3zifB7wgDR8yvMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXI2hzosz7sbaInxmexVDIVIiepRKsRhtAqMIODdgQvMkYr3PqLX0o bV1eCMZL8PU1j2Uf0M4B/lf51CZALRohpw+6hZExUdUFT81DRkM8+dHWnb0469nM tFXe3alGnQt3qtl4MWjOaNU76ZzzzP182NG6b6ivNtjq4K1AP68ihHjPyy4NLj4Z YcidRcZ0MxZWsoKfNKJAdclcH87wyhuE0l6kB6n1A7bz/a+Qy1GFkEu59XyuOMfY PqDOIXLNt/vehmrBWusMGaWJiIJPpt+TGAqt+EHBmiq9bfvqfC+Yp3TANWcr3ukm gXETHpB81wQ5mjcvWDVDsWkKzvc2+u/+ -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:15 2025 by rpki-client