$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json) Hash identifier: ClRX33jncixFr6u8oBItBQJqED5bYS1DX/XzvbLpMV0= Subject key identifier: C2:ED:45:0C:7B:22:63:9E:AA:EA:2C:A4:92:E5:1D:B7:BF:B4:24:32 Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft Manifest number: 0428 Signing time: Sun 15 Jun 2025 00:07:14 +0000 Manifest this update: Sun 15 Jun 2025 00:07:14 +0000 Manifest next update: Sun 22 Jun 2025 00:07:14 +0000 Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: BH/m9GIY5LXyLQvxwZJN5Doa/0FsliQ7Ke2Ow4HrkWA=) 2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Validity Not Before: Jun 15 00:07:14 2025 GMT Not After : Jun 22 00:07:14 2025 GMT Subject: CN=684e0eb2-3219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:73:3f:ab:c2:51:08:39:54:bf:68:24:6f: ba:86:70:af:ca:2e:ff:0d:74:22:a1:08:87:b0:03: f8:f3:be:f1:cf:20:db:50:51:59:d8:cf:85:74:7f: 4b:dc:81:cf:e4:ab:2b:37:81:8d:e5:dd:bf:fb:4d: 61:a7:81:bd:9f:0b:fa:7d:ef:8a:b4:27:f9:db:2d: 41:cf:d8:ec:a1:19:bc:8e:dd:92:f8:23:d8:d7:37: 00:c4:67:3b:fb:af:94:82:c7:65:94:0a:e5:19:f9: 67:00:e8:32:f7:50:f7:d1:dd:2d:4d:8e:a1:a5:85: 7b:18:9b:6b:ce:97:53:7b:9a:fd:14:67:66:44:c2: 6f:fa:3b:6f:d4:be:7f:4c:06:3c:76:8b:59:62:34: 1c:41:5b:0e:86:cc:43:03:97:ec:37:f9:24:bd:06: c7:68:33:23:4e:c7:bd:b2:38:5a:19:a0:2c:eb:af: a2:30:6a:98:cc:be:42:c6:7d:b3:8b:bc:c5:c7:30: a9:af:b5:0a:96:78:7a:bf:ff:c3:4e:36:6d:7d:9e: 7b:16:98:8b:e8:74:ee:e9:ab:9d:cc:1b:05:9b:7e: 36:46:18:41:50:84:be:ff:f3:bd:4f:6e:c1:42:a5: 87:22:37:5a:2c:ca:0d:79:cb:56:ae:d2:28:d1:f4: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:45:0C:7B:22:63:9E:AA:EA:2C:A4:92:E5:1D:B7:BF:B4:24:32 X509v3 Authority Key Identifier: keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:03:c9:66:81:3d:ce:ef:1e:2e:db:bb:a7:c8:03:cb:05:82: 8a:00:75:2f:b4:40:d8:88:2b:6c:4d:31:25:28:60:a1:6d:79: 97:e4:95:89:2a:e6:70:71:f0:d3:32:56:22:b6:f3:9d:37:9f: 4d:83:aa:36:08:d6:1f:b0:32:7e:5e:d7:5d:a0:e8:45:3a:43: b9:d2:56:3f:2b:be:85:a0:25:bb:8b:9e:89:56:08:a0:2d:71: 54:0f:7f:37:ca:b6:fe:9b:66:32:42:ec:5b:fd:dc:1c:99:ec: 70:d6:28:b4:d2:7d:c0:0a:94:4d:9e:c9:63:e2:1c:c9:8a:92: 2d:bf:7a:b9:3e:60:44:b5:f3:41:91:72:45:7a:20:14:cc:41: e9:82:ed:58:a0:ca:fc:73:b6:e7:80:a0:61:bf:51:1f:3a:57: 2e:5e:a5:5b:87:ba:45:50:83:42:37:6a:d6:37:cd:78:44:55: 22:7a:1c:61:e7:c9:7b:fe:45:25:96:c4:64:31:2e:e8:e5:0d: a9:38:44:4d:f0:d3:d9:aa:e1:75:b3:b4:11:bc:0e:e3:62:c1: 70:ec:e4:4a:58:c3:79:0a:0c:13:4e:eb:2a:ee:ec:2b:2e:6a: a8:9c:da:45:99:cd:24:b4:b4:55:2e:69:ed:16:bb:4f:2b:6b: a5:19:b5:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx MkE1NTFDMzgwHhcNMjUwNjE1MDAwNzE0WhcNMjUwNjIyMDAwNzE0WjAYMRYwFAYD VQQDEw02ODRlMGViMi0zMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgNzP6vCUQg5VL9oJG+6hnCvyi7/DXQioQiHsAP4877xzyDbUFFZ2M+FdH9L 3IHP5KsrN4GN5d2/+01hp4G9nwv6fe+KtCf52y1Bz9jsoRm8jt2S+CPY1zcAxGc7 +6+UgsdllArlGflnAOgy91D30d0tTY6hpYV7GJtrzpdTe5r9FGdmRMJv+jtv1L5/ TAY8dotZYjQcQVsOhsxDA5fsN/kkvQbHaDMjTse9sjhaGaAs66+iMGqYzL5Cxn2z i7zFxzCpr7UKlnh6v//DTjZtfZ57FpiL6HTu6audzBsFm342RhhBUIS+//O9T27B QqWHIjdaLMoNectWrtIo0fQokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLtRQx7 ImOequospJLlHbe/tCQyMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy bnFzd05HOWlTMk1TcFZIRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9A8lmgT3O7x4u27unyAPLBYKKAHUvtEDYiCtsTTElKGChbXmX5JWJ KuZwcfDTMlYitvOdN59Ng6o2CNYfsDJ+XtddoOhFOkO50lY/K76FoCW7i56JVgig LXFUD383yrb+m2YyQuxb/dwcmexw1ii00n3ACpRNnslj4hzJipItv3q5PmBEtfNB kXJFeiAUzEHpgu1YoMr8c7bngKBhv1EfOlcuXqVbh7pFUINCN2rWN814RFUiehxh 58l7/kUllsRkMS7o5Q2pOERN8NPZquF1s7QRvA7jYsFw7ORKWMN5CgwTTusq7uwr LmqonNpFmc0ktLRVLmntFrtPK2ulGbXy -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:10 2025 by rpki-client