$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: I77aYRF98nAw6OF+uppTmGPFgwtoRwndQ0MUU22GEY8= Subject key identifier: 5E:4E:13:AA:91:AE:85:C9:88:E4:EC:0E:F5:88:C2:CD:D3:A9:F5:C7 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 57 Signing time: Thu 19 Jun 2025 06:33:56 +0000 Manifest this update: Thu 19 Jun 2025 06:33:55 +0000 Manifest next update: Thu 26 Jun 2025 06:33:55 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: TWjEMSaIPc+vT3jwfTSWdSHdDM8OiQ+hQ+3XELLHkAE=) 2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Jun 19 06:33:55 2025 GMT Not After : Jun 26 06:33:55 2025 GMT Subject: CN=6853af54-db9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:02:11:6b:0b:ea:bb:c3:b7:68:2a:78:75: e5:3e:87:3d:5b:d9:73:59:81:e7:56:15:07:86:b6: 9a:aa:08:59:f1:8b:a3:e5:eb:91:33:4b:42:5a:c1: 01:df:f1:ed:54:ee:3f:ab:c1:08:0c:4d:c9:d3:1d: 46:23:7a:3b:74:68:0a:fd:f3:74:bb:0a:21:29:96: c8:27:8f:86:23:db:ec:93:73:83:0a:80:3d:ac:9d: a6:e2:cd:77:51:c2:1d:6f:c3:f8:2b:93:c9:86:9c: 01:3f:1a:4d:74:ef:08:03:42:8b:09:c2:a4:11:21: b7:f3:bf:81:90:d3:bd:1b:10:a5:4f:6e:c8:6d:be: 98:d3:3d:60:4a:0e:30:26:79:7d:0b:9d:67:66:d0: 1c:18:05:27:66:31:42:6c:2a:2c:c6:02:77:a1:10: a5:30:f4:35:2c:57:a3:78:13:aa:84:eb:d2:78:9a: c9:30:43:9a:36:3f:6e:57:69:b3:39:40:05:81:7e: 8e:3c:fd:93:51:d7:d4:62:ee:db:40:64:0d:be:a5: 28:07:b4:03:1d:d0:be:ce:69:1f:6a:cd:6f:4f:e0: fd:2e:38:d7:86:75:5b:d7:bd:89:25:80:38:76:19: 27:79:86:49:81:6f:22:36:0e:66:ba:b5:d2:d8:77: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4E:13:AA:91:AE:85:C9:88:E4:EC:0E:F5:88:C2:CD:D3:A9:F5:C7 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cb:d2:a7:0b:32:c3:02:bd:dc:f8:82:0e:c1:90:d3:05:0a: 2b:d2:0d:e7:26:c3:77:ab:55:9e:2f:c4:4b:39:d7:b6:20:2d: b9:2a:c4:91:1d:cc:82:45:75:73:e7:40:8c:b8:f3:de:da:e1: 75:a2:21:5a:2d:7d:69:62:42:ce:0c:0a:61:7b:81:da:f9:c1: fb:08:75:da:9f:40:58:f2:0b:0a:ef:7e:f3:8a:01:00:c5:ac: 52:e0:10:7f:71:f7:63:c9:a2:c6:dc:44:f7:f6:3f:8c:01:1f: de:6f:4a:fc:37:de:89:b7:5f:67:1a:fd:58:5f:85:12:2d:c9: d5:33:d4:9e:a5:79:22:c4:90:9c:6c:11:99:1d:a5:37:b9:0b: e1:bc:f8:e2:e4:25:76:66:fd:88:2f:0c:68:9c:b6:25:77:1b: f1:3b:62:53:d1:d6:10:2d:65:7b:37:83:8a:64:07:14:5f:c2: be:da:6c:1e:8d:30:ff:eb:12:12:d6:09:49:9b:f3:15:d9:5f: 3a:fd:e1:48:6a:b7:8b:c5:a3:4d:09:c8:13:ad:09:ac:88:62: 2e:b5:3d:9e:5a:21:5f:2d:40:8c:af:c8:a4:92:9d:92:05:58: c4:42:2e:54:e0:5b:02:7d:a6:b9:3e:25:ca:2f:b0:ad:15:19: 20:04:69:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUY0MzExMC8GA1UEBRMoNjRDRjUzMkM4RTIwQjE5NkQyNUJDN0NDN0U1OTMyNEY5 MzgxMzI3NTAeFw0yNTA2MTkwNjMzNTVaFw0yNTA2MjYwNjMzNTVaMBgxFjAUBgNV BAMTDTY4NTNhZjU0LWRiOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuJwIRawvqu8O3aCp4deU+hz1b2XNZgedWFQeGtpqqCFnxi6Pl65EzS0JawQHf 8e1U7j+rwQgMTcnTHUYjejt0aAr983S7CiEplsgnj4Yj2+yTc4MKgD2snabizXdR wh1vw/grk8mGnAE/Gk107wgDQosJwqQRIbfzv4GQ070bEKVPbshtvpjTPWBKDjAm eX0LnWdm0BwYBSdmMUJsKizGAnehEKUw9DUsV6N4E6qE69J4mskwQ5o2P25XabM5 QAWBfo48/ZNR19Ri7ttAZA2+pSgHtAMd0L7OaR9qzW9P4P0uONeGdVvXvYklgDh2 GSd5hkmBbyI2Dma6tdLYd3TPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXk4TqpGu hcmI5OwO9YjCzdOp9ccwHwYDVR0jBBgwFoAUZM9TLI4gsZbSW8fMflkyT5OBMnUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RjQzLzU5OUZFQjQ0Q0JG NjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1u VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk05VExJNGdzWmJTVzhmTWZsa3lUNU9CTW5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RjQzLzU5OUZFQjQ0Q0JGNjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1pi U1c4Zk1mbGt5VDVPQk1uVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbL0qcLMsMCvdz4gg7BkNMFCivSDecmw3erVZ4vxEs517YgLbkqxJEd zIJFdXPnQIy4897a4XWiIVotfWliQs4MCmF7gdr5wfsIddqfQFjyCwrvfvOKAQDF rFLgEH9x92PJosbcRPf2P4wBH95vSvw33om3X2ca/VhfhRItydUz1J6leSLEkJxs EZkdpTe5C+G8+OLkJXZm/YgvDGictiV3G/E7YlPR1hAtZXs3g4pkBxRfwr7abB6N MP/rEhLWCUmb8xXZXzr94Uhqt4vFo00JyBOtCayIYi61PZ5aIV8tQIyvyKSSnZIF WMRCLlTgWwJ9prk+JcovsK0VGSAEaQE= -----END CERTIFICATE-----Generated at Fri Jun 20 13:49:38 2025 by rpki-client