$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: D6VYVjSM3I+5zG5QONYdkIN0LSitxmuDW9zGiDuXCFM= Subject key identifier: CC:B5:14:E8:8F:1F:B8:FB:78:C9:FD:2D:70:14:5F:44:74:D9:49:22 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: 86 Signing time: Sat 21 Jun 2025 05:42:31 +0000 Manifest this update: Sat 21 Jun 2025 05:42:31 +0000 Manifest next update: Sat 28 Jun 2025 05:42:31 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: vlvFA1z8KJPD0xyafDSKtSyoRozIGc3SE0lMS3+338w=) 2: 1976FC0CFA6C11EF99638E1FC4F9AE02.roa (hash: te5PzAkdFI+eQ5CMJL5Z4aIa9hh81p7zUj8QOmt+SYo=) 3: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: WagnJcg5f8efkpfWr+mqkirfnMGP4KyRA+7+p8TOFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Jun 21 05:42:31 2025 GMT Not After : Jun 28 05:42:31 2025 GMT Subject: CN=68564647-b240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9a:14:f0:e6:a0:c8:56:5f:37:ed:be:ea:c3: ac:a1:60:00:6b:22:71:38:57:cf:03:b3:4c:d9:d4: 08:7d:e2:d0:c1:13:37:ef:cf:07:4e:02:7d:cc:e1: d6:ec:10:18:ce:6f:e4:30:4f:77:0d:88:ef:d5:6c: 57:e0:dc:e9:37:1a:ca:e1:0c:38:d7:d0:14:07:20: c6:45:83:8a:cd:9d:bf:46:a0:89:fd:27:11:66:0a: e3:f6:60:cb:14:a2:18:bb:4e:df:e1:67:b2:d7:e1: be:e1:81:14:b3:21:a0:05:32:70:00:35:fe:96:69: 07:f2:52:2b:40:f7:29:bc:3d:4a:87:f8:4f:28:70: 84:bc:00:a1:d3:4b:aa:6d:21:dd:05:1b:9a:66:ce: a8:29:26:e5:6f:1a:0c:33:86:f9:2e:1a:3b:f5:2e: ec:48:ee:f1:2f:ba:c0:e5:c0:09:da:7f:d9:f7:00: a7:92:72:a3:41:03:d0:72:f1:00:32:87:5e:6f:98: f3:26:18:de:c3:b0:60:0d:cd:ee:25:ae:1e:53:38: fa:6f:14:21:2c:a3:87:1c:fc:5f:8b:b7:d5:36:85: e1:b1:04:07:32:4b:59:30:6a:47:34:df:c2:1d:54: 9f:9e:ea:00:e5:b4:e2:d3:38:13:74:8a:a4:9a:bf: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B5:14:E8:8F:1F:B8:FB:78:C9:FD:2D:70:14:5F:44:74:D9:49:22 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4b:3e:0c:87:79:64:0c:e6:d6:9e:42:9f:b3:6a:e3:bc:83: 71:4f:88:3c:9c:d8:de:55:71:1f:d5:1d:03:6f:7b:8b:0a:ec: dd:0f:88:eb:a3:d5:d2:81:55:79:d6:ea:c4:64:08:24:ce:86: 49:65:04:2f:1a:d5:9f:20:3b:f2:20:58:e2:5b:78:f2:7e:d0: f1:94:32:1e:16:f2:ed:99:6f:68:22:95:ea:30:97:8f:cb:5d: 33:2c:1b:44:fc:70:d3:e1:f0:40:4b:61:e0:de:24:89:9a:7b: d8:a1:18:67:ac:d3:6d:64:81:d0:ea:57:da:d9:08:08:c0:64: d2:8b:3e:23:a1:73:8d:73:fd:1e:51:26:c0:ee:4e:01:b7:16: 9d:e1:09:cb:d1:42:e2:0e:3a:e0:fd:b6:ac:14:1e:d5:93:7a: bd:ee:73:a8:3a:5d:61:89:c7:46:e7:b0:02:00:a0:74:54:c6: a6:46:24:c0:77:f9:3f:8d:d2:98:9b:21:23:2b:a0:97:f7:84: ea:20:0f:21:0f:aa:76:89:b1:46:14:03:1d:b8:7b:26:19:eb: 5b:82:e5:a7:8b:0b:92:de:93:a4:aa:4b:b0:a3:a4:16:95:12: ea:3f:11:a3:33:91:91:d3:53:3b:fb:1d:d7:b0:11:05:2c:0f: 49:01:1a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUwNjIxMDU0MjMxWhcNMjUwNjI4MDU0MjMxWjAYMRYwFAYD VQQDEw02ODU2NDY0Ny1iMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JoU8OagyFZfN+2+6sOsoWAAayJxOFfPA7NM2dQIfeLQwRM3788HTgJ9zOHW 7BAYzm/kME93DYjv1WxX4NzpNxrK4Qw419AUByDGRYOKzZ2/RqCJ/ScRZgrj9mDL FKIYu07f4Wey1+G+4YEUsyGgBTJwADX+lmkH8lIrQPcpvD1Kh/hPKHCEvACh00uq bSHdBRuaZs6oKSblbxoMM4b5Lho79S7sSO7xL7rA5cAJ2n/Z9wCnknKjQQPQcvEA Modeb5jzJhjew7BgDc3uJa4eUzj6bxQhLKOHHPxfi7fVNoXhsQQHMktZMGpHNN/C HVSfnuoA5bTi0zgTdIqkmr/eCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy1FOiP H7j7eMn9LXAUX0R02UkiMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3 eWtpLXU2WnVGaXZUQTA0NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzSz4Mh3lkDObWnkKfs2rjvINxT4g8nNjeVXEf1R0Db3uLCuzdD4jr o9XSgVV51urEZAgkzoZJZQQvGtWfIDvyIFjiW3jyftDxlDIeFvLtmW9oIpXqMJeP y10zLBtE/HDT4fBAS2Hg3iSJmnvYoRhnrNNtZIHQ6lfa2QgIwGTSiz4joXONc/0e USbA7k4Btxad4QnL0ULiDjrg/basFB7Vk3q97nOoOl1hicdG57ACAKB0VMamRiTA d/k/jdKYmyEjK6CX94TqIA8hD6p2ibFGFAMduHsmGetbguWniwuS3pOkqkuwo6QW lRLqPxGjM5GR01M7+x3XsBEFLA9JARqQ -----END CERTIFICATE-----Generated at Sat Jun 21 11:07:15 2025 by rpki-client