$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: XHw7hn2EdH8ZloLdInUn6qIGLnmBSCugD/kjTVozfpc= Subject key identifier: 07:D2:C6:21:8F:3B:9D:B8:8B:1B:C3:90:88:13:33:7E:E3:5C:54:44 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 011B Signing time: Thu 19 Jun 2025 04:13:15 +0000 Manifest this update: Thu 19 Jun 2025 04:13:14 +0000 Manifest next update: Thu 26 Jun 2025 04:13:14 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: 9F6W8QPDDmxeSONmmI4gVTOWlI+T/tS9eMvH8MlZTa0=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Jun 19 04:13:14 2025 GMT Not After : Jun 26 04:13:14 2025 GMT Subject: CN=68538e5a-bbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:88:e3:a9:73:14:70:48:a2:3c:12:dc:f6: 2b:bd:85:61:48:0a:7e:1e:87:e3:11:a6:0e:97:bb: 0f:89:a1:4b:e4:82:81:43:c9:97:f2:91:3c:66:01: 94:e6:fa:47:d2:88:89:f2:ca:79:97:68:66:4e:1a: 95:1d:4f:af:20:39:64:69:c1:b9:c5:46:d2:e9:fa: 74:17:dd:c7:1d:59:11:49:49:c9:e8:44:df:a2:a5: a9:c6:ac:97:6f:46:47:90:96:e4:01:24:f9:dc:ea: e0:95:f4:93:09:9e:76:12:90:b5:f9:9d:80:f4:68: f7:80:cd:5a:6a:d4:9e:bb:5a:07:fc:ee:5e:5a:d1: 19:01:bc:f9:15:cf:8e:ea:16:58:d3:22:f5:3d:63: d8:95:cc:e2:d6:7b:83:16:f7:16:6d:c9:95:62:7a: 49:90:b1:b0:5d:b6:8f:a5:9c:c9:38:2e:46:96:ce: e0:ba:e9:ef:43:47:6f:f5:0b:ef:b2:5d:76:a8:ea: 8e:cd:a3:32:0d:d2:67:69:eb:00:e7:de:a7:3e:eb: d0:fc:5c:5a:f9:93:8d:86:d9:b5:25:ef:16:89:ff: a4:63:7f:a7:41:5d:c3:e1:fe:aa:ad:64:fe:b4:4c: 63:84:1c:12:5e:6a:df:4c:2a:60:46:bd:6c:df:23: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D2:C6:21:8F:3B:9D:B8:8B:1B:C3:90:88:13:33:7E:E3:5C:54:44 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:bb:11:2e:2b:9f:8d:1a:04:a4:ea:b0:72:e7:41:3e:18:12: 96:ec:d0:a9:8b:49:f9:e5:9f:ba:c7:84:8a:26:7b:a6:6d:37: b8:a3:f9:89:24:fe:1b:6a:08:fd:7b:70:ff:52:50:17:73:95: bc:ea:de:57:e0:bd:f2:8e:ea:1e:4c:f0:e5:19:24:b3:fc:3d: 56:fd:94:00:c2:37:b8:f5:43:b8:93:15:e7:3b:2c:f2:42:ce: 01:bc:ec:44:e8:29:4f:2a:8e:87:f8:ad:68:a0:48:c7:51:87: c1:b5:9e:61:b4:e4:93:08:00:9c:d6:a4:d1:6c:2d:ad:16:c5: 77:f0:94:08:05:c7:78:30:06:6f:64:c8:26:1e:65:18:ba:03: c7:96:8b:72:46:47:ff:40:e6:78:7e:5f:08:ae:1b:ae:e8:1b: 88:a9:49:3b:5b:8d:78:a4:7b:61:0f:27:58:5a:cc:83:1c:11: e9:a7:23:4c:04:9f:ea:a5:d3:d4:0a:97:5e:7a:ed:bf:2c:1e: b3:d4:18:39:fd:1b:21:3e:94:5a:95:ac:0f:b7:b1:5a:77:af: 44:70:58:7d:1a:13:37:26:7d:c2:d8:52:5d:45:65:7a:f5:c1: 1d:76:7d:d8:3c:6b:6f:1c:f7:fa:0e:38:7a:d6:0b:0d:3d:1e: 8f:72:c2:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUwNjE5MDQxMzE0WhcNMjUwNjI2MDQxMzE0WjAYMRYwFAYD VQQDEw02ODUzOGU1YS1iYmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVCI46lzFHBIojwS3PYrvYVhSAp+HofjEaYOl7sPiaFL5IKBQ8mX8pE8ZgGU 5vpH0oiJ8sp5l2hmThqVHU+vIDlkacG5xUbS6fp0F93HHVkRSUnJ6ETfoqWpxqyX b0ZHkJbkAST53OrglfSTCZ52EpC1+Z2A9Gj3gM1aatSeu1oH/O5eWtEZAbz5Fc+O 6hZY0yL1PWPYlczi1nuDFvcWbcmVYnpJkLGwXbaPpZzJOC5Gls7guunvQ0dv9Qvv sl12qOqOzaMyDdJnaesA596nPuvQ/Fxa+ZONhtm1Je8Wif+kY3+nQV3D4f6qrWT+ tExjhBwSXmrfTCpgRr1s3yPq7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfSxiGP O524ixvDkIgTM37jXFREMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmuxEuK5+NGgSk6rBy50E+GBKW7NCpi0n55Z+6x4SKJnumbTe4o/mJ JP4bagj9e3D/UlAXc5W86t5X4L3yjuoeTPDlGSSz/D1W/ZQAwje49UO4kxXnOyzy Qs4BvOxE6ClPKo6H+K1ooEjHUYfBtZ5htOSTCACc1qTRbC2tFsV38JQIBcd4MAZv ZMgmHmUYugPHlotyRkf/QOZ4fl8Irhuu6BuIqUk7W414pHthDydYWsyDHBHppyNM BJ/qpdPUCpdeeu2/LB6z1Bg5/RshPpRalawPt7Fad69EcFh9GhM3Jn3C2FJdRWV6 9cEddn3YPGtvHPf6Djh61gsNPR6PcsIU -----END CERTIFICATE-----Generated at Fri Jun 20 18:57:09 2025 by rpki-client