$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: +l2bauMXOX2uDGUeuIUub6wd+5MO1soyKb3h1Ilbwck= Subject key identifier: 2E:49:B3:AC:A9:8D:77:86:9D:BC:12:65:65:0B:AD:BE:17:27:CD:F3 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 02F3 Signing time: Sun 15 Jun 2025 01:00:43 +0000 Manifest this update: Sun 15 Jun 2025 01:00:43 +0000 Manifest next update: Sun 22 Jun 2025 01:00:43 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: OExMgdjqyg2PhNq8rQJ45uz2iQu29VOMTMkO0wL1z+M=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: z/U3Mkt9VwxVqDogBYYiVzyvbWpXlgorgYhnUU244UM=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: saU/mKblZfuPXjfaCBZNvJjF3cnnkkpxvAWRjd4uqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Jun 15 01:00:43 2025 GMT Not After : Jun 22 01:00:43 2025 GMT Subject: CN=684e1b3b-a975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:da:ba:5e:13:95:e9:88:6f:5b:7e:af:c5: b6:04:1a:ca:3a:71:ba:de:7f:8f:1e:df:92:37:77: 62:98:f0:a6:5c:04:bc:e8:0d:0b:de:7b:bc:d7:07: 19:16:73:6e:c4:49:3d:df:ce:da:b4:35:79:9c:7b: d2:13:bf:b1:81:ef:7d:28:80:86:88:0f:cd:a4:a8: 92:d7:ca:ea:6a:49:6c:1a:da:a1:d7:41:8d:48:40: 6a:aa:8b:3c:96:d4:ed:ac:6c:78:b5:77:32:b2:ef: ff:7c:04:38:26:00:db:cc:7b:5b:42:14:c3:a7:f4: b4:98:5a:86:3e:cd:5f:97:26:51:94:4a:88:82:0f: e3:6b:0c:d3:e9:a7:7b:15:9f:81:6b:1f:70:71:95: 68:80:11:7e:a6:31:72:86:9e:e9:27:74:11:93:81: 08:94:91:9e:ed:7f:06:0b:c8:77:62:28:1d:ca:5c: 31:3a:b1:2e:7a:e3:d7:33:17:72:66:8b:e8:b7:95: b5:34:43:25:b7:16:45:d6:b3:1b:38:7c:18:ff:c8: 75:53:0c:34:b7:1e:96:ed:5a:b1:11:35:4e:40:a5: 49:77:10:fd:be:b0:03:d3:14:cc:d9:3f:2a:d8:1e: eb:b0:b1:41:7c:55:55:26:1e:f6:85:fd:35:98:b6: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:49:B3:AC:A9:8D:77:86:9D:BC:12:65:65:0B:AD:BE:17:27:CD:F3 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:51:8f:ce:c6:38:04:d6:cb:01:62:96:6b:cc:73:aa:47:07: e2:c7:0a:bb:48:d9:04:c7:7b:0b:69:48:e3:da:16:cd:c7:ab: e2:4a:fd:81:11:0a:61:60:39:4e:d3:13:5a:8b:b3:c9:59:3b: e0:6a:7f:32:ff:47:44:1b:38:f3:12:9b:0f:6b:c9:ef:5a:4d: 7e:50:fd:b3:42:38:8f:9d:80:f1:fb:00:d0:9b:69:d5:fb:f9: 72:76:d1:84:e2:64:47:f3:66:62:3f:26:b1:00:cb:ac:0a:17: f7:fc:e4:cc:4e:43:79:f5:cd:b7:54:4f:bb:5d:d8:db:ea:fc: 28:7d:d4:9b:7c:62:1b:79:1f:e1:06:56:d4:56:d0:53:ca:a4: 98:82:c0:dd:70:a8:c6:70:d8:7d:5b:e6:07:7f:cd:fa:e8:95: f9:4c:1f:6c:b3:21:0f:22:dc:00:de:15:5f:97:5e:42:c6:26: 94:2b:15:19:2a:9a:61:db:f9:b0:8c:8f:ba:8c:2a:2c:7c:d1: 70:91:fd:fd:cc:c0:92:f5:d4:9c:3b:22:b2:8c:c0:04:b6:1c: 1d:ae:ed:8e:c1:7f:80:d3:92:97:4a:ad:c0:0b:86:ec:31:65: 71:5c:e5:53:43:a5:72:9c:81:1d:85:cd:fb:95:e5:8c:c6:f6: 99:f9:bc:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwNjE1MDEwMDQzWhcNMjUwNjIyMDEwMDQzWjAYMRYwFAYD VQQDEw02ODRlMWIzYi1hOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxk/aul4TlemIb1t+r8W2BBrKOnG63n+PHt+SN3dimPCmXAS86A0L3nu81wcZ FnNuxEk9387atDV5nHvSE7+xge99KICGiA/NpKiS18rqaklsGtqh10GNSEBqqos8 ltTtrGx4tXcysu//fAQ4JgDbzHtbQhTDp/S0mFqGPs1flyZRlEqIgg/jawzT6ad7 FZ+Bax9wcZVogBF+pjFyhp7pJ3QRk4EIlJGe7X8GC8h3YigdylwxOrEueuPXMxdy Zovot5W1NEMltxZF1rMbOHwY/8h1Uww0tx6W7VqxETVOQKVJdxD9vrAD0xTM2T8q 2B7rsLFBfFVVJh72hf01mLavkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5Js6yp jXeGnbwSZWULrb4XJ83zMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgUY/OxjgE1ssBYpZrzHOqRwfixwq7SNkEx3sLaUjj2hbNx6viSv2B EQphYDlO0xNai7PJWTvgan8y/0dEGzjzEpsPa8nvWk1+UP2zQjiPnYDx+wDQm2nV +/lydtGE4mRH82ZiPyaxAMusChf3/OTMTkN59c23VE+7Xdjb6vwofdSbfGIbeR/h BlbUVtBTyqSYgsDdcKjGcNh9W+YHf8366JX5TB9ssyEPItwA3hVfl15CxiaUKxUZ Kpph2/mwjI+6jCosfNFwkf39zMCS9dScOyKyjMAEthwdru2OwX+A05KXSq3AC4bs MWVxXOVTQ6VynIEdhc37leWMxvaZ+bxn -----END CERTIFICATE-----Generated at Mon Jun 16 14:46:38 2025 by rpki-client