$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json) Hash identifier: 2HHKg/zu4PENHkM9LJ5mYw7B/YOvASO3zV1VDECowy8= Subject key identifier: 7B:D4:29:DB:CD:1A:F6:C5:BE:E5:5F:E8:93:2D:90:4F:8C:B5:77:07 Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft Manifest number: 039C Signing time: Sun 15 Jun 2025 00:30:49 +0000 Manifest this update: Sun 15 Jun 2025 00:30:49 +0000 Manifest next update: Sun 22 Jun 2025 00:30:49 +0000 Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: Z2wnReReNYxuhatWDmBxLweKILr+jWgORNDg8XqEnJs=) 2: 1E2EB8D09F3811ECBB84BD76C4F9AE02.roa (hash: 1WpEdRwcGN3vtWhbe0YafVKHoyPb3PH+roug1Q45T04=) 3: 1F26C9129F3811ECBB84BD76C4F9AE02.roa (hash: MGQuIf7b8pEJs0FKmZr0E0D/ZU/TElOpmNPZAx/GWO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Validity Not Before: Jun 15 00:30:49 2025 GMT Not After : Jun 22 00:30:49 2025 GMT Subject: CN=684e1439-b514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:93:c5:64:50:4c:17:a8:dc:df:5f:5e:a1:b7: 9e:47:41:fc:aa:30:ef:5c:99:03:8c:e7:e2:0f:31: 46:3a:bc:58:16:d7:ce:1e:4c:fa:31:a0:8a:73:ca: 58:f5:fc:e9:7c:07:63:b5:1d:6c:05:2e:95:ba:70: ae:81:6b:df:3b:e7:8b:73:be:2a:95:7c:01:24:99: 37:7b:a4:85:98:71:25:26:9b:03:e3:11:39:d7:33: fb:3a:35:70:2d:9a:c9:43:5b:d2:4f:33:8f:f2:3f: a6:2b:0e:0f:b2:2f:99:8e:ce:9e:66:be:5f:04:e0: 9b:95:02:24:dd:03:f6:ee:fe:86:c9:b6:50:c6:25: f4:67:04:b0:2c:02:e2:b4:b4:5b:75:2b:60:ba:21: 3e:3e:1f:a4:8d:1b:af:76:ab:99:14:8a:53:86:1a: 69:57:88:36:9e:04:05:e4:a5:b4:11:f6:fa:0a:4d: 08:99:23:60:2a:c1:a9:79:18:f8:62:4c:44:78:f8: 38:e9:aa:01:5c:6b:7e:aa:bd:1b:84:cd:b5:8f:a0: 01:54:7e:56:6e:5f:7e:c1:01:d1:9d:ef:37:f0:ea: a1:12:fb:b8:dc:ac:7e:bd:59:e1:5e:74:e1:f0:b6: 79:ce:30:0a:f1:98:67:8c:5f:4e:89:b7:90:0b:51: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D4:29:DB:CD:1A:F6:C5:BE:E5:5F:E8:93:2D:90:4F:8C:B5:77:07 X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:10:af:15:fc:7a:69:7b:34:95:6f:b7:3a:5b:e0:fb:0d:bf: db:56:0e:b1:15:59:13:9a:94:c1:10:7f:61:a2:46:7b:3b:a7: 39:6e:c0:e8:69:35:5b:0d:39:a9:22:f9:d7:9f:da:5a:41:5b: 3d:9c:df:7b:b2:32:55:95:46:eb:f0:3c:87:a8:f4:96:07:e4: 47:ec:34:dc:d1:c8:bf:3f:97:c7:55:41:1a:42:0f:3c:c7:e0: 9f:25:2c:c1:dc:a6:f2:a7:fc:3c:ab:10:97:a2:1e:f2:5c:9b: 87:d0:36:4b:bc:26:d5:41:5f:a9:f7:f6:66:5e:89:fa:b9:3c: c9:9f:b6:09:e4:29:b8:0b:3e:57:a5:fc:f3:2a:6f:2c:a1:b3: 9b:e2:b5:2f:24:5b:10:73:bd:02:97:1b:9d:54:fa:ac:77:64: 20:81:78:20:56:70:de:6f:20:27:e1:a4:e6:e6:8e:13:e1:57: f6:3d:62:ea:8b:2a:d8:e5:b5:6c:78:07:6e:76:9f:9f:15:d1: 9a:0c:73:f5:07:1c:c9:a6:5c:73:fa:6a:89:ce:07:c6:2a:bf: 52:08:83:23:00:a7:cf:39:92:61:d3:5b:f4:6c:26:05:d4:29: de:fe:f8:60:82:4d:29:6e:79:a6:32:f6:63:5f:1b:7b:2d:7d: f6:90:07:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjUwNjE1MDAzMDQ5WhcNMjUwNjIyMDAzMDQ5WjAYMRYwFAYD VQQDEw02ODRlMTQzOS1iNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JPFZFBMF6jc319eobeeR0H8qjDvXJkDjOfiDzFGOrxYFtfOHkz6MaCKc8pY 9fzpfAdjtR1sBS6VunCugWvfO+eLc74qlXwBJJk3e6SFmHElJpsD4xE51zP7OjVw LZrJQ1vSTzOP8j+mKw4Psi+Zjs6eZr5fBOCblQIk3QP27v6GybZQxiX0ZwSwLALi tLRbdStguiE+Ph+kjRuvdquZFIpThhppV4g2ngQF5KW0Efb6Ck0ImSNgKsGpeRj4 YkxEePg46aoBXGt+qr0bhM21j6ABVH5Wbl9+wQHRne838OqhEvu43Kx+vVnhXnTh 8LZ5zjAK8ZhnjF9OibeQC1HUHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvUKdvN GvbFvuVf6JMtkE+MtXcHMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzA0NS9CRkFEQzYxMDlGMjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtr bU50VmNEWkdNRnlqZm5UN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiEK8V/HppezSVb7c6W+D7Db/bVg6xFVkTmpTBEH9hokZ7O6c5bsDo aTVbDTmpIvnXn9paQVs9nN97sjJVlUbr8DyHqPSWB+RH7DTc0ci/P5fHVUEaQg88 x+CfJSzB3Kbyp/w8qxCXoh7yXJuH0DZLvCbVQV+p9/ZmXon6uTzJn7YJ5Cm4Cz5X pfzzKm8sobOb4rUvJFsQc70ClxudVPqsd2QggXggVnDebyAn4aTm5o4T4Vf2PWLq iyrY5bVseAdudp+fFdGaDHP1BxzJplxz+mqJzgfGKr9SCIMjAKfPOZJh01v0bCYF 1Cne/vhggk0pbnmmMvZjXxt7LX32kAdb -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:24 2025 by rpki-client