$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json) Hash identifier: AaexP5WTLQ5/jmXiZobX9FGK9LhYeJ8k5D2v1qNGL6k= Subject key identifier: 5E:B5:B3:D8:12:B8:17:0B:8B:25:37:2B:A9:D7:58:21:FA:74:20:44 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1CDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft Manifest number: 3EE0 Signing time: Mon 16 Jun 2025 14:28:25 +0000 Manifest this update: Mon 16 Jun 2025 14:28:25 +0000 Manifest next update: Mon 23 Jun 2025 14:28:25 +0000 Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: FIQpdDBWf4dUeOtlgvDGqmslmMrx1kcqFeHv4nHGSw0=) 2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: V43Il4g6nzN/Oi9NZNkfIg3qfCZBm83zni76jTMor3c=) 3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=) 4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: QIByum0Q8MqWfLpB0ykV4dVr25yJxf+XqNJq06uiuWw=) 5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: 3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=) 6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s=) 7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=) 8: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts=) 9: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lXnIjaE79MbFJFMKpPmyaG2gWaI8IDWerJKv1saa/n0=) 10: 66891B80943011EA8988B883C4F9AE02.roa (hash: e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=) 11: 727C68508AB411EA89D83541C4F9AE02.roa (hash: 3/YHfMJFd4+/uHvYeznP2jrI3k3cNg88tQA8zxhGa9Q=) 12: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU=) 13: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: W9G6BLl6GrAu6NpuOira3w9ONwVWK7LaREYQeOaaW/o=) 14: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7386 (0x1cda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Jun 16 14:28:25 2025 GMT Not After : Jun 23 14:28:25 2025 GMT Subject: CN=68502a09-cd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:13:bd:d8:55:ab:e4:c4:a2:ee:22:4a:a6:c8: e6:96:90:96:90:de:41:c8:1a:86:71:94:6a:f6:1c: b0:72:18:1f:da:1d:92:cf:73:17:f0:8d:c6:88:04: c6:c1:27:e2:8b:ed:02:3d:ce:1d:2e:5c:35:32:5d: 9e:bb:74:51:8a:30:51:13:30:6f:54:58:5c:79:b0: 3a:b4:44:23:f2:a8:41:92:52:79:4e:04:c3:15:2f: 4f:ac:d3:81:6b:10:c9:cc:c9:61:26:f8:63:12:92: eb:88:8a:a9:e8:96:08:c5:02:c9:9a:f6:49:5f:c6: 80:7d:cd:74:92:69:dd:5b:b9:4a:2d:3c:a5:ce:05: 64:14:68:9d:54:cc:24:54:cf:c1:57:c9:ce:be:a9: 01:e9:d5:3e:7a:4a:2e:3e:32:67:06:f1:7a:54:a8: d9:7a:ab:1f:c0:17:30:47:29:8b:7b:88:ff:cc:87: 9a:f6:73:ce:46:38:82:6f:86:a9:b1:7b:2a:1e:dc: d4:c5:18:e1:0e:4b:b1:ea:bc:e1:a9:81:6b:af:f3: 79:56:c0:89:8c:6d:1b:3b:55:0b:17:de:c4:84:6e: 72:35:20:7e:85:f7:78:44:5a:1e:2e:79:42:25:81: f8:6a:a3:b6:7c:5a:48:63:83:7e:e7:8a:3b:3c:45: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B5:B3:D8:12:B8:17:0B:8B:25:37:2B:A9:D7:58:21:FA:74:20:44 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4f:d0:47:d9:b1:5d:55:b1:eb:b4:54:50:8d:7c:5e:f3:d4: e2:b8:11:2f:6c:1d:8b:a8:e9:27:97:d1:53:4f:00:c2:f1:d2: 5d:4e:e8:5f:2e:ad:49:a7:1c:8f:cc:46:37:7c:85:93:4e:21: 97:e1:a9:ee:7e:db:a9:1c:d3:6f:06:84:2c:be:dd:85:63:76: 10:73:61:92:1e:03:80:5a:2e:35:c2:de:e9:50:8c:ab:19:0a: 40:28:bc:83:4e:69:80:25:ba:e5:87:da:76:bc:77:ab:62:5d: 45:8c:8a:eb:75:02:f2:2e:0e:de:78:67:0c:3b:64:e7:b1:e7: df:62:e4:08:2a:61:ad:8c:33:62:f7:f7:bd:67:75:28:b5:53: 98:ff:c0:f0:cd:cb:53:b8:23:00:b8:22:15:19:b7:4d:2f:4e: c2:d3:32:64:50:ca:9b:1e:f5:18:02:27:5f:3f:9a:89:d5:0b: cb:51:ef:d9:b2:07:ba:da:2b:8f:3e:b1:3d:df:e8:f5:01:e3: 36:7b:30:ed:67:29:47:61:02:5b:03:d9:cb:6d:21:cf:ec:c2: aa:23:a8:a4:17:c1:be:98:15:46:cd:e8:75:10:2c:2e:6d:19: 20:c1:83:fd:ed:15:96:b7:3c:6f:a3:2b:d3:e4:46:87:b1:1a: 9d:da:ac:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjUwNjE2MTQyODI1WhcNMjUwNjIzMTQyODI1WjAYMRYwFAYD VQQDEw02ODUwMmEwOS1jZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RO92FWr5MSi7iJKpsjmlpCWkN5ByBqGcZRq9hywchgf2h2Sz3MX8I3GiATG wSfii+0CPc4dLlw1Ml2eu3RRijBREzBvVFhcebA6tEQj8qhBklJ5TgTDFS9PrNOB axDJzMlhJvhjEpLriIqp6JYIxQLJmvZJX8aAfc10kmndW7lKLTylzgVkFGidVMwk VM/BV8nOvqkB6dU+ekouPjJnBvF6VKjZeqsfwBcwRymLe4j/zIea9nPORjiCb4ap sXsqHtzUxRjhDkux6rzhqYFrr/N5VsCJjG0bO1ULF97EhG5yNSB+hfd4RFoeLnlC JYH4aqO2fFpIY4N+54o7PEXAiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF61s9gS uBcLiyU3K6nXWCH6dCBEMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0 dlRINkFXb3RXMXVHcWJQOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVT9BH2bFdVbHrtFRQjXxe89TiuBEvbB2LqOknl9FTTwDC8dJdTuhf Lq1JpxyPzEY3fIWTTiGX4anuftupHNNvBoQsvt2FY3YQc2GSHgOAWi41wt7pUIyr GQpAKLyDTmmAJbrlh9p2vHerYl1FjIrrdQLyLg7eeGcMO2TnseffYuQIKmGtjDNi 9/e9Z3UotVOY/8DwzctTuCMAuCIVGbdNL07C0zJkUMqbHvUYAidfP5qJ1QvLUe/Z sge62iuPPrE93+j1AeM2ezDtZylHYQJbA9nLbSHP7MKqI6ikF8G+mBVGzeh1ECwu bRkgwYP97RWWtzxvoyvT5EaHsRqd2qyc -----END CERTIFICATE-----Generated at Wed Jun 18 05:07:35 2025 by rpki-client