$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: /43TK6SJiETMyHo+ecM8+TYkrTm6L7QDIRBiOdyxMzs= Subject key identifier: A5:C4:B0:99:5D:1F:4D:B6:A8:5E:08:3B:56:A7:58:BB:50:41:B5:19 Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 0802 Signing time: Sat 14 Jun 2025 20:43:18 +0000 Manifest this update: Sat 14 Jun 2025 20:43:17 +0000 Manifest next update: Sat 21 Jun 2025 20:43:17 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: y/SSlXJ6YgKwn0kFN+uaboWuNm8HfKp4SXMPM8DHnmg=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: L4B2evBW9dTHQXVqbxeQ4CNrkuNZaT5qA9O5a+LAGeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Jun 14 20:43:17 2025 GMT Not After : Jun 21 20:43:17 2025 GMT Subject: CN=684ddee5-8b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:c6:2f:f4:3b:e0:52:c9:91:fb:40:9c:a8: 95:67:fb:d0:34:2a:5f:10:d9:23:ee:54:97:38:17: 79:dd:7b:40:6d:07:dd:ec:ec:9f:53:bf:60:96:cc: a5:a4:2b:a9:cd:98:0f:b8:50:04:c7:38:04:58:27: 14:8b:14:01:57:3c:76:90:79:9b:12:45:5a:0a:08: 04:21:ac:05:ed:98:9c:4d:a2:fe:b1:e2:33:50:48: 9b:f2:f4:65:2d:19:fd:c5:bd:6b:a9:fd:d6:d8:b6: f5:f2:83:3f:fa:37:89:67:57:4c:8e:49:98:59:a0: 57:a9:6b:b8:d0:9a:95:de:67:6d:f1:35:32:b6:d5: d2:fc:f0:f4:82:d9:35:8f:fd:b1:45:da:23:22:cf: 3f:e5:42:2e:04:d2:e5:2a:c5:76:c8:a7:59:1a:f2: 7b:11:73:d3:54:bf:d7:3a:5e:eb:ff:8a:62:68:ef: 08:49:2b:22:e6:82:43:1f:2f:4b:b6:f7:96:c2:aa: 93:ec:81:19:c1:17:8d:d3:e2:64:9f:dc:01:70:66: 36:f4:8a:34:d3:92:91:97:7a:d2:94:49:48:80:05: fb:f2:29:55:40:07:16:64:7c:61:bc:d8:a7:22:90: 8f:c6:ba:d1:f6:35:45:4a:19:ec:99:95:ed:04:bf: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C4:B0:99:5D:1F:4D:B6:A8:5E:08:3B:56:A7:58:BB:50:41:B5:19 X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:47:fe:78:be:97:2d:40:05:8d:75:d0:4a:90:f3:bf:2d:a6: fc:3e:77:c6:0a:b6:f9:b3:79:ec:a5:48:c7:39:ae:31:3a:5a: 36:f5:a4:f7:e5:4c:b5:72:84:f0:47:25:5c:51:4e:24:c5:0d: e8:ad:23:05:a1:61:0c:7e:2f:a3:a9:fa:94:db:36:b7:24:df: db:00:db:c0:7f:80:35:fd:e9:ce:dc:7b:5b:ce:97:6c:87:f1: 84:a9:08:27:db:13:29:b4:79:30:f5:f1:70:e5:00:a4:e6:c1: c9:ca:56:76:0e:33:0e:bc:a6:32:33:d7:85:c9:10:dc:d6:53: 0d:d9:5e:31:fd:af:50:0b:c9:b5:8d:7a:0c:24:aa:49:16:6c: 89:90:74:93:ee:7a:cb:de:19:29:7e:88:b9:76:30:0c:7e:b4: 0c:c9:22:50:37:ea:93:08:74:6e:c0:59:e9:e7:a3:b2:bf:a2: d1:60:63:51:c2:ff:a8:54:80:2e:ff:8f:7d:b1:c4:33:bf:49: ea:94:52:a9:99:99:2e:b7:40:7b:bd:ec:3c:36:f3:3a:af:b0: a3:50:2d:e6:20:e2:36:62:e2:dd:96:0d:f9:56:ef:d5:9a:f9: 21:93:b4:72:e0:cb:8e:01:21:a3:80:76:da:90:77:61:de:39: 04:1c:85:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjUwNjE0MjA0MzE3WhcNMjUwNjIxMjA0MzE3WjAYMRYwFAYD VQQDEw02ODRkZGVlNS04YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsfGL/Q74FLJkftAnKiVZ/vQNCpfENkj7lSXOBd53XtAbQfd7OyfU79glsyl pCupzZgPuFAExzgEWCcUixQBVzx2kHmbEkVaCggEIawF7ZicTaL+seIzUEib8vRl LRn9xb1rqf3W2Lb18oM/+jeJZ1dMjkmYWaBXqWu40JqV3mdt8TUyttXS/PD0gtk1 j/2xRdojIs8/5UIuBNLlKsV2yKdZGvJ7EXPTVL/XOl7r/4piaO8ISSsi5oJDHy9L tveWwqqT7IEZwReN0+Jkn9wBcGY29Io005KRl3rSlElIgAX78ilVQAcWZHxhvNin IpCPxrrR9jVFShnsmZXtBL83fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXEsJld H022qF4IO1anWLtQQbUZMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5R/54vpctQAWNddBKkPO/Lab8PnfGCrb5s3nspUjHOa4xOlo29aT3 5Uy1coTwRyVcUU4kxQ3orSMFoWEMfi+jqfqU2za3JN/bANvAf4A1/enO3Htbzpds h/GEqQgn2xMptHkw9fFw5QCk5sHJylZ2DjMOvKYyM9eFyRDc1lMN2V4x/a9QC8m1 jXoMJKpJFmyJkHST7nrL3hkpfoi5djAMfrQMySJQN+qTCHRuwFnp56Oyv6LRYGNR wv+oVIAu/499scQzv0nqlFKpmZkut0B7vew8NvM6r7CjUC3mIOI2YuLdlg35Vu/V mvkhk7Ry4MuOASGjgHbakHdh3jkEHIWF -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:21 2025 by rpki-client