$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: MDZrAtUdeSCnEO1+x2uUbaSoV39wevvQ2+3fphYij8Y= Subject key identifier: F5:96:71:65:CF:7D:6C:A4:7A:B2:DA:04:6D:0A:1D:D2:36:51:23:FC Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 94 Signing time: Thu 19 Jun 2025 05:44:18 +0000 Manifest this update: Thu 19 Jun 2025 05:44:18 +0000 Manifest next update: Thu 26 Jun 2025 05:44:18 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: 0+KPJSyOtCEcqN1iqshEiKtg+pEcLWl8exsbQfqfykk=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: Fnj7JWgwdsaeofMVq5UcxcqhmE7c7PXdT8GOJ7pFYSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Jun 19 05:44:18 2025 GMT Not After : Jun 26 05:44:18 2025 GMT Subject: CN=6853a3b2-1bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:3c:6d:cd:c4:99:1e:2b:ea:5f:ac:18:24: 9b:48:58:c0:29:dd:bd:3d:72:1d:0a:12:97:0f:34: 9e:23:d9:99:07:82:d8:aa:7f:07:e5:17:81:4b:e9: 04:ae:cb:e8:6a:1e:73:33:2d:03:86:7a:11:a8:7e: 71:2e:b1:ea:c1:29:be:e2:6b:0c:8f:b4:e8:ad:6e: d7:8a:c7:a6:32:36:bf:fe:db:0d:84:11:f2:49:07: 83:cc:37:d4:f7:e7:17:c8:d7:34:64:2b:fd:77:a5: 87:c1:0a:c1:af:4f:3f:b4:f8:ce:10:b5:f4:cb:9f: 8d:ae:a4:d3:18:64:8e:a6:ec:d2:da:75:af:f1:6b: 76:d9:e0:cf:11:c2:82:aa:67:e6:24:28:fa:58:8d: 1e:1a:a0:81:95:a0:b5:89:1b:a8:7a:9d:0e:4a:f3: be:f3:b3:5f:f6:af:32:8e:a1:d0:6c:8b:0b:a3:c1: d0:c1:97:87:e3:21:32:2f:e8:95:6d:f8:76:9d:28: 95:f4:12:88:4d:d3:4c:d5:d8:49:5b:67:8d:dc:a5: 02:22:2e:62:61:0d:5e:94:fd:32:bf:5a:df:0c:10: 44:f5:0e:e3:00:62:22:4f:30:5f:1f:14:03:ba:40: b9:0b:f0:a3:48:e1:df:a3:b4:40:a7:ad:25:17:fa: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:96:71:65:CF:7D:6C:A4:7A:B2:DA:04:6D:0A:1D:D2:36:51:23:FC X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e2:82:df:0a:d6:ac:96:55:9a:5a:8b:cb:47:c1:98:3a:5d: 6d:76:b1:54:b2:a2:fa:af:c8:a4:4b:5d:1e:00:67:91:f2:75: 56:aa:fc:8f:23:ab:46:aa:61:22:72:85:18:ea:45:f3:10:89: 59:b7:ad:f4:8a:a5:42:53:38:72:a4:fc:fe:b6:f7:61:af:04: e6:b2:f4:b3:f5:70:c0:8a:56:16:18:c2:ae:ca:02:9d:8a:19: c6:f5:dc:37:8d:ef:1a:74:59:bb:1c:85:f3:95:f5:ad:60:08: b5:b9:5d:f9:d1:66:47:3a:f9:b6:ca:7a:ca:ef:ae:26:f8:8a: 5c:9d:f6:c9:2c:b3:39:5a:87:56:b0:c8:c2:ad:f4:b1:91:e7: 3b:ee:23:68:f4:f4:48:e0:7d:3b:7f:d7:7d:7c:10:4d:ca:39: 25:8f:f3:16:cb:38:d2:e8:33:2a:01:7c:ab:1f:e0:e0:f9:bd: 12:48:8c:61:06:3c:e1:f5:63:a0:d9:40:b8:cd:80:96:a6:31: b2:bf:bb:c3:c0:f3:70:34:6d:0c:3a:d7:e7:6a:bc:16:0a:d3: 65:7a:6a:52:a7:2a:87:c5:f2:7b:05:a1:ea:1f:e1:ee:4c:e9: 56:64:51:dc:df:6c:ce:02:8c:bb:e3:9d:79:78:1f:68:92:1a: 13:65:10:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjUwNjE5MDU0NDE4WhcNMjUwNjI2MDU0NDE4WjAYMRYwFAYD VQQDEw02ODUzYTNiMi0xYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBk8bc3EmR4r6l+sGCSbSFjAKd29PXIdChKXDzSeI9mZB4LYqn8H5ReBS+kE rsvoah5zMy0DhnoRqH5xLrHqwSm+4msMj7TorW7XisemMja//tsNhBHySQeDzDfU 9+cXyNc0ZCv9d6WHwQrBr08/tPjOELX0y5+NrqTTGGSOpuzS2nWv8Wt22eDPEcKC qmfmJCj6WI0eGqCBlaC1iRuoep0OSvO+87Nf9q8yjqHQbIsLo8HQwZeH4yEyL+iV bfh2nSiV9BKITdNM1dhJW2eN3KUCIi5iYQ1elP0yv1rfDBBE9Q7jAGIiTzBfHxQD ukC5C/CjSOHfo7RAp60lF/qqTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWWcWXP fWykerLaBG0KHdI2USP8MB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA34oLfCtasllWaWovLR8GYOl1tdrFUsqL6r8ikS10eAGeR8nVWqvyP I6tGqmEicoUY6kXzEIlZt630iqVCUzhypPz+tvdhrwTmsvSz9XDAilYWGMKuygKd ihnG9dw3je8adFm7HIXzlfWtYAi1uV350WZHOvm2ynrK764m+IpcnfbJLLM5WodW sMjCrfSxkec77iNo9PRI4H07f9d9fBBNyjklj/MWyzjS6DMqAXyrH+Dg+b0SSIxh Bjzh9WOg2UC4zYCWpjGyv7vDwPNwNG0MOtfnarwWCtNlempSpyqHxfJ7BaHqH+Hu TOlWZFHc32zOAoy74515eB9okhoTZRBD -----END CERTIFICATE-----Generated at Fri Jun 20 14:40:51 2025 by rpki-client