$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: eGoIwH6TsdlPHkOrbIGQRIUGftuh412opPMXRTraV2M= Subject key identifier: F4:9F:99:21:65:69:52:8F:0F:55:3A:49:C8:FE:30:4A:A3:24:DC:D5 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 063C Signing time: Wed 18 Jun 2025 22:31:01 +0000 Manifest this update: Wed 18 Jun 2025 22:31:00 +0000 Manifest next update: Wed 25 Jun 2025 22:31:00 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: +q1d+qBwzfACj0E4hEy0F/keX/zrTG/NJgiygzli8P0=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Jun 18 22:31:00 2025 GMT Not After : Jun 25 22:31:00 2025 GMT Subject: CN=68533e25-a927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:85:f4:0c:71:77:fa:c6:ba:6b:38:7d:ed: d0:45:80:e5:d3:a0:3e:f2:dd:03:0d:61:be:23:9d: 9a:27:0b:d3:23:82:c1:46:70:2d:86:97:b3:ae:e9: ae:9a:8c:cd:a0:af:27:08:94:5c:0e:98:59:59:be: 6f:e5:4f:f1:3e:09:74:16:cc:77:a6:b3:62:4b:da: a0:ce:4d:87:16:d5:c7:ce:c0:e9:5f:39:14:b0:0b: b0:d7:fd:12:8a:7c:12:fd:80:9e:20:cb:fb:5b:69: ff:65:f1:60:f0:91:38:bb:af:79:a7:80:21:2b:16: 56:f1:6b:9b:ac:a1:1f:70:15:c8:2d:f7:04:42:d7: 7b:6e:e5:6c:5d:e5:12:25:31:b2:ae:4c:c9:93:bd: 8d:f1:14:c9:15:68:00:25:2d:7d:75:e8:7a:83:f3: 88:29:c1:86:a7:e1:9b:31:26:9f:92:14:fa:9e:db: 00:86:0c:4e:83:d3:d2:da:c9:a4:02:3b:12:c9:c5: d3:92:96:80:87:63:b2:b8:6c:a7:eb:5b:b0:3f:11: 88:96:5d:a0:c8:18:a8:4a:2f:f8:9a:8b:a5:71:1d: 55:30:31:5e:34:ac:76:2a:9c:cb:cd:d3:aa:87:3b: ec:a3:7b:3c:03:3a:a4:29:15:a0:22:f3:2a:58:13: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:99:21:65:69:52:8F:0F:55:3A:49:C8:FE:30:4A:A3:24:DC:D5 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e0:06:38:7b:6d:91:83:b0:9f:e2:8a:a4:02:75:68:0b:9f: 74:99:63:1d:90:57:e8:b0:35:d8:d3:39:cf:de:4b:d4:4f:27: f9:2f:65:d3:67:78:c5:dd:3a:39:4c:ce:d6:16:44:a2:ab:0b: 0d:e5:eb:ae:85:59:f8:f4:86:9a:b3:9a:bd:99:7a:c4:15:56: a8:72:25:f3:ec:c2:14:8b:82:fe:68:88:74:20:6a:03:40:a0: c9:fe:ed:65:eb:bc:7d:1a:c7:79:90:4b:f3:d3:88:ba:7e:8a: 5a:5e:d7:5f:41:2c:df:06:90:fd:fc:09:54:97:87:9c:41:36: d3:47:ed:63:cf:4b:ee:1a:70:8a:ea:2b:5b:e8:9b:0f:ed:ce: 61:1e:1c:c2:17:6f:20:e4:24:49:33:eb:14:fc:d0:dd:92:e6: c6:b2:19:8e:eb:4d:e4:99:43:14:3b:5e:c3:85:5c:ad:a3:e5: 5f:ba:66:12:b9:27:ab:f2:02:79:fd:b4:1e:74:c7:cb:ee:1b: 04:2f:b4:67:1c:64:65:14:fb:99:37:3f:f5:ce:9e:de:5e:f5: 79:20:be:e3:ca:f0:e1:5f:2b:e9:7f:8b:bc:55:13:80:af:55: 83:43:4f:7c:c0:9d:bc:e6:ce:97:d2:6d:24:b6:54:bd:b9:66: 9c:1a:32:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUwNjE4MjIzMTAwWhcNMjUwNjI1MjIzMTAwWjAYMRYwFAYD VQQDEw02ODUzM2UyNS1hOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44SF9Axxd/rGums4fe3QRYDl06A+8t0DDWG+I52aJwvTI4LBRnAthpezrumu mozNoK8nCJRcDphZWb5v5U/xPgl0Fsx3prNiS9qgzk2HFtXHzsDpXzkUsAuw1/0S inwS/YCeIMv7W2n/ZfFg8JE4u695p4AhKxZW8WubrKEfcBXILfcEQtd7buVsXeUS JTGyrkzJk72N8RTJFWgAJS19deh6g/OIKcGGp+GbMSafkhT6ntsAhgxOg9PS2smk AjsSycXTkpaAh2OyuGyn61uwPxGIll2gyBioSi/4moulcR1VMDFeNKx2KpzLzdOq hzvso3s8AzqkKRWgIvMqWBNJaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSfmSFl aVKPD1U6Scj+MEqjJNzVMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB4AY4e22Rg7Cf4oqkAnVoC590mWMdkFfosDXY0znP3kvUTyf5L2XT Z3jF3To5TM7WFkSiqwsN5euuhVn49Iaas5q9mXrEFVaociXz7MIUi4L+aIh0IGoD QKDJ/u1l67x9Gsd5kEvz04i6fopaXtdfQSzfBpD9/AlUl4ecQTbTR+1jz0vuGnCK 6itb6JsP7c5hHhzCF28g5CRJM+sU/NDdkubGshmO603kmUMUO17DhVyto+VfumYS uSer8gJ5/bQedMfL7hsEL7RnHGRlFPuZNz/1zp7eXvV5IL7jyvDhXyvpf4u8VROA r1WDQ098wJ285s6X0m0ktlS9uWacGjLR -----END CERTIFICATE-----Generated at Fri Jun 20 08:18:05 2025 by rpki-client