$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: lVCbB9iKFvSgW54oB7/7t2XC1GOUeMhvD9zMqspH9TA= Subject key identifier: C5:51:86:67:B4:98:22:DA:C8:E5:36:67:93:0F:65:C5:02:68:94:46 Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 2301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 22F2 Signing time: Sat 14 Jun 2025 15:49:18 +0000 Manifest this update: Sat 14 Jun 2025 15:49:18 +0000 Manifest next update: Sat 21 Jun 2025 15:49:18 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: lfcbt44+YFtJN3ZjMdRkIRrJAUEfw4aWOBFEBKdmN+k=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8961 (0x2301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: Jun 14 15:49:18 2025 GMT Not After : Jun 21 15:49:18 2025 GMT Subject: CN=684d99fe-7505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:9c:81:a1:a4:b3:d1:87:d6:87:ec:b9:f0: 5f:d8:0e:30:02:6e:66:e6:ce:e5:9f:50:22:01:57: 44:10:0b:c3:75:28:4d:fc:9b:62:38:89:b8:e8:8e: 50:a3:d5:5b:ac:68:6e:65:a4:e4:fd:ba:f3:54:27: c0:1a:98:71:6e:ff:b7:2e:7d:5b:1a:4c:16:85:b2: 25:4a:11:23:f4:8c:b3:cf:12:53:94:ce:5f:d8:19: 8e:81:df:b8:b3:b4:ad:f7:a2:2b:08:af:59:af:3c: 69:f1:9a:55:90:ad:49:35:bb:f6:45:88:73:0e:d0: 81:b7:f0:9f:d7:7f:f9:44:83:bf:2d:a5:c0:b7:01: 4b:7f:31:9e:5a:4e:5c:ec:45:25:31:9d:b4:ce:f4: d4:c3:f2:5c:a1:12:d4:da:7d:dc:82:94:c1:be:f0: 8b:63:f3:db:2b:18:63:56:f7:fd:03:98:a1:74:84: 44:71:c5:a1:ac:fb:f2:03:09:af:79:f2:3c:e0:42: 90:d9:ec:e1:bc:09:75:81:54:c6:6d:bc:a0:55:ad: 4d:a1:86:1e:ef:f3:5c:9f:d1:cc:25:fc:8e:2c:fd: f0:89:4c:51:3d:9d:2e:c6:34:bd:b0:be:58:5c:d9: 36:e7:95:d4:7f:e7:41:ae:62:b0:6c:68:78:f6:03: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:51:86:67:B4:98:22:DA:C8:E5:36:67:93:0F:65:C5:02:68:94:46 X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:75:66:a5:42:f3:7b:cb:84:e9:d2:5c:d4:9f:97:95:65:3c: 45:5c:b9:5b:4e:94:87:01:d1:9c:83:93:10:aa:32:ec:19:bd: af:e9:19:13:b2:a0:2a:b3:c8:cc:c6:59:d7:35:10:26:3e:b2: cf:12:23:1f:c2:34:c2:78:c6:61:60:ad:ae:d1:12:29:c1:e3: 80:26:28:9c:ed:37:af:70:ba:ed:1b:de:f8:2f:f1:69:d7:fb: c2:a0:48:00:28:a0:81:8a:12:d1:73:c6:79:08:17:af:f9:f0: dc:4d:00:41:85:1a:3d:d3:60:28:35:bb:88:c1:07:06:85:d2: 6a:34:15:fe:a1:0f:65:0a:1f:9d:3f:5b:1c:58:83:41:4b:d5: 58:cf:98:2f:fe:dc:cb:d9:78:e1:22:9f:49:64:3c:82:0b:7e: 08:96:cf:0e:a3:26:c8:db:fb:5d:52:c7:bc:dd:76:66:ae:69: 16:3e:11:b1:93:1f:5a:0a:86:1a:eb:92:1f:24:b8:00:de:c7: 07:73:c8:cc:b4:8a:60:86:d7:3e:21:92:b3:76:fe:fe:39:79: e9:1c:c2:af:3b:03:80:da:71:88:97:b0:3e:38:d5:50:23:9d: ab:68:0d:1a:68:54:8e:fd:69:3e:70:56:8e:ae:0b:f5:ea:90: 28:15:18:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUwNjE0MTU0OTE4WhcNMjUwNjIxMTU0OTE4WjAYMRYwFAYD VQQDEw02ODRkOTlmZS03NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUycgaGks9GH1ofsufBf2A4wAm5m5s7ln1AiAVdEEAvDdShN/JtiOIm46I5Q o9VbrGhuZaTk/brzVCfAGphxbv+3Ln1bGkwWhbIlShEj9IyzzxJTlM5f2BmOgd+4 s7St96IrCK9Zrzxp8ZpVkK1JNbv2RYhzDtCBt/Cf13/5RIO/LaXAtwFLfzGeWk5c 7EUlMZ20zvTUw/JcoRLU2n3cgpTBvvCLY/PbKxhjVvf9A5ihdIREccWhrPvyAwmv efI84EKQ2ezhvAl1gVTGbbygVa1NoYYe7/Ncn9HMJfyOLP3wiUxRPZ0uxjS9sL5Y XNk255XUf+dBrmKwbGh49gMynQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVRhme0 mCLayOU2Z5MPZcUCaJRGMB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSdWalQvN7y4Tp0lzUn5eVZTxFXLlbTpSHAdGcg5MQqjLsGb2v6RkT sqAqs8jMxlnXNRAmPrLPEiMfwjTCeMZhYK2u0RIpweOAJiic7TevcLrtG974L/Fp 1/vCoEgAKKCBihLRc8Z5CBev+fDcTQBBhRo902AoNbuIwQcGhdJqNBX+oQ9lCh+d P1scWINBS9VYz5gv/tzL2XjhIp9JZDyCC34Ils8OoybI2/tdUse83XZmrmkWPhGx kx9aCoYa65IfJLgA3scHc8jMtIpghtc+IZKzdv7+OXnpHMKvOwOA2nGIl7A+ONVQ I52raA0aaFSO/Wk+cFaOrgv16pAoFRiv -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:17 2025 by rpki-client