$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: +aVhe9wTbYi0MyzBDyRZPSWks1pd6Qw54WZchuFBFwQ= Subject key identifier: BC:10:00:74:56:CC:A4:B1:5A:90:5C:76:A0:99:F8:68:5C:7E:F5:CD Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 43 Signing time: Fri 13 Jun 2025 06:21:03 +0000 Manifest this update: Fri 13 Jun 2025 06:21:02 +0000 Manifest next update: Fri 20 Jun 2025 06:21:02 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: GGmwYcmyAe7+6g5GzNFilK8NpTjJw+LObMXNcaOhO9U=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: h0Bd3mrZsqytRvgmEj0DxUL66b35/lpEECIlTQlJZwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Jun 13 06:21:02 2025 GMT Not After : Jun 20 06:21:02 2025 GMT Subject: CN=684bc34f-d0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:30:12:d7:31:42:61:38:5c:6c:6d:0a:9d: e9:ef:40:d7:8a:89:eb:4a:ac:cf:f0:cb:4b:ef:a1: dd:c7:44:0f:38:6c:e9:9a:bc:22:10:68:32:b6:70: d1:e2:60:73:ac:2e:ba:74:ba:1e:ac:f8:e7:c4:67: 52:5e:3b:52:d9:f1:38:55:ef:49:00:ad:75:17:78: 56:fe:fc:5b:69:2d:a4:9c:9e:15:5a:cc:94:a8:44: 60:6b:ce:4c:3c:af:35:5d:51:cd:b0:3a:17:f6:8d: a8:29:f6:fc:c3:85:71:45:f7:94:47:4b:c6:57:d9: a4:ee:54:83:18:33:a6:0f:18:52:b8:dd:72:f2:80: 02:c4:b3:47:a3:91:45:60:fa:96:c3:99:ad:41:92: 10:3f:51:a0:6a:a5:9b:1c:b5:23:75:e8:14:68:cc: 1b:4d:9e:9b:be:ef:c9:af:3f:20:25:50:1a:78:c1: b7:bb:95:91:2c:9c:e5:10:aa:dc:38:3e:37:2d:87: 04:a7:ad:5b:91:52:fc:e6:cc:9c:ec:ce:79:5a:4c: d9:1e:2c:a9:88:5e:fe:14:eb:c8:7c:f2:ab:d6:f2: 71:03:6e:0c:4f:9a:cc:89:9c:9d:a6:d9:48:0c:15: 63:41:e9:79:44:9f:76:c3:cf:f4:18:73:e7:88:d7: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:10:00:74:56:CC:A4:B1:5A:90:5C:76:A0:99:F8:68:5C:7E:F5:CD X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:45:4d:62:44:1b:5c:d7:36:0a:ed:13:24:d7:e3:bb:d5:e7: 38:fa:d0:a6:f2:e4:93:42:12:22:dc:d0:46:21:4f:6c:bf:2b: 2a:38:85:62:9b:70:55:01:73:c0:e7:7a:ea:7c:21:a4:6b:c2: ff:8d:3b:26:4c:ba:a1:c3:d0:d6:c5:9e:03:4a:ea:15:56:d4: 19:dd:09:8c:1d:6c:9f:e8:d1:9c:cb:09:71:09:8d:f8:50:c5: cd:56:fb:5d:b0:45:ae:1b:30:0a:fe:35:86:1c:67:2b:06:63: e9:7d:10:10:4a:e1:9e:96:ee:35:4e:96:3f:2b:e7:19:51:4d: 34:a7:cc:18:eb:f6:72:53:fe:ee:d1:c3:be:71:68:a1:f4:8e: 6e:87:c7:40:83:17:a6:7e:80:3d:b0:fb:6c:26:62:d5:8d:2d: 78:00:9c:88:9b:a3:82:70:84:f7:0b:a3:e8:a2:22:72:09:38: d7:6b:1f:4a:f7:1a:e1:3f:e0:bb:49:a0:f9:ed:15:6b:21:54: 46:ea:9a:d7:f0:1a:7a:48:de:a7:b1:c5:ce:1c:24:a8:a4:c7: 10:14:47:1e:15:f3:06:a5:5b:c1:0a:e0:7d:80:20:65:d9:a9: a2:2d:d9:d7:11:96:ac:e3:8b:ac:02:8e:e3:07:32:29:ed:f3: 70:c5:94:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUMzMTExMC8GA1UEBRMoNjdENzlDM0IxMTE2RDM2RkI5RTE3MUQ2NjU4RjhGNDNC NTNDNzJGQTAeFw0yNTA2MTMwNjIxMDJaFw0yNTA2MjAwNjIxMDJaMBgxFjAUBgNV BAMTDTY4NGJjMzRmLWQwZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtTTAS1zFCYThcbG0KnenvQNeKietKrM/wy0vvod3HRA84bOmavCIQaDK2cNHi YHOsLrp0uh6s+OfEZ1JeO1LZ8ThV70kArXUXeFb+/FtpLaScnhVazJSoRGBrzkw8 rzVdUc2wOhf2jagp9vzDhXFF95RHS8ZX2aTuVIMYM6YPGFK43XLygALEs0ejkUVg +pbDma1BkhA/UaBqpZsctSN16BRozBtNnpu+78mvPyAlUBp4wbe7lZEsnOUQqtw4 PjcthwSnrVuRUvzmzJzsznlaTNkeLKmIXv4U68h88qvW8nEDbgxPmsyJnJ2m2UgM FWNB6XlEn3bDz/QYc+eI18zJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvBAAdFbM pLFakFx2oJn4aFx+9c0wHwYDVR0jBBgwFoAUZ9ecOxEW02+54XHWZY+PQ7U8cvow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQzMxLzNDRjUzNjIyRTRB NDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjllY094RVcwMi01NFhIV1pZLVBRN1U4Y3ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QzMxLzNDRjUzNjIyRTRBNDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDIt NTRYSFdaWS1QUTdVOGN2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHFFTWJEG1zXNgrtEyTX47vV5zj60Kby5JNCEiLc0EYhT2y/Kyo4hWKb cFUBc8Dneup8IaRrwv+NOyZMuqHD0NbFngNK6hVW1BndCYwdbJ/o0ZzLCXEJjfhQ xc1W+12wRa4bMAr+NYYcZysGY+l9EBBK4Z6W7jVOlj8r5xlRTTSnzBjr9nJT/u7R w75xaKH0jm6Hx0CDF6Z+gD2w+2wmYtWNLXgAnIibo4JwhPcLo+iiInIJONdrH0r3 GuE/4LtJoPntFWshVEbqmtfwGnpI3qexxc4cJKikxxAURx4V8walW8EK4H2AIGXZ qaIt2dcRlqzji6wCjuMHMint83DFlLs= -----END CERTIFICATE-----Generated at Sat Jun 14 17:43:27 2025 by rpki-client