$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json) Hash identifier: LMxnwfT002YPmcTf1CrOtOyNqKKLAQsnzrxa8SiJkcc= Subject key identifier: 43:D1:6E:54:02:70:50:56:A9:AB:F7:3F:48:8B:A1:F6:FC:CE:56:09 Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft Manifest number: 0107 Signing time: Tue 17 Jun 2025 04:03:48 +0000 Manifest this update: Tue 17 Jun 2025 04:03:48 +0000 Manifest next update: Tue 24 Jun 2025 04:03:48 +0000 Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: EBNblmFFruvt4FU8r+9RSJJTnoA1cXdK74jeL9iFxKw=) 2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: Jun 17 04:03:48 2025 GMT Not After : Jun 24 04:03:48 2025 GMT Subject: CN=6850e924-4031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:f9:ba:be:cf:9c:93:85:92:05:14:b0:86: d1:30:17:59:a0:c2:4a:0d:07:6c:57:c6:4a:ac:04: 97:1e:2d:ec:cb:91:d3:f0:66:54:42:26:98:c1:da: d1:dd:e4:03:12:ea:7e:43:44:d8:b6:6b:d7:37:25: 22:6d:35:6a:5c:e9:86:0c:d5:dd:28:7f:26:6a:1c: 16:24:e9:ef:8d:07:0f:d7:11:05:6e:c2:cc:26:38: 47:86:34:e8:48:71:ab:b8:f4:38:75:48:3b:99:51: 11:83:4b:47:f3:6a:70:24:b8:9e:dd:ef:db:00:01: 2c:59:14:fb:1a:92:5c:f4:2f:04:1a:97:ad:27:e7: 11:d5:35:f3:fd:ad:f4:80:66:c1:c9:d9:50:6a:41: 1e:0d:7b:e4:e2:f5:2a:41:9b:68:ab:c5:bb:0c:92: 0d:01:7a:e4:bf:ce:78:63:51:5b:0c:56:aa:4a:47: e7:ab:20:0c:3a:44:3f:5d:bc:f2:3b:55:7f:c5:5e: ea:86:07:70:c1:06:48:0a:1a:bb:20:86:66:50:c4: b5:11:b3:1b:db:6c:94:82:7c:91:1e:fd:89:66:7e: 6c:15:b4:f0:e1:d8:16:9c:39:19:e1:40:d7:b5:d1: 62:0e:58:35:7c:8e:52:62:8a:30:01:af:7d:e5:b9: 59:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:6E:54:02:70:50:56:A9:AB:F7:3F:48:8B:A1:F6:FC:CE:56:09 X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:a2:85:7a:f1:3c:5b:64:6b:6d:8f:83:ae:bd:25:a9:59:61: e8:02:0f:59:d8:1b:cb:55:43:b4:2f:51:d0:cd:b4:bf:13:8f: 2b:e6:03:81:c6:e5:cd:7f:f5:0b:d7:2f:2e:cf:20:51:5b:e1: 7d:26:ee:52:69:93:54:c9:ca:6a:33:03:c2:31:f6:4c:9f:4b: b4:76:2a:6b:a9:de:e5:df:ac:45:c9:15:5e:fc:90:5c:2c:8f: 28:1e:17:54:19:ce:c4:01:d9:0d:b9:bf:18:25:8c:04:e2:b7: 35:b2:d1:15:de:6f:66:d0:5c:3b:c5:a5:8d:33:08:4b:93:28: 1e:0c:ee:86:dd:22:a2:93:d4:53:30:ad:43:0d:5f:9a:57:07: ea:e8:f7:a7:08:f6:b0:16:0d:36:37:74:76:b1:c3:1d:0b:5d: 2f:bb:e5:93:75:4e:eb:26:24:22:21:59:59:65:c3:75:e9:6e: 1e:51:26:9f:c1:9d:a1:76:68:d8:fd:ab:67:9b:2f:34:45:17: 2e:6e:c5:8d:80:b0:6a:9f:cb:50:40:2d:e8:f1:b2:e6:ee:29: be:68:57:44:8c:2d:a4:f5:20:7a:8f:fd:53:24:e8:37:43:a7: 0a:72:e2:2f:4a:66:ab:20:58:b0:31:cb:f9:2e:08:ba:42:06: 1b:d7:85:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC RUY4NzhDQjgwHhcNMjUwNjE3MDQwMzQ4WhcNMjUwNjI0MDQwMzQ4WjAYMRYwFAYD VQQDEw02ODUwZTkyNC00MDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs75ur7PnJOFkgUUsIbRMBdZoMJKDQdsV8ZKrASXHi3sy5HT8GZUQiaYwdrR 3eQDEup+Q0TYtmvXNyUibTVqXOmGDNXdKH8mahwWJOnvjQcP1xEFbsLMJjhHhjTo SHGruPQ4dUg7mVERg0tH82pwJLie3e/bAAEsWRT7GpJc9C8EGpetJ+cR1TXz/a30 gGbBydlQakEeDXvk4vUqQZtoq8W7DJINAXrkv854Y1FbDFaqSkfnqyAMOkQ/Xbzy O1V/xV7qhgdwwQZIChq7IIZmUMS1EbMb22yUgnyRHv2JZn5sFbTw4dgWnDkZ4UDX tdFiDlg1fI5SYoowAa995blZ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPRblQC cFBWqav3P0iLofb8zlYJMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5 eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDwooV68TxbZGttj4OuvSWpWWHoAg9Z2BvLVUO0L1HQzbS/E48r5gOB xuXNf/UL1y8uzyBRW+F9Ju5SaZNUycpqMwPCMfZMn0u0diprqd7l36xFyRVe/JBc LI8oHhdUGc7EAdkNub8YJYwE4rc1stEV3m9m0Fw7xaWNMwhLkygeDO6G3SKik9RT MK1DDV+aVwfq6PenCPawFg02N3R2scMdC10vu+WTdU7rJiQiIVlZZcN16W4eUSaf wZ2hdmjY/atnmy80RRcubsWNgLBqn8tQQC3o8bLm7im+aFdEjC2k9SB6j/1TJOg3 Q6cKcuIvSmarIFiwMcv5Lgi6QgYb14VY -----END CERTIFICATE-----Generated at Tue Jun 17 20:14:52 2025 by rpki-client