$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft File: ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json) Hash identifier: ozKUiqiR/L6brOImQcbUxfs3DOkG3TAbZ7vgE74Crps= Subject key identifier: D7:ED:61:14:79:89:C0:47:09:6F:07:7C:0F:0E:3C:2E:F6:02:CE:DD Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 Certificate issuer: /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft Manifest number: 349B Signing time: Sat 14 Jun 2025 15:12:58 +0000 Manifest this update: Sat 14 Jun 2025 15:12:57 +0000 Manifest next update: Sat 21 Jun 2025 15:12:57 +0000 Files and hashes: 1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: iTTFbxaQAImUeIJYibAOFgx3ghxKMrIrW2wUS3bCOJo=) 2: 1190361AAF1B11E7B89F3883C4F9AE02.roa (hash: Yhv6SLVoZ0lTl3VQ8oBTiyjwIMld5GdKG4lLfPu9iQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Validity Not Before: Jun 14 15:12:57 2025 GMT Not After : Jun 21 15:12:57 2025 GMT Subject: CN=684d917a-409a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:ce:aa:51:02:16:2d:0f:74:5b:30:78:e4: 02:8e:f5:40:0e:4c:88:ba:d3:6c:68:9b:f2:69:2b: 5a:8d:d6:af:e5:61:09:78:8e:94:66:a9:6d:95:13: 51:6f:28:9f:17:93:02:b8:2e:5b:47:1c:81:2e:55: 0d:98:32:e6:9e:00:50:d8:17:48:ff:aa:cc:13:73: 6a:9a:2b:75:3a:7d:6d:c8:f8:4e:e4:c6:02:31:e9: 64:c5:88:38:ea:2f:75:21:2a:3a:3f:5b:8f:b5:51: 1d:8a:e3:91:27:3e:6b:ae:ed:4d:8b:27:a5:9e:11: 8c:d0:1c:44:06:8d:74:9a:75:d3:d3:7c:12:0a:c1: 7d:59:7a:cc:c1:53:3b:5c:9d:2a:a9:e3:83:0a:10: 51:58:9a:a3:d5:a9:e1:74:72:fd:77:ff:ce:9c:a9: ac:87:cf:a0:0a:af:57:f1:7d:15:06:9c:cc:86:65: f9:a6:ea:12:63:52:ff:d9:8e:0f:bd:19:89:5b:ec: c1:d5:48:cd:61:da:9a:4f:30:4b:17:28:69:92:c2: a8:98:50:9b:51:c9:5c:86:31:10:49:99:cb:24:64: 2e:94:f7:49:39:eb:a5:15:0f:8c:2a:49:f8:ca:08: 12:37:e0:28:7c:ab:17:08:64:71:37:b8:ca:2c:96: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:ED:61:14:79:89:C0:47:09:6F:07:7C:0F:0E:3C:2E:F6:02:CE:DD X509v3 Authority Key Identifier: keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d9:eb:36:96:29:d3:b6:eb:9f:37:6b:c2:58:b2:1f:f0:70: 1d:2b:63:8a:c7:36:06:d8:83:e0:f8:28:9c:a3:da:12:86:09: 8f:3c:f0:c6:78:b7:70:80:64:23:5b:a0:f1:69:7d:0a:35:bd: 5c:f9:44:e2:79:23:24:4f:24:f0:3a:4b:89:f2:6e:d1:a7:37: 55:50:16:dd:b6:e4:fa:e6:9f:b6:6b:70:ff:4f:11:3d:e0:80: 20:2f:47:31:cd:54:a5:51:ac:79:aa:3b:0f:1a:17:d3:18:e4: c6:4b:e7:07:b0:b2:79:40:f1:d7:e6:97:9e:be:c2:2a:09:ee: bc:02:1a:2e:45:23:37:ec:e5:53:fc:34:38:62:60:b2:a4:1c: af:0e:f4:8c:55:46:eb:2f:0f:fd:c5:de:fb:aa:b2:5a:c5:39: b5:2c:89:41:10:12:c3:90:87:c9:76:fc:bf:fd:50:bc:16:ee: 95:84:db:57:fc:b7:1b:36:aa:42:8a:61:34:6b:2d:66:c4:d3: 40:8d:0b:4f:e0:97:d5:e7:f8:4d:fb:d1:66:7c:02:7c:5d:5a: 4e:03:f3:db:6b:8d:8c:49:d3:dc:cf:4d:eb:2b:66:45:c1:13: c0:75:32:df:38:fc:b2:02:30:cd:87:a2:cb:c1:d8:54:71:37: 4c:bf:a0:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCNjMxMTAvBgNVBAUTKDY2RUEwRjgzQkREMzYzMkJGRjE5NDAwQjNBMUJBNkZF REZGQzU1ODcwHhcNMjUwNjE0MTUxMjU3WhcNMjUwNjIxMTUxMjU3WjAYMRYwFAYD VQQDEw02ODRkOTE3YS00MDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfvOqlECFi0PdFsweOQCjvVADkyIutNsaJvyaStajdav5WEJeI6UZqltlRNR byifF5MCuC5bRxyBLlUNmDLmngBQ2BdI/6rME3Nqmit1On1tyPhO5MYCMelkxYg4 6i91ISo6P1uPtVEdiuORJz5rru1NiyelnhGM0BxEBo10mnXT03wSCsF9WXrMwVM7 XJ0qqeODChBRWJqj1anhdHL9d//OnKmsh8+gCq9X8X0VBpzMhmX5puoSY1L/2Y4P vRmJW+zB1UjNYdqaTzBLFyhpksKomFCbUclchjEQSZnLJGQulPdJOeulFQ+MKkn4 yggSN+AofKsXCGRxN7jKLJZBPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNftYRR5 icBHCW8HfA8OPC72As7dMB8GA1UdIwQYMBaAFGbqD4O902Mr/xlACzobpv7f/FWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0I2My9FMUIwNTRGQzFE QTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5dl9HVUFMT2h1bV90XzhW WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b1BnNzNUWXl2X0dVQUxPaHVtX3RfOFZZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0I2My9FMUIwNTRGQzFEQTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5 dl9HVUFMT2h1bV90XzhWWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC2es2linTtuufN2vCWLIf8HAdK2OKxzYG2IPg+Cico9oShgmPPPDG eLdwgGQjW6DxaX0KNb1c+UTieSMkTyTwOkuJ8m7RpzdVUBbdtuT65p+2a3D/TxE9 4IAgL0cxzVSlUax5qjsPGhfTGOTGS+cHsLJ5QPHX5peevsIqCe68AhouRSM37OVT /DQ4YmCypByvDvSMVUbrLw/9xd77qrJaxTm1LIlBEBLDkIfJdvy//VC8Fu6VhNtX /LcbNqpCimE0ay1mxNNAjQtP4JfV5/hN+9FmfAJ8XVpOA/Pba42MSdPcz03rK2ZF wRPAdTLfOPyyAjDNh6LLwdhUcTdMv6DB -----END CERTIFICATE-----Generated at Sun Jun 15 04:40:50 2025 by rpki-client