$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: m8Z9UIOwpyoLqPMbnztCciUXv6PWXBARiN/0P345tjM= Subject key identifier: 94:D4:64:09:0F:49:84:01:3B:E8:6E:44:E1:D7:1B:F2:9D:7D:F2:F8 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 09C1 Signing time: Sat 14 Jun 2025 19:47:21 +0000 Manifest this update: Sat 14 Jun 2025 19:47:20 +0000 Manifest next update: Sat 21 Jun 2025 19:47:20 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: uWDmWp3HBSt/3BkwaHkVMyl6MuuxBbzrR5gYjZWOJw8=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: cQpAURqDM/34gPKhgVHe+OBCLHcXpgoxll5j5sk3a4o=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 3doq1VIPrTMuHeE3hP1dvsdzHHC8FVCO0WmVRpeSjbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Jun 14 19:47:20 2025 GMT Not After : Jun 21 19:47:20 2025 GMT Subject: CN=684dd1c8-1742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:90:fb:75:a9:b4:67:3b:39:f5:33:71:1b: 2a:41:13:26:35:33:92:50:c3:d3:95:ea:a0:0a:f3: 68:5b:18:19:f3:41:4e:00:d8:bd:3e:47:5f:98:c7: 36:08:2d:03:0b:6d:64:cc:1c:da:9a:7f:72:d0:fb: 9b:68:87:bd:5a:3d:5a:9d:95:6f:1e:1e:3b:32:60: 43:4b:90:f3:ee:bb:d3:a9:f9:b3:28:26:6b:6a:61: fa:9a:de:b1:0f:34:7e:b1:37:f6:1f:6f:8c:35:95: 53:ae:81:72:1e:d7:6b:e5:69:4b:8b:23:66:cc:27: a8:7f:8c:4a:c3:8e:65:c3:d8:8a:76:1d:97:0a:c0: 3d:40:f4:cd:d2:79:aa:4c:e0:ff:67:b6:3e:3c:2c: e0:ef:80:88:c1:ea:1e:9f:ae:18:bc:dd:f1:9b:e5: 8f:ed:5b:16:6a:f1:78:0d:0a:35:76:d4:77:ed:ca: a6:39:ab:2a:08:42:31:23:cc:bb:6e:e0:9c:51:57: a1:75:67:0c:bb:8f:25:51:37:62:83:69:e8:1d:fb: e4:7e:a8:41:bb:bb:07:ca:52:b9:6b:79:fc:05:cc: b0:60:12:86:84:a8:e2:46:a2:28:f8:77:a4:57:c5: be:4e:ef:a4:51:c8:a1:07:36:53:86:73:f4:55:bd: 06:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D4:64:09:0F:49:84:01:3B:E8:6E:44:E1:D7:1B:F2:9D:7D:F2:F8 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:16:ae:d2:ac:3d:7c:f9:73:98:22:0e:15:66:7f:89:f1:bf: b2:96:78:58:b4:82:35:43:db:38:1f:47:94:65:67:67:64:7d: 5f:45:49:5e:d6:2b:3e:a9:84:7a:c3:75:c2:45:b9:7a:5a:b5: 46:7e:75:d1:e2:2a:df:cd:28:57:6d:9e:08:c6:75:83:6a:97: 4a:96:88:cf:23:37:22:72:5a:ca:83:be:45:4d:01:27:1d:b8: fc:1b:1c:8b:31:9b:7a:35:ce:db:5c:13:0b:f2:8f:db:ca:60: 20:61:58:68:41:59:c3:74:91:a5:d6:e7:2d:10:cc:8c:83:8d: d6:5b:aa:63:ab:7b:f7:7c:91:8b:64:fb:f4:1e:d8:db:b9:1c: f1:1d:c1:1d:29:7c:3d:4f:d9:6e:fa:22:38:20:00:94:d7:76: 40:03:f0:1e:5c:d0:ec:f6:43:f8:3c:cd:46:81:64:8f:20:ce: 8b:9e:cc:57:2d:5a:46:99:db:0e:52:2d:f2:1a:ed:98:80:bf: a3:37:a5:e3:88:c1:6f:61:46:a3:84:aa:96:f8:97:b1:1b:da: a3:4a:77:44:47:bb:69:b5:81:a5:90:52:7a:3a:b5:ed:88:29: a7:16:63:90:a6:cd:3d:9d:40:5e:3e:80:ec:d4:79:0e:97:7d: 3f:3e:90:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjUwNjE0MTk0NzIwWhcNMjUwNjIxMTk0NzIwWjAYMRYwFAYD VQQDEw02ODRkZDFjOC0xNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdWQ+3WptGc7OfUzcRsqQRMmNTOSUMPTleqgCvNoWxgZ80FOANi9PkdfmMc2 CC0DC21kzBzamn9y0PubaIe9Wj1anZVvHh47MmBDS5Dz7rvTqfmzKCZramH6mt6x DzR+sTf2H2+MNZVTroFyHtdr5WlLiyNmzCeof4xKw45lw9iKdh2XCsA9QPTN0nmq TOD/Z7Y+PCzg74CIweoen64YvN3xm+WP7VsWavF4DQo1dtR37cqmOasqCEIxI8y7 buCcUVehdWcMu48lUTdig2noHfvkfqhBu7sHylK5a3n8BcywYBKGhKjiRqIo+Hek V8W+Tu+kUcihBzZThnP0Vb0GuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTUZAkP SYQBO+huROHXG/KdffL4MB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeFq7SrD18+XOYIg4VZn+J8b+ylnhYtII1Q9s4H0eUZWdnZH1fRUle 1is+qYR6w3XCRbl6WrVGfnXR4irfzShXbZ4IxnWDapdKlojPIzciclrKg75FTQEn Hbj8GxyLMZt6Nc7bXBML8o/bymAgYVhoQVnDdJGl1uctEMyMg43WW6pjq3v3fJGL ZPv0HtjbuRzxHcEdKXw9T9lu+iI4IACU13ZAA/AeXNDs9kP4PM1GgWSPIM6LnsxX LVpGmdsOUi3yGu2YgL+jN6XjiMFvYUajhKqW+JexG9qjSndER7tptYGlkFJ6OrXt iCmnFmOQps09nUBePoDs1HkOl30/PpAm -----END CERTIFICATE-----Generated at Sun Jun 15 07:12:52 2025 by rpki-client