$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json) Hash identifier: syU5Ue6KQ9K3tmejkDbrr1OFu7YHswmy80QcV9YOx6Y= Subject key identifier: DD:CF:2D:E3:32:5B:1F:57:1E:D1:10:CB:EC:D6:0B:EB:EA:A2:46:59 Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft Manifest number: 04C3 Signing time: Sat 14 Jun 2025 23:41:21 +0000 Manifest this update: Sat 14 Jun 2025 23:41:20 +0000 Manifest next update: Sat 21 Jun 2025 23:41:20 +0000 Files and hashes: 1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: IjU3se3oOnvYZJXZwG+QLsIeooHKSvKff8N/ZYz1DMM=) 2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Validity Not Before: Jun 14 23:41:20 2025 GMT Not After : Jun 21 23:41:20 2025 GMT Subject: CN=684e08a1-c8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:e3:3b:16:da:a2:fb:88:23:ed:8e:45:1c: dd:d4:78:32:05:3b:92:99:79:54:af:17:f3:3d:1c: d1:ce:2f:a3:b1:e5:f0:f8:23:f3:2f:72:8a:44:2d: f3:b3:e1:75:a0:37:66:52:42:dd:98:3a:30:34:14: ce:52:b3:e3:63:5b:bc:90:f2:7c:4d:ed:ea:8f:4c: e5:0d:6a:b7:49:6c:72:de:83:6d:70:f7:b0:04:fd: 86:39:5b:d0:f5:2e:87:c7:f8:62:60:12:13:ff:81: 0c:bc:8a:c6:32:27:17:16:a3:1e:58:cf:09:41:36: a7:3e:a6:4a:e0:60:fb:43:39:fc:72:17:f6:81:af: f1:90:03:d1:b3:9d:ef:00:45:80:ca:c8:fc:72:d9: f1:0e:14:df:41:c7:7a:87:38:3e:66:4d:24:75:2d: a8:6a:bc:60:94:60:4b:b6:b5:c4:df:16:59:1a:9c: 0d:b1:6c:35:99:98:ae:b3:f1:f2:99:7f:3f:29:fe: e9:59:89:d3:c0:1b:fe:9e:e2:c1:66:47:19:6e:47: 5c:a9:4d:94:ae:97:32:36:cb:f6:fa:45:c5:26:5c: a0:cd:d3:70:b9:12:85:1a:fd:d1:b9:f6:a9:d0:01: b8:33:68:f2:a1:64:1a:79:7a:a7:cd:6d:a2:7b:74: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CF:2D:E3:32:5B:1F:57:1E:D1:10:CB:EC:D6:0B:EB:EA:A2:46:59 X509v3 Authority Key Identifier: keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:05:06:01:b3:4e:cd:dc:01:cc:4d:fc:06:4e:f3:3a:19:78: d3:8e:6f:35:c1:b4:1e:a0:b1:f8:b3:3b:ed:3d:8e:6a:22:08: 0b:5c:f5:6b:3f:81:f7:62:6f:93:23:59:e6:a8:54:aa:a7:07: c3:28:fd:64:ff:d8:30:3a:21:ac:e3:15:a8:45:8c:fa:36:fa: 3d:c6:22:21:c7:5a:86:08:42:f6:de:99:1d:a1:c8:42:b4:c3: 4f:ab:fe:87:d8:8f:52:f4:97:bf:58:7a:e9:26:a0:40:b0:ae: e6:2b:b6:58:d7:59:0c:60:dc:8d:7c:5a:51:f1:4d:31:13:4e: 9a:c5:ac:86:89:8f:6b:57:ce:f3:51:fb:4b:84:58:dd:8e:6e: 63:ad:83:8f:7f:be:63:5d:4b:2d:1d:cf:6f:39:5c:53:28:f2: c0:9a:bf:f0:f9:5c:d2:7a:9b:0b:43:e5:6f:87:bb:7f:a8:5d: 71:68:71:90:09:7e:57:43:40:31:16:9e:33:47:40:f8:98:58: 54:70:80:d7:35:e8:91:bd:f1:d0:bd:69:55:ad:5c:22:7d:6b: 26:43:94:13:40:b8:5f:8d:d5:3e:4e:44:5f:cb:29:5a:a6:63: 38:43:f9:5c:4d:b7:3c:3f:a4:f7:4d:1f:55:8e:24:f9:af:0b: 67:09:7b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhEM0FDQ0M2REFB NEM1MThDQjQwHhcNMjUwNjE0MjM0MTIwWhcNMjUwNjIxMjM0MTIwWjAYMRYwFAYD VQQDEw02ODRlMDhhMS1jOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXbjOxbaovuII+2ORRzd1HgyBTuSmXlUrxfzPRzRzi+jseXw+CPzL3KKRC3z s+F1oDdmUkLdmDowNBTOUrPjY1u8kPJ8Te3qj0zlDWq3SWxy3oNtcPewBP2GOVvQ 9S6Hx/hiYBIT/4EMvIrGMicXFqMeWM8JQTanPqZK4GD7Qzn8chf2ga/xkAPRs53v AEWAysj8ctnxDhTfQcd6hzg+Zk0kdS2oarxglGBLtrXE3xZZGpwNsWw1mZius/Hy mX8/Kf7pWYnTwBv+nuLBZkcZbkdcqU2UrpcyNsv2+kXFJlygzdNwuRKFGv3Rufap 0AG4M2jyoWQaeXqnzW2ie3RxqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3PLeMy Wx9XHtEQy+zWC+vqokZZMB8GA1UdIwQYMBaAFGfzfFDKM89PUIV406zMbapMUYy0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE3Ri83NjBFMjI4RTM3 REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venowOVFoWGpUck14dHFreFJq TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfTjhVTW96ejA5UWhYalRyTXh0cWt4UmpMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE3Ri83NjBFMjI4RTM3REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venow OVFoWGpUck14dHFreFJqTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtBQYBs07N3AHMTfwGTvM6GXjTjm81wbQeoLH4szvtPY5qIggLXPVr P4H3Ym+TI1nmqFSqpwfDKP1k/9gwOiGs4xWoRYz6Nvo9xiIhx1qGCEL23pkdochC tMNPq/6H2I9S9Je/WHrpJqBAsK7mK7ZY11kMYNyNfFpR8U0xE06axayGiY9rV87z UftLhFjdjm5jrYOPf75jXUstHc9vOVxTKPLAmr/w+VzSepsLQ+Vvh7t/qF1xaHGQ CX5XQ0AxFp4zR0D4mFhUcIDXNeiRvfHQvWlVrVwifWsmQ5QTQLhfjdU+TkRfyyla pmM4Q/lcTbc8P6T3TR9VjiT5rwtnCXuM -----END CERTIFICATE-----Generated at Sun Jun 15 10:10:16 2025 by rpki-client