$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: 3Y4ke/Vmvi3zYxfJs0TYfr8sU71HjeXMiAOp9mdR/Fc= Subject key identifier: C3:A7:DB:E8:91:66:F9:F1:08:75:D4:F6:16:05:E7:3F:A3:10:2A:F0 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0D17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0C9F Signing time: Fri 20 Jun 2025 16:54:43 +0000 Manifest this update: Fri 20 Jun 2025 16:54:43 +0000 Manifest next update: Fri 27 Jun 2025 16:54:43 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: pcn1Xf3CQ0SgXtppC2aa8hqBELsHtsswUive6IDSB+U=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: OL9yx105s7LK6EsnOhe+XLOZ40wASVHJwc15W55t9pM=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 3CFdx6XR3J9PdhVao7c8tK7DvtGCWPlPo7fHfVEStVA=) 4: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: Rt+PX0h7Yw0geptlalj1Ifyv4CWGtLfI+gC6x6CTTH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jun 20 16:54:43 2025 GMT Not After : Jun 27 16:54:43 2025 GMT Subject: CN=68559253-f00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1a:c0:a4:8c:01:81:5c:4b:1e:24:38:4d:4a: 7f:ba:bf:c9:4b:28:b7:a6:5f:51:fa:8d:e1:fd:f0: f5:59:d9:0e:ad:1a:0c:3a:bd:50:bb:f5:6c:f5:7f: fa:c5:4b:67:db:67:70:1e:2f:1a:63:a8:74:4f:3d: 0a:d6:64:e5:fa:3c:50:e2:ca:38:5b:c3:20:c2:4e: 2b:e6:73:26:ad:5a:5c:c1:23:ce:54:64:db:42:d1: 3e:c9:1d:02:c7:20:3f:c5:bf:b3:1f:23:0a:5d:39: 79:3a:25:b6:88:f0:16:66:1c:f1:6d:de:8d:d0:f4: e8:18:8b:45:f8:e9:58:25:c6:12:00:3c:e9:99:90: 42:c5:f7:c6:19:9b:f9:d7:cf:e1:6b:2a:f3:c6:d2: 44:9a:83:43:29:6d:ae:9b:2a:99:ac:65:58:76:49: 9d:d8:7a:0c:a2:a9:46:ab:df:a0:89:cc:af:96:4a: 5f:5d:06:fc:40:6a:f9:f7:97:50:15:22:a1:df:aa: 10:f9:34:18:6b:4e:f6:5a:79:d7:63:d2:ac:40:f5: 4f:09:dc:ab:ec:b7:76:a3:8a:a2:8e:b9:f3:ff:9c: 78:b6:7c:9e:7f:b8:40:c5:07:59:bc:aa:ee:e5:e0: 3b:53:6d:bc:51:98:d4:d4:e9:22:77:a5:dd:89:3a: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A7:DB:E8:91:66:F9:F1:08:75:D4:F6:16:05:E7:3F:A3:10:2A:F0 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:41:35:b7:26:65:7a:4c:13:6f:c3:eb:85:6f:2c:9d:0a:08: a6:87:8e:d1:b5:db:2f:07:38:ea:de:dd:08:97:ec:68:b9:92: 72:73:01:9e:6f:8e:7a:9c:09:c6:67:05:ca:51:27:d5:30:49: 16:c6:5b:2a:df:91:b5:ea:10:65:c1:7d:78:8f:59:f3:7c:38: 7c:43:64:85:09:96:63:27:17:7b:ad:62:c4:83:8c:bf:68:09: ac:cf:32:40:1f:2e:9e:80:2b:71:67:08:08:29:82:ba:ee:dc: e5:22:6f:27:ef:e6:50:67:d8:f0:7e:45:2d:e3:e9:e7:7d:bc: b4:8d:48:7d:79:ab:ed:65:b4:b0:cf:c0:b5:83:de:3d:7b:a3: 02:a3:07:46:6c:c7:09:04:fe:b8:ac:7a:bc:12:13:fa:8d:9a: e7:71:be:99:86:04:4a:0b:3a:72:3b:6a:68:32:67:36:7a:4b: dd:9f:d2:fc:39:1c:58:ed:6f:53:39:c5:2b:ac:fa:4e:76:ac: 0c:e4:24:87:cb:a9:31:e3:71:a1:bd:8a:75:e2:86:45:fc:0b: 96:9e:bc:1c:79:da:a6:9d:b7:c2:33:86:d0:13:32:b0:5c:4c: c6:cd:7d:e4:59:35:9e:b5:ba:b0:12:e0:91:ef:c0:1a:10:8f: 35:8d:9d:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjUwNjIwMTY1NDQzWhcNMjUwNjI3MTY1NDQzWjAYMRYwFAYD VQQDEw02ODU1OTI1My1mMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RrApIwBgVxLHiQ4TUp/ur/JSyi3pl9R+o3h/fD1WdkOrRoMOr1Qu/Vs9X/6 xUtn22dwHi8aY6h0Tz0K1mTl+jxQ4so4W8Mgwk4r5nMmrVpcwSPOVGTbQtE+yR0C xyA/xb+zHyMKXTl5OiW2iPAWZhzxbd6N0PToGItF+OlYJcYSADzpmZBCxffGGZv5 18/hayrzxtJEmoNDKW2umyqZrGVYdkmd2HoMoqlGq9+gicyvlkpfXQb8QGr595dQ FSKh36oQ+TQYa072WnnXY9KsQPVPCdyr7Ld2o4qijrnz/5x4tnyef7hAxQdZvKru 5eA7U228UZjU1Okid6XdiTqorQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOn2+iR ZvnxCHXU9hYF5z+jECrwMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLQTW3JmV6TBNvw+uFbyydCgimh47RtdsvBzjq3t0Il+xouZJycwGe b456nAnGZwXKUSfVMEkWxlsq35G16hBlwX14j1nzfDh8Q2SFCZZjJxd7rWLEg4y/ aAmszzJAHy6egCtxZwgIKYK67tzlIm8n7+ZQZ9jwfkUt4+nnfby0jUh9eavtZbSw z8C1g949e6MCowdGbMcJBP64rHq8EhP6jZrncb6ZhgRKCzpyO2poMmc2ekvdn9L8 ORxY7W9TOcUrrPpOdqwM5CSHy6kx43GhvYp14oZF/AuWnrwcedqmnbfCM4bQEzKw XEzGzX3kWTWetbqwEuCR78AaEI81jZ0+ -----END CERTIFICATE-----Generated at Sat Jun 21 08:06:17 2025 by rpki-client