$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: zKDCpOw09+P7fmyV3vEdKwMBs7hqL8IXGHPwCYe7wFE= Subject key identifier: D2:E4:E3:76:19:70:97:81:DA:E4:C7:6A:68:D0:4E:24:E3:D4:2F:72 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 27D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 27C8 Signing time: Sat 14 Jun 2025 15:36:08 +0000 Manifest this update: Sat 14 Jun 2025 15:36:08 +0000 Manifest next update: Sat 21 Jun 2025 15:36:08 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: 7S/MhCiXVHpIESSbmpDGUPwiK00QorXTPgosNXSTSRA=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10198 (0x27d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Jun 14 15:36:08 2025 GMT Not After : Jun 21 15:36:08 2025 GMT Subject: CN=684d96e8-da92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:fe:de:a6:34:81:6d:be:76:b6:d4:89:41: 89:50:f5:e6:be:1e:7a:19:3e:d5:f3:69:b9:3a:4e: 5f:b3:4c:21:97:b2:0a:2d:9c:9f:bb:d6:ff:15:d5: ee:00:55:e5:b9:a5:c1:b2:f4:9f:03:14:39:36:65: 84:6a:54:a1:58:a7:41:5f:4a:ae:27:21:4c:62:2e: ab:01:4f:93:5c:5e:55:f8:0d:05:13:f6:16:40:b5: df:72:29:64:c1:96:e6:98:cd:c3:a5:63:c1:49:a3: 83:a2:27:13:1b:92:2e:09:c3:ea:92:cf:9a:66:59: 58:cb:52:7e:97:4e:4d:c0:1f:2f:64:e2:11:43:1e: f9:a8:0a:4b:c3:b2:74:91:17:4e:43:ec:62:a5:3e: de:d7:1d:47:29:1d:ff:7c:52:a4:d9:58:26:f0:73: be:79:f4:48:97:77:76:cb:15:5a:24:05:c4:5e:82: 9f:9e:07:ea:19:97:bb:a5:3c:0b:90:98:50:ad:58: 34:56:a8:ad:a8:0c:9c:e6:be:d3:0a:e9:9e:50:7b: 2e:ca:f0:8c:2c:c2:18:e6:94:2b:39:93:20:86:5d: 8e:e4:c3:31:d6:dc:76:50:1a:82:8a:5d:dc:6b:46: a4:7d:55:c9:f2:d5:f6:89:d4:46:5a:1f:94:16:7b: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E4:E3:76:19:70:97:81:DA:E4:C7:6A:68:D0:4E:24:E3:D4:2F:72 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5d:5c:00:08:9a:86:51:11:d6:46:dc:52:4c:08:67:97:3a: 35:c0:dd:40:e2:c4:6c:1d:cc:44:58:35:0f:89:94:37:3e:37: 01:06:5b:24:0f:67:04:0d:2c:f0:c2:cc:b9:46:6d:83:a3:3d: d2:88:66:0b:fc:a1:2e:d1:d8:66:2e:0b:b1:79:6b:23:d8:46: 59:08:87:81:e8:67:b5:83:05:10:39:23:39:34:84:a9:d2:9a: 54:3d:7a:49:52:9d:10:8a:ea:21:2c:c9:ed:cb:a6:a5:c0:d9: 08:31:72:77:a7:24:61:54:da:44:02:6d:5c:9c:7e:14:65:19: e8:bf:48:0e:94:bd:b7:23:7a:60:95:f2:42:8d:8f:3f:bf:b2: 8b:86:ba:d1:0d:6e:35:8d:86:2f:6c:e5:20:a5:8b:e3:1a:4a: 89:b7:0c:ab:9a:2a:c0:c9:2a:1b:32:20:c3:04:72:8b:5b:4e: a0:76:ce:4a:50:97:15:e4:31:15:a0:d5:00:a0:29:c8:4b:ff: 4c:aa:8d:d1:fa:eb:8b:68:d9:ee:4a:58:68:b7:36:67:9d:24: 13:b9:b9:e4:8c:53:65:23:9f:a7:03:b0:c5:0c:55:cf:7e:09: c6:d5:85:02:f7:52:c5:2d:e1:96:48:18:1a:9b:13:de:da:08: df:76:57:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUwNjE0MTUzNjA4WhcNMjUwNjIxMTUzNjA4WjAYMRYwFAYD VQQDEw02ODRkOTZlOC1kYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVL+3qY0gW2+drbUiUGJUPXmvh56GT7V82m5Ok5fs0whl7IKLZyfu9b/FdXu AFXluaXBsvSfAxQ5NmWEalShWKdBX0quJyFMYi6rAU+TXF5V+A0FE/YWQLXfcilk wZbmmM3DpWPBSaODoicTG5IuCcPqks+aZllYy1J+l05NwB8vZOIRQx75qApLw7J0 kRdOQ+xipT7e1x1HKR3/fFKk2Vgm8HO+efRIl3d2yxVaJAXEXoKfngfqGZe7pTwL kJhQrVg0VqitqAyc5r7TCumeUHsuyvCMLMIY5pQrOZMghl2O5MMx1tx2UBqCil3c a0akfVXJ8tX2idRGWh+UFntlfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLk43YZ cJeB2uTHamjQTiTj1C9yMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfXVwACJqGURHWRtxSTAhnlzo1wN1A4sRsHcxEWDUPiZQ3PjcBBlsk D2cEDSzwwsy5Rm2Doz3SiGYL/KEu0dhmLguxeWsj2EZZCIeB6Ge1gwUQOSM5NISp 0ppUPXpJUp0QiuohLMnty6alwNkIMXJ3pyRhVNpEAm1cnH4UZRnov0gOlL23I3pg lfJCjY8/v7KLhrrRDW41jYYvbOUgpYvjGkqJtwyrmirAySobMiDDBHKLW06gds5K UJcV5DEVoNUAoCnIS/9Mqo3R+uuLaNnuSlhotzZnnSQTubnkjFNlI5+nA7DFDFXP fgnG1YUC91LFLeGWSBgamxPe2gjfdlcr -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:58 2025 by rpki-client