$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: RpzEXbSUR/wJsJhms8yAxwqf9iJ2RxgqZ9b4JFDyP1g= Subject key identifier: 0C:57:FA:11:4A:41:19:90:D6:09:B2:B2:B0:B3:1F:7C:D2:40:3B:CB Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: A5 Signing time: Sun 15 Jun 2025 05:17:30 +0000 Manifest this update: Sun 15 Jun 2025 05:17:29 +0000 Manifest next update: Sun 22 Jun 2025 05:17:29 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: TZ0+558s0ikHHuTFHGbHp4ETg++O5tviPzjU29EDsFQ=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Jun 15 05:17:29 2025 GMT Not After : Jun 22 05:17:29 2025 GMT Subject: CN=684e5769-f303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:d8:ba:b5:10:c2:fb:d8:bb:16:59:1e:12: aa:18:10:d9:9e:3d:cd:0d:15:27:59:3c:a7:6b:53: 35:99:cf:c2:94:9d:89:a8:5f:46:66:bc:46:3c:ae: f8:fd:c4:9d:fd:4e:5e:2f:ef:77:07:45:6a:36:50: 8c:b0:a6:f7:10:58:eb:eb:eb:b8:e8:20:f0:e0:a0: 35:34:c8:e7:31:f0:d8:cb:2b:91:c0:8a:4b:21:83: b2:de:4a:62:e2:c1:e2:2e:db:40:af:22:9b:c1:1c: 73:68:2a:bf:57:4f:e3:66:e9:8b:a4:91:79:43:ef: 3b:d3:79:50:72:6c:67:19:11:dd:e0:ad:4f:e3:84: 05:30:d0:b4:ff:80:c6:06:b4:17:ee:8b:f3:0d:38: 44:ed:62:e8:6b:3e:33:21:3c:56:55:78:54:62:57: 1f:c4:e4:e0:6d:1e:67:5b:56:b7:e2:b3:83:7d:7a: f9:8a:76:48:c6:f6:7c:31:5f:b9:6f:82:2e:76:e1: 0f:fb:d7:8a:13:dd:71:34:56:da:2d:b5:2f:42:3e: a4:25:4b:15:b6:21:a7:ca:94:2e:eb:4a:b3:dd:c8: 69:f6:af:23:e2:73:8e:af:4d:30:99:30:d9:ec:c1: 43:bd:dd:4c:e8:47:4e:77:22:c6:11:4e:0a:fa:40: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:FA:11:4A:41:19:90:D6:09:B2:B2:B0:B3:1F:7C:D2:40:3B:CB X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2b:b6:5a:c1:da:2d:88:77:9a:ee:cb:97:df:f7:26:85:f3: 8a:81:c0:e2:4a:2b:34:b0:c5:0b:56:1e:9b:8c:b7:38:9e:c7: a7:f1:24:3b:b3:57:21:41:30:4e:17:40:7d:72:65:8f:fe:d4: 57:3d:ce:48:01:78:f1:1e:28:79:86:52:17:80:d5:f5:b6:1e: 95:96:e3:27:2c:75:d4:24:15:3d:95:6f:a6:73:bd:10:3a:ba: 60:09:21:89:86:a0:a5:82:c1:c8:c2:fd:d1:e1:d6:92:d7:ef: 00:fa:93:05:c1:a6:e9:87:3b:55:6d:0e:91:1f:8a:9e:c7:30: 66:b8:e5:f6:4a:0c:5e:44:b9:cc:08:3e:3b:c1:12:27:0a:a7: 24:bc:b3:61:0d:b3:ef:19:8d:2c:63:c7:c5:46:79:8b:ac:0a: 7e:67:15:ab:b8:69:90:b8:c8:a3:03:44:e6:af:52:4b:d0:2a: d8:3b:40:98:0b:0c:f7:9a:c6:c0:f2:af:5a:5a:a5:af:26:70: 4e:af:c6:c9:23:1c:d2:cc:c8:9c:f3:3f:59:21:03:07:6e:38: dd:5e:75:ea:6d:00:ec:5e:e1:17:52:7f:fc:df:82:d5:8f:19: eb:6b:a3:61:24:2e:ee:71:89:40:97:8b:d3:d3:38:2a:88:46: dd:bf:2b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjUwNjE1MDUxNzI5WhcNMjUwNjIyMDUxNzI5WjAYMRYwFAYD VQQDEw02ODRlNTc2OS1mMzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYrYurUQwvvYuxZZHhKqGBDZnj3NDRUnWTyna1M1mc/ClJ2JqF9GZrxGPK74 /cSd/U5eL+93B0VqNlCMsKb3EFjr6+u46CDw4KA1NMjnMfDYyyuRwIpLIYOy3kpi 4sHiLttAryKbwRxzaCq/V0/jZumLpJF5Q+8703lQcmxnGRHd4K1P44QFMNC0/4DG BrQX7ovzDThE7WLoaz4zITxWVXhUYlcfxOTgbR5nW1a34rODfXr5inZIxvZ8MV+5 b4IuduEP+9eKE91xNFbaLbUvQj6kJUsVtiGnypQu60qz3chp9q8j4nOOr00wmTDZ 7MFDvd1M6EdOdyLGEU4K+kDrFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxX+hFK QRmQ1gmysrCzH3zSQDvLMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwK7ZawdotiHea7suX3/cmhfOKgcDiSis0sMULVh6bjLc4nsen8SQ7 s1chQTBOF0B9cmWP/tRXPc5IAXjxHih5hlIXgNX1th6VluMnLHXUJBU9lW+mc70Q OrpgCSGJhqClgsHIwv3R4daS1+8A+pMFwabphztVbQ6RH4qexzBmuOX2SgxeRLnM CD47wRInCqckvLNhDbPvGY0sY8fFRnmLrAp+ZxWruGmQuMijA0Tmr1JL0CrYO0CY Cwz3msbA8q9aWqWvJnBOr8bJIxzSzMic8z9ZIQMHbjjdXnXqbQDsXuEXUn/834LV jxnra6NhJC7ucYlAl4vT0zgqiEbdvyvQ -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:04 2025 by rpki-client