$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json) Hash identifier: j192lTPosD0MEeP1KcwK3HrPnyR13mywzvWC52x+JpI= Subject key identifier: BD:BB:45:9C:2E:F1:B0:B2:69:76:A1:39:5B:EA:7A:DF:49:A3:3C:D5 Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft Manifest number: 05E5 Signing time: Sat 14 Jun 2025 22:41:16 +0000 Manifest this update: Sat 14 Jun 2025 22:41:16 +0000 Manifest next update: Sat 21 Jun 2025 22:41:16 +0000 Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: RkR1TOGkBlKo0QacvnPqlRzbn8fqnFkxogcjPviYZ3k=) 2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Validity Not Before: Jun 14 22:41:16 2025 GMT Not After : Jun 21 22:41:16 2025 GMT Subject: CN=684dfa8c-470a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:d2:90:4e:e6:95:fc:c2:f6:4a:64:5f:63: 32:f2:13:d0:e3:1d:5b:8a:f2:97:c3:96:fe:d1:99: 13:24:b0:75:0f:27:59:b8:53:44:bc:10:5d:43:16: 6f:62:7e:3f:e4:e8:6f:27:9a:aa:32:24:44:f9:f0: 34:34:26:90:a7:03:e9:08:95:01:66:de:14:7a:8d: 69:bb:30:dd:76:1d:0e:fc:9c:67:2d:91:24:7a:3a: 98:03:13:29:6b:70:ed:57:77:ef:f6:ec:ea:db:88: f3:c6:d1:30:a2:91:f0:35:98:dd:b4:cd:47:22:02: 37:cd:4e:66:e7:4b:66:df:23:46:31:e2:41:dd:6a: 28:0c:c0:05:88:bf:29:d1:c1:07:04:7b:c4:06:4a: c8:38:df:dc:61:8b:ef:78:0d:f1:b6:53:93:8e:0d: 9a:c6:04:26:7f:4e:58:0c:25:f6:fb:f8:2e:fa:f9: 77:e3:a0:2a:fb:4a:1f:06:33:c8:35:25:24:ec:f8: 26:a7:c4:f4:94:d8:b7:16:da:90:a0:82:5f:a6:29: c9:21:df:cf:87:98:00:8c:99:fc:0a:68:d6:10:61: b9:34:a5:fc:f8:f2:44:ff:76:2e:ca:64:08:6b:46: 19:5c:bf:59:25:54:bc:58:56:b7:58:1c:fd:30:6a: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BB:45:9C:2E:F1:B0:B2:69:76:A1:39:5B:EA:7A:DF:49:A3:3C:D5 X509v3 Authority Key Identifier: keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4c:ff:c0:7d:76:fe:8f:cb:2b:9d:a5:0f:15:0a:19:56:1e: 0b:3d:62:89:5c:e7:07:e8:53:f9:62:a6:f5:6b:dc:4a:e9:21: 57:9e:a0:0e:dd:13:25:67:bc:bb:08:b5:2b:0d:67:a6:a1:c2: dd:6c:b0:2d:2d:66:4d:7a:4c:2e:c1:f3:a9:df:3e:52:30:e6: a8:e0:d4:b6:8a:41:36:0d:bf:aa:b5:a7:51:eb:f4:54:47:44: 5b:bd:ba:8d:9b:92:8c:2a:3d:3e:de:a5:b2:cc:78:5c:37:7a: 6c:0b:4d:58:1c:5b:1c:bc:cf:2e:a1:75:a8:77:50:d7:8a:95: 48:50:20:a7:c8:66:dd:11:e0:15:e2:6a:f8:ee:ee:65:74:4b: ec:70:59:d8:e7:9b:e5:7e:52:41:35:9d:21:3b:d7:a2:9a:80: e8:b5:6b:7d:f8:27:94:82:6a:20:74:1f:c3:a1:a2:57:fe:e6: 9c:ab:5b:f5:d2:48:31:ea:d6:13:47:56:de:97:a2:8c:42:7e: 58:1d:e1:d0:e0:81:b4:69:50:bf:3d:fc:ba:39:c1:9a:f8:c9: 5a:03:86:af:92:d9:9b:d7:4c:0f:52:41:a2:18:82:ef:46:e1: ac:e6:fb:6e:f8:26:92:e0:82:03:2a:85:b8:4f:c4:76:0c:53: 83:3c:3f:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlBRkQ3MjQ4REJF RjBFNjlBODYwHhcNMjUwNjE0MjI0MTE2WhcNMjUwNjIxMjI0MTE2WjAYMRYwFAYD VQQDEw02ODRkZmE4Yy00NzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdrSkE7mlfzC9kpkX2My8hPQ4x1bivKXw5b+0ZkTJLB1DydZuFNEvBBdQxZv Yn4/5OhvJ5qqMiRE+fA0NCaQpwPpCJUBZt4Ueo1puzDddh0O/JxnLZEkejqYAxMp a3DtV3fv9uzq24jzxtEwopHwNZjdtM1HIgI3zU5m50tm3yNGMeJB3WooDMAFiL8p 0cEHBHvEBkrION/cYYvveA3xtlOTjg2axgQmf05YDCX2+/gu+vl346Aq+0ofBjPI NSUk7Pgmp8T0lNi3FtqQoIJfpinJId/Ph5gAjJn8CmjWEGG5NKX8+PJE/3YuymQI a0YZXL9ZJVS8WFa3WBz9MGp68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL27RZwu 8bCyaXahOVvqet9JozzVMB8GA1UdIwQYMBaAFGTOBqFsqJEjVWqpr9ckjb7w5pqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTI5OC82MjIyOUVGMkI2 MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tTTlZhcW12MXlTTnZ2RG1t b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNNEdvV3lva1NOVmFxbXYxeVNOdnZEbW1vWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tT TlZhcW12MXlTTnZ2RG1tb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4TP/AfXb+j8srnaUPFQoZVh4LPWKJXOcH6FP5Yqb1a9xK6SFXnqAO 3RMlZ7y7CLUrDWemocLdbLAtLWZNekwuwfOp3z5SMOao4NS2ikE2Db+qtadR6/RU R0RbvbqNm5KMKj0+3qWyzHhcN3psC01YHFscvM8uoXWod1DXipVIUCCnyGbdEeAV 4mr47u5ldEvscFnY55vlflJBNZ0hO9eimoDotWt9+CeUgmogdB/DoaJX/uacq1v1 0kgx6tYTR1bel6KMQn5YHeHQ4IG0aVC/Pfy6OcGa+MlaA4avktmb10wPUkGiGILv RuGs5vtu+CaS4IIDKoW4T8R2DFODPD/M -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:37 2025 by rpki-client