$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: 4HDUBER3mIpsDVggkt92JpgX/bqLrp4ZwOFR0md2r6A= Subject key identifier: 8E:22:BB:8E:B1:A6:C0:8C:74:BD:66:DD:3B:5B:5F:34:EB:5A:84:9B Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 0603 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 05FC Signing time: Mon 30 Jun 2025 23:15:56 +0000 Manifest this update: Mon 30 Jun 2025 23:15:56 +0000 Manifest next update: Mon 07 Jul 2025 23:15:56 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: 8sC7adROpcLLHuESpv/LxVfD7+jG6HL5wn6+rnGd+wA=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Jun 30 23:15:56 2025 GMT Not After : Jul 7 23:15:56 2025 GMT Subject: CN=68631aac-90e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:8c:11:f3:dd:e5:c9:f3:a1:13:96:54:f7: 4d:5b:83:0f:5f:dc:56:b8:16:ca:6e:70:9f:1f:14: f0:6e:d9:c0:46:df:4d:ca:94:d3:e9:35:c7:de:a8: 36:6a:89:b2:da:34:4f:93:31:5c:9c:e5:63:3e:7a: f8:53:83:6c:89:f6:c4:c3:e3:75:3e:23:96:de:9a: 54:19:f7:6a:7f:23:be:f7:a5:8f:1c:a5:06:04:d0: fe:06:8f:ca:b6:1b:b6:95:e8:b9:0a:c1:85:aa:ff: c9:0b:89:73:80:9c:01:7e:ed:a7:ca:77:63:55:72: f5:98:c2:c4:63:7d:86:d6:39:b2:70:97:be:da:56: 2a:1a:a1:c4:dc:3f:de:98:91:c9:9d:3c:4e:72:8d: 3f:b1:38:3e:97:f8:ac:8f:6a:f4:f5:2e:93:dd:1f: 4a:6b:05:7f:56:9c:62:73:2f:02:8b:4d:77:96:e9: c4:ca:f5:3d:4b:5e:f2:38:49:38:50:8e:de:39:30: 9a:58:07:3c:e5:f7:6a:21:63:b1:6d:4a:c2:01:27: 33:b3:32:4e:dc:bc:ce:ed:e7:8f:4f:50:8d:bd:0e: a3:23:ac:94:d6:97:0a:b8:94:47:d3:a1:00:52:01: 9d:d3:b2:b6:97:66:4d:d3:37:e4:67:66:a3:ef:ce: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:22:BB:8E:B1:A6:C0:8C:74:BD:66:DD:3B:5B:5F:34:EB:5A:84:9B X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:fd:fc:c9:c8:42:a2:2a:8f:4f:b3:4d:c6:c2:15:5d:62:02: 61:26:ab:de:94:2b:a5:bc:27:f4:b0:63:6f:5c:8a:53:19:52: f3:b0:1d:f7:af:c1:32:90:34:94:34:b8:71:d5:ee:98:da:fe: 8f:c3:42:6a:83:73:0f:ed:68:04:92:f1:1c:3e:23:d2:d4:fa: bd:35:a1:77:09:05:24:f7:22:0a:a8:fa:5c:45:d1:11:33:ae: c5:17:a2:c6:ac:57:c8:dc:6e:0d:33:40:5f:08:7b:7b:84:28: b1:ab:7a:d0:27:dc:fa:e1:55:fd:8a:96:f7:a0:6c:1b:79:9e: a4:a3:ef:7a:42:34:74:35:11:27:0f:f0:d4:3a:c1:1b:65:be: ea:13:da:90:3f:24:fb:c6:a4:f3:12:9f:cc:26:ec:46:3c:ac: bd:ef:6a:f8:35:47:1b:50:e0:07:e7:1d:86:e9:00:c2:44:00: 6a:f2:4d:a0:04:7e:5f:26:46:d2:aa:d5:fb:de:91:c9:36:73: e3:8f:91:bf:4d:75:52:92:4e:9f:9b:ec:ec:fc:b2:33:63:80: 6d:30:6d:58:07:fb:ed:e9:2f:0e:16:88:6c:ce:17:b8:c6:ea: 2c:19:b1:f6:63:3e:e9:0a:50:06:0c:7e:05:62:f7:32:f6:a8: b2:2b:dc:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjUwNjMwMjMxNTU2WhcNMjUwNzA3MjMxNTU2WjAYMRYwFAYD VQQDEw02ODYzMWFhYy05MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVKMEfPd5cnzoROWVPdNW4MPX9xWuBbKbnCfHxTwbtnARt9NypTT6TXH3qg2 aomy2jRPkzFcnOVjPnr4U4NsifbEw+N1PiOW3ppUGfdqfyO+96WPHKUGBND+Bo/K thu2lei5CsGFqv/JC4lzgJwBfu2nyndjVXL1mMLEY32G1jmycJe+2lYqGqHE3D/e mJHJnTxOco0/sTg+l/isj2r09S6T3R9KawV/Vpxicy8Ci013lunEyvU9S17yOEk4 UI7eOTCaWAc85fdqIWOxbUrCASczszJO3LzO7eePT1CNvQ6jI6yU1pcKuJRH06EA UgGd07K2l2ZN0zfkZ2aj785OYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4iu46x psCMdL1m3TtbXzTrWoSbMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA/fzJyEKiKo9Ps03GwhVdYgJhJqvelCulvCf0sGNvXIpTGVLzsB33 r8EykDSUNLhx1e6Y2v6Pw0Jqg3MP7WgEkvEcPiPS1Pq9NaF3CQUk9yIKqPpcRdER M67FF6LGrFfI3G4NM0BfCHt7hCixq3rQJ9z64VX9ipb3oGwbeZ6ko+96QjR0NREn D/DUOsEbZb7qE9qQPyT7xqTzEp/MJuxGPKy972r4NUcbUOAH5x2G6QDCRABq8k2g BH5fJkbSqtX73pHJNnPjj5G/TXVSkk6fm+zs/LIzY4BtMG1YB/vt6S8OFohszhe4 xuosGbH2Yz7pClAGDH4FYvcy9qiyK9zH -----END CERTIFICATE-----Generated at Wed Jul 2 05:06:52 2025 by rpki-client