$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: 4+eLdCASUtqPOr4wPyMvqir7911SzgiXIKMwKi0ZTU0= Subject key identifier: 11:A3:C6:3D:A4:D2:B8:5A:39:E9:B5:CB:5B:7D:BC:CC:EF:89:71:78 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C3E Signing time: Thu 12 Jun 2025 18:20:58 +0000 Manifest this update: Thu 12 Jun 2025 18:20:57 +0000 Manifest next update: Thu 19 Jun 2025 18:20:57 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: 2a/uygSITV7lHYsiau31XtO9iUsn29BjNmI0LJyZW+4=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: x9X6wGJ3mbVyR78mjvIljIMszM7hIhEyNVBMIZ+VGz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Jun 12 18:20:57 2025 GMT Not After : Jun 19 18:20:57 2025 GMT Subject: CN=684b1a8a-0db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:76:9b:76:7c:cb:0b:36:70:5f:db:24:cc: ff:0c:67:dc:62:8d:15:34:05:d9:6b:09:10:77:6f: 62:23:40:e7:7a:9e:32:9b:ae:44:1e:c0:92:99:49: 50:21:76:30:6a:6d:1e:10:78:59:6e:49:d6:ce:af: 89:34:ee:94:51:fd:57:2b:e2:e3:e3:67:5f:c6:6e: 7d:12:4a:e9:ff:98:2c:7e:b1:9e:e1:83:eb:3a:35: 1c:72:ae:5e:33:72:42:f9:87:15:75:f7:b2:69:9a: 3f:71:d0:76:ed:12:ca:18:94:8e:1d:e7:4f:cb:15: f5:81:50:fb:b8:29:56:eb:9d:96:f1:0a:31:a8:fe: 86:43:4d:6c:69:c1:20:9f:38:c5:a2:29:97:0a:95: 98:2a:a0:93:ba:6a:be:f2:7c:1e:b7:47:6d:5a:1c: 56:88:e2:7c:b6:04:57:8a:23:26:06:d1:a4:47:fb: f8:ce:3e:3e:41:8f:7a:ae:10:b5:9e:fc:82:1f:84: b8:39:6a:12:b4:79:7c:f9:21:f3:88:9c:30:f2:67: d5:71:ae:04:12:85:e8:b3:6b:a8:5b:a2:cd:e2:58: 63:7e:f0:f1:55:cf:33:fd:b1:c5:88:6a:9f:b8:3d: 53:0c:ae:31:c7:b1:45:f5:d4:50:be:f7:2b:ff:41: 82:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:C6:3D:A4:D2:B8:5A:39:E9:B5:CB:5B:7D:BC:CC:EF:89:71:78 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d1:fe:16:8a:1d:83:2b:dc:44:94:d7:ae:7d:dc:df:53:f8: 18:ad:97:67:f9:64:8b:21:f7:c4:f5:81:c2:c7:55:e7:e1:38: 03:fb:4f:d7:a2:c1:98:f5:a0:69:a1:db:44:82:ab:23:03:f1: 2e:a9:a2:d7:c3:0a:6c:de:a3:e0:52:3f:90:da:6c:7b:b9:b5: 86:b0:83:b3:21:0b:49:21:b4:33:7a:d1:c3:0b:39:50:e4:a6: 24:ea:a4:b6:0a:a8:1a:bd:0e:10:21:c3:7e:0c:80:ae:db:8e: cb:d7:2c:52:c8:d7:72:27:35:43:3f:d0:87:86:ba:93:20:7b: d1:5e:6d:2e:a4:1d:4a:fb:4c:16:48:84:0f:b2:41:c8:70:27: 0b:bc:55:a9:03:2d:52:63:12:2b:21:81:ef:01:b0:8f:e6:08: f6:c8:98:0f:ff:9f:95:0a:33:0a:42:8f:45:0a:5a:b4:9e:df: 07:5e:f8:55:4d:b6:85:c1:a6:8a:73:11:1c:59:53:25:82:18: 94:b6:bb:f7:82:c7:47:6b:3c:12:5e:c8:2a:0b:a4:52:d4:51: 36:5c:ce:37:c6:86:72:cd:15:d3:e4:af:8f:31:f1:f3:4f:93: 78:42:09:7e:60:98:65:f6:67:be:61:29:e6:18:6a:6d:92:a1: d8:b4:30:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUwNjEyMTgyMDU3WhcNMjUwNjE5MTgyMDU3WjAYMRYwFAYD VQQDEw02ODRiMWE4YS0wZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfx2m3Z8yws2cF/bJMz/DGfcYo0VNAXZawkQd29iI0Dnep4ym65EHsCSmUlQ IXYwam0eEHhZbknWzq+JNO6UUf1XK+Lj42dfxm59Ekrp/5gsfrGe4YPrOjUccq5e M3JC+YcVdfeyaZo/cdB27RLKGJSOHedPyxX1gVD7uClW652W8QoxqP6GQ01sacEg nzjFoimXCpWYKqCTumq+8nwet0dtWhxWiOJ8tgRXiiMmBtGkR/v4zj4+QY96rhC1 nvyCH4S4OWoStHl8+SHziJww8mfVca4EEoXos2uoW6LN4lhjfvDxVc8z/bHFiGqf uD1TDK4xx7FF9dRQvvcr/0GC9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGjxj2k 0rhaOem1y1t9vMzviXF4MB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC80f4Wih2DK9xElNeufdzfU/gYrZdn+WSLIffE9YHCx1Xn4TgD+0/X osGY9aBpodtEgqsjA/EuqaLXwwps3qPgUj+Q2mx7ubWGsIOzIQtJIbQzetHDCzlQ 5KYk6qS2CqgavQ4QIcN+DICu247L1yxSyNdyJzVDP9CHhrqTIHvRXm0upB1K+0wW SIQPskHIcCcLvFWpAy1SYxIrIYHvAbCP5gj2yJgP/5+VCjMKQo9FClq0nt8HXvhV TbaFwaaKcxEcWVMlghiUtrv3gsdHazwSXsgqC6RS1FE2XM43xoZyzRXT5K+PMfHz T5N4Qgl+YJhl9me+YSnmGGptkqHYtDCa -----END CERTIFICATE-----Generated at Sat Jun 14 17:18:24 2025 by rpki-client