$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: qLmmewiWT5ELntSQVsvkrBAUbu4nONmKzxyqDN05sBA= Subject key identifier: 46:AA:F1:0C:61:70:BF:E2:A6:AE:1D:96:E1:B3:2A:30:FB:3F:71:ED Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0490 Signing time: Sat 14 Jun 2025 23:45:32 +0000 Manifest this update: Sat 14 Jun 2025 23:45:32 +0000 Manifest next update: Sat 21 Jun 2025 23:45:32 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: FdVVjlDIMSpx71UW9CsjcnwR0VLSLP5F8fJltoA8NbY=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: L7q5MhSYBL7XAFYcbCU7483l92C9DWVyV5PtuFnvCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Jun 14 23:45:32 2025 GMT Not After : Jun 21 23:45:32 2025 GMT Subject: CN=684e099c-78a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:bd:4f:b9:06:f2:cf:7e:ef:40:65:14:3f: 3d:43:c5:da:96:a3:c8:11:3b:f8:48:7e:db:a5:a8: 07:1b:5b:50:16:6e:37:fc:62:74:6d:ab:55:1d:86: b5:d9:95:d3:03:b5:19:1f:56:ef:6d:40:ef:b1:fe: 87:b9:93:92:bf:5e:7e:67:f6:f3:53:2b:74:01:eb: d8:de:95:39:c1:b1:bf:f1:d4:2c:cc:48:53:74:28: f1:31:d5:50:df:81:55:e7:74:80:95:07:cd:93:84: ec:54:56:69:f7:93:8b:5e:7b:1c:0e:18:ba:39:87: 62:9f:b6:62:7f:b1:23:91:b4:f7:4f:e2:be:b2:ea: 44:f7:f5:c3:d0:ed:5e:5e:6f:83:73:16:55:94:91: 8c:66:13:28:2e:14:38:24:d9:03:49:be:03:a0:8a: ae:95:c4:6c:97:16:4c:e7:e8:f6:d8:2f:6c:72:26: 9d:eb:a3:17:61:d2:ae:1d:9e:11:31:6d:c7:29:44: 1e:f6:47:a9:a9:fe:5c:b7:7b:61:94:4b:33:8a:29: ce:11:23:8d:a0:f8:29:1c:3f:7c:e0:11:08:f9:bf: a6:db:db:e0:97:65:41:7b:a3:e2:b9:90:fe:be:f8: a3:10:74:50:fd:00:ea:75:21:82:9b:b1:7b:14:d0: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AA:F1:0C:61:70:BF:E2:A6:AE:1D:96:E1:B3:2A:30:FB:3F:71:ED X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:20:94:3f:36:b6:5b:9e:b8:8b:0e:17:52:8d:01:42:bf:f4: ef:71:47:98:5f:a9:aa:bc:80:12:f8:bd:5e:57:ac:9e:a2:f8: de:44:8c:8b:d7:ec:fb:7c:77:40:6f:02:27:fd:8a:f2:50:ee: 4c:3e:a8:62:f4:2a:1d:e2:f0:3a:e5:64:ed:92:0d:2e:82:dd: 47:11:3b:5e:60:00:eb:64:bb:7b:22:6e:98:f3:2d:d3:a0:e9: e1:78:da:4c:ff:f9:a6:71:bb:4b:65:e2:cd:32:a2:a7:1c:83: cc:67:3e:bc:16:98:a1:41:66:a0:4f:4d:8a:fb:12:88:bb:6d: a6:68:3d:eb:ba:b5:ae:04:d0:2a:ef:f3:e5:a2:27:91:ec:3e: e1:95:4b:48:4a:ab:07:49:f0:89:65:90:22:6f:8a:9b:00:6c: a7:80:23:0c:62:dd:ae:56:cf:06:ea:2d:77:0c:23:a0:5e:32: a7:30:38:57:ef:69:19:77:11:6e:c0:81:fd:a4:de:13:87:58: 5a:e0:85:be:62:d2:92:2e:91:38:01:9b:83:13:44:2f:60:49: de:ce:95:41:28:6e:c7:19:b4:e8:24:17:2d:3f:88:35:ec:4e: 1c:88:eb:08:64:5b:fa:1f:db:d9:1c:6b:ab:e8:d6:b9:ed:98: fd:67:67:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjUwNjE0MjM0NTMyWhcNMjUwNjIxMjM0NTMyWjAYMRYwFAYD VQQDEw02ODRlMDk5Yy03OGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRu9T7kG8s9+70BlFD89Q8XalqPIETv4SH7bpagHG1tQFm43/GJ0batVHYa1 2ZXTA7UZH1bvbUDvsf6HuZOSv15+Z/bzUyt0AevY3pU5wbG/8dQszEhTdCjxMdVQ 34FV53SAlQfNk4TsVFZp95OLXnscDhi6OYdin7Zif7EjkbT3T+K+supE9/XD0O1e Xm+DcxZVlJGMZhMoLhQ4JNkDSb4DoIqulcRslxZM5+j22C9sciad66MXYdKuHZ4R MW3HKUQe9kepqf5ct3thlEsziinOESONoPgpHD984BEI+b+m29vgl2VBe6PiuZD+ vvijEHRQ/QDqdSGCm7F7FNCMuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaq8Qxh cL/ipq4dluGzKjD7P3HtMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGIJQ/NrZbnriLDhdSjQFCv/TvcUeYX6mqvIAS+L1eV6yeovjeRIyL 1+z7fHdAbwIn/YryUO5MPqhi9Cod4vA65WTtkg0ugt1HETteYADrZLt7Im6Y8y3T oOnheNpM//mmcbtLZeLNMqKnHIPMZz68FpihQWagT02K+xKIu22maD3rurWuBNAq 7/PloieR7D7hlUtISqsHSfCJZZAib4qbAGyngCMMYt2uVs8G6i13DCOgXjKnMDhX 72kZdxFuwIH9pN4Th1ha4IW+YtKSLpE4AZuDE0QvYEnezpVBKG7HGbToJBctP4g1 7E4ciOsIZFv6H9vZHGur6Na57Zj9Z2eM -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:42 2025 by rpki-client