$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: 2sF1oOfBnLiD0Od86jaXZ/4UEtQRPLhJ9bYhKSW2B0U= Subject key identifier: 3C:D8:30:BF:F9:F3:2B:A1:AB:4D:20:62:C2:F9:C2:09:8E:A1:04:37 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 22 Signing time: Fri 13 Jun 2025 06:44:15 +0000 Manifest this update: Fri 13 Jun 2025 06:44:14 +0000 Manifest next update: Fri 20 Jun 2025 06:44:14 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: h6Uxcdl7HB9s+9i960jAbc1mJXE42UOc/O5Su+c/r9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Jun 13 06:44:14 2025 GMT Not After : Jun 20 06:44:14 2025 GMT Subject: CN=684bc8bf-04bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:05:3f:a9:22:ee:f6:1c:76:ef:a6:53:95: fc:df:3e:ba:08:1c:6d:51:84:1a:7a:57:06:a7:06: 4d:85:86:71:c3:8d:73:0d:95:be:fb:48:3e:2f:8f: f9:ce:98:e0:9f:74:74:f6:ca:ec:4a:b3:a1:a0:02: 37:a6:6e:eb:6f:4f:24:3b:19:b2:3e:1e:44:69:d5: bd:4d:96:bb:b0:08:55:85:29:a7:05:da:9f:45:94: 22:fc:12:e8:87:21:c5:1c:cd:14:09:85:d5:45:67: 14:fa:f1:b1:74:c1:8e:a1:7b:c0:08:36:80:f0:2a: e6:39:c3:a6:5d:d3:d5:22:f6:14:df:9e:1c:18:68: 2a:4b:e1:9e:0a:4e:bb:c8:55:57:c6:ce:45:2d:53: c7:e2:bf:3f:85:27:6f:16:6d:c3:17:93:8e:2e:fb: 50:e5:43:1e:e1:9a:9a:74:38:b2:6d:37:a3:c4:5e: bd:b0:50:e0:8f:2c:39:79:ae:a3:1f:7c:d4:3f:2e: db:9c:f2:10:18:ae:05:3a:22:42:e7:48:7a:a3:3d: 3a:f5:7e:02:1f:cc:5e:45:22:8c:af:1e:10:8c:cd: 05:19:fe:26:68:af:53:e4:6b:d0:58:f8:f2:13:0d: e2:c0:ec:24:6f:b7:1e:7d:2a:5c:fe:2c:03:a8:a6: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:30:BF:F9:F3:2B:A1:AB:4D:20:62:C2:F9:C2:09:8E:A1:04:37 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:23:0a:bb:80:e7:33:e8:bf:ee:b9:6a:3c:6f:2d:73:ed:13: a2:1d:9b:e2:ce:39:3d:2c:c5:ca:56:8a:7c:20:c8:7b:91:2f: e3:c3:1f:8e:e0:21:8b:8d:6c:a7:75:03:cd:97:b9:35:3e:41: a4:5d:6f:4b:b5:a6:57:4a:c9:9a:3d:50:c1:3b:a9:db:5e:7f: 3b:0e:c9:2f:b1:95:61:52:fe:1e:c9:2c:47:38:a7:ab:c0:94: c6:45:e0:93:24:3d:10:74:3a:61:74:aa:98:46:8f:cf:fa:f9: 00:7a:8e:9e:46:ef:88:18:5b:64:df:0b:84:36:8c:8f:29:16: b5:92:22:b9:c7:e9:c4:3d:2b:c9:0c:bb:ab:73:d7:ab:d0:b4: 86:1d:95:42:25:c7:5c:86:a1:86:c1:ff:c0:51:57:7b:48:ca: 80:60:e6:21:be:be:c6:1a:5b:ad:c3:08:2e:a8:27:cd:9d:b4: c5:f2:ee:e2:90:ad:60:01:3a:ee:87:1e:40:9f:46:a0:2e:5d: 1f:33:4c:75:f1:f1:e0:2c:6c:5e:1b:03:56:e0:3d:80:c0:cc: 76:6e:23:91:bb:fd:be:81:7c:c7:5d:51:28:18:81:af:0d:91: af:ab:88:31:93:d8:7d:48:55:97:25:9a:08:f0:84:6e:67:e0: 5c:e2:bb:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTA2MTMwNjQ0MTRaFw0yNTA2MjAwNjQ0MTRaMBgxFjAUBgNV BAMTDTY4NGJjOGJmLTA0YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL6QU/qSLu9hx276ZTlfzfProIHG1RhBp6VwanBk2FhnHDjXMNlb77SD4vj/nO mOCfdHT2yuxKs6GgAjembutvTyQ7GbI+HkRp1b1NlruwCFWFKacF2p9FlCL8EuiH IcUczRQJhdVFZxT68bF0wY6he8AINoDwKuY5w6Zd09Ui9hTfnhwYaCpL4Z4KTrvI VVfGzkUtU8fivz+FJ28WbcMXk44u+1DlQx7hmpp0OLJtN6PEXr2wUOCPLDl5rqMf fNQ/Ltuc8hAYrgU6IkLnSHqjPTr1fgIfzF5FIoyvHhCMzQUZ/iZor1Pka9BY+PIT DeLA7CRvtx59Klz+LAOoptCtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPNgwv/nz K6GrTSBiwvnCCY6hBDcwHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEcjCruA5zPov+65ajxvLXPtE6Idm+LOOT0sxcpWinwgyHuRL+PDH47g IYuNbKd1A82XuTU+QaRdb0u1pldKyZo9UME7qdtefzsOyS+xlWFS/h7JLEc4p6vA lMZF4JMkPRB0OmF0qphGj8/6+QB6jp5G74gYW2TfC4Q2jI8pFrWSIrnH6cQ9K8kM u6tz16vQtIYdlUIlx1yGoYbB/8BRV3tIyoBg5iG+vsYaW63DCC6oJ82dtMXy7uKQ rWABOu6HHkCfRqAuXR8zTHXx8eAsbF4bA1bgPYDAzHZuI5G7/b6BfMddUSgYga8N ka+riDGT2H1IVZclmgjwhG5n4FziuwE= -----END CERTIFICATE-----Generated at Sun Jun 15 04:50:20 2025 by rpki-client