$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: qFMHNhJLeN0R/Oz14eUyPnu96FK92/wGCqjacj02FrY= Subject key identifier: 4B:CF:D7:38:98:C3:4E:48:CB:65:0E:4C:63:EA:49:64:F8:27:DB:AE Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0FC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0FAE Signing time: Wed 18 Jun 2025 17:29:19 +0000 Manifest this update: Wed 18 Jun 2025 17:29:19 +0000 Manifest next update: Wed 25 Jun 2025 17:29:19 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: 2x5pNYrC1doAI1zFvPHnHF4JAeDFWr5INVMK4PN1jZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4035 (0xfc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Jun 18 17:29:19 2025 GMT Not After : Jun 25 17:29:19 2025 GMT Subject: CN=6852f76f-e8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:ca:d2:03:52:37:60:f6:c1:67:ec:8d:d6: 01:96:98:34:f3:81:86:cd:2a:80:19:ec:ad:bb:0f: e8:18:de:d9:6f:21:bb:2f:4e:d4:f2:41:27:00:ab: 76:61:5c:c3:87:bd:98:6d:09:9c:68:54:a0:62:3d: c0:47:ab:33:d8:20:2e:22:f3:0d:5e:a5:a0:d6:85: e6:7e:2c:05:b5:9d:b2:77:7a:6c:5b:99:b7:a7:40: 96:56:b9:a6:9b:ee:6e:1e:40:d9:bc:10:f3:aa:0c: 15:dd:df:da:62:29:83:bc:72:76:cb:47:4b:49:79: 44:30:7e:5c:f3:82:c1:5e:79:d1:1a:f0:67:bf:48: a2:64:d9:b9:bb:a1:f2:15:17:00:26:b0:5e:10:bd: 89:cc:1a:e4:2c:54:fa:e6:28:47:f2:3a:68:48:60: 60:71:40:c0:bb:e2:f9:b8:94:40:3d:36:7c:95:54: e4:30:e6:34:85:9a:07:49:33:b8:a6:c4:79:aa:f4: 6d:ba:56:c6:b7:05:5b:a1:ff:b2:71:d5:73:f8:72: 37:d1:91:0a:1f:5c:56:e5:80:57:26:b3:05:bf:23: e2:eb:ae:6c:ef:85:b8:4f:d1:dc:bc:11:ba:5b:d2: 8b:fd:ee:9d:d4:9c:d0:71:14:12:12:6f:f4:95:5b: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CF:D7:38:98:C3:4E:48:CB:65:0E:4C:63:EA:49:64:F8:27:DB:AE X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:11:12:46:87:d6:da:d1:8a:7a:e1:78:37:ff:ee:a9:99:da: 18:71:09:dc:52:20:bb:32:3c:2b:e9:df:81:45:49:6f:69:0b: 40:5a:3e:a1:1a:4f:95:65:e6:54:1a:f0:60:c2:42:5a:1e:a1: 77:20:7b:ce:c1:8f:f1:6d:28:24:47:75:88:06:ba:7e:4a:22: b0:74:36:85:77:7c:6e:c8:b7:b0:41:0b:ab:fa:2c:7c:24:01: a6:40:c2:f7:b8:43:ca:e1:57:7c:04:33:0e:d1:8c:55:f9:36: 82:6c:0d:ed:ee:8e:72:a7:36:14:93:1f:ab:f8:60:f8:75:e1: c6:39:a5:9b:95:59:ea:7b:71:7b:96:43:d9:be:c5:38:0a:0b: fd:a6:c2:3c:f6:b2:64:22:8f:48:a4:2b:2e:88:7d:89:4e:d3: 2b:b1:d2:a0:cb:60:ef:7c:78:5b:e8:98:6e:65:e8:32:40:8b: d0:16:90:11:75:1c:3f:24:34:31:b2:ff:3e:a0:94:0b:96:35: dc:ad:2a:7d:74:0b:14:38:1a:6d:d2:12:12:56:ab:39:32:61: 91:2f:bb:15:56:35:88:8e:bb:91:fb:8e:63:9c:fc:03:e8:70: dd:0a:fd:9e:3c:d7:d5:74:fb:67:8f:d7:3d:73:03:07:4e:98: f5:f3:76:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUwNjE4MTcyOTE5WhcNMjUwNjI1MTcyOTE5WjAYMRYwFAYD VQQDEw02ODUyZjc2Zi1lOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn/K0gNSN2D2wWfsjdYBlpg084GGzSqAGeytuw/oGN7ZbyG7L07U8kEnAKt2 YVzDh72YbQmcaFSgYj3AR6sz2CAuIvMNXqWg1oXmfiwFtZ2yd3psW5m3p0CWVrmm m+5uHkDZvBDzqgwV3d/aYimDvHJ2y0dLSXlEMH5c84LBXnnRGvBnv0iiZNm5u6Hy FRcAJrBeEL2JzBrkLFT65ihH8jpoSGBgcUDAu+L5uJRAPTZ8lVTkMOY0hZoHSTO4 psR5qvRtulbGtwVbof+ycdVz+HI30ZEKH1xW5YBXJrMFvyPi665s74W4T9HcvBG6 W9KL/e6d1JzQcRQSEm/0lVu5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvP1ziY w05Iy2UOTGPqSWT4J9uuMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWERJGh9ba0Yp64Xg3/+6pmdoYcQncUiC7Mjwr6d+BRUlvaQtAWj6h Gk+VZeZUGvBgwkJaHqF3IHvOwY/xbSgkR3WIBrp+SiKwdDaFd3xuyLewQQur+ix8 JAGmQML3uEPK4Vd8BDMO0YxV+TaCbA3t7o5ypzYUkx+r+GD4deHGOaWblVnqe3F7 lkPZvsU4Cgv9psI89rJkIo9IpCsuiH2JTtMrsdKgy2DvfHhb6JhuZegyQIvQFpAR dRw/JDQxsv8+oJQLljXcrSp9dAsUOBpt0hISVqs5MmGRL7sVVjWIjruR+45jnPwD 6HDdCv2ePNfVdPtnj9c9cwMHTpj183ZY -----END CERTIFICATE-----Generated at Wed Jun 18 23:37:38 2025 by rpki-client