$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: SBzUn+zhlEIw8frqhD/ACf4GJmjt7kPa5lzjZSWI9k0= Subject key identifier: DC:4D:99:59:7A:58:8E:11:C2:3E:89:2D:CD:06:20:1E:F4:70:64:74 Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 01EC Signing time: Sun 29 Jun 2025 01:47:13 +0000 Manifest this update: Sun 29 Jun 2025 01:47:12 +0000 Manifest next update: Sun 06 Jul 2025 01:47:12 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: bniLJSWmqcwCXBhsw3/yHxD59dBDxNPaNQp0q5/Nynk=) 2: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: pgI9v9tBw4JvLouCdhmI8EFq53pssTwtUNiYfyBQjoo=) 3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: 9HMzFEkbx1T0ynaVX6uHWObWXzc9PFPAUjEuMjKZdqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Jun 29 01:47:12 2025 GMT Not After : Jul 6 01:47:12 2025 GMT Subject: CN=68609b20-b44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:af:34:f7:0c:60:64:57:ed:df:84:c5:2d: a3:76:a5:94:23:be:86:e4:e3:40:43:3f:72:28:74: 28:d4:df:07:0b:fb:bf:83:47:82:ac:38:de:db:eb: 4b:bb:1d:6e:a0:7a:6e:8c:b9:0a:56:f9:f8:be:81: ce:1f:ff:18:20:c6:f8:84:51:ba:9b:cb:41:ac:53: 0c:19:59:13:89:5e:22:2e:7e:0b:26:98:32:20:fb: 80:71:ea:e7:5e:f2:96:ec:38:63:65:d5:c2:f8:17: d0:b2:eb:5c:38:28:d0:97:21:1a:21:10:64:dc:e4: e1:24:ab:f6:9d:61:ec:01:0d:af:96:65:33:87:51: bd:fa:c4:79:77:bc:0e:09:a4:7a:77:be:13:d8:c5: 31:05:7a:b7:71:ce:68:e8:35:58:86:42:4a:d2:eb: e3:82:82:8f:1e:61:ac:93:5f:21:a9:a1:8f:db:89: 41:54:37:a6:20:30:1f:22:8f:73:df:d6:7b:5d:d9: 52:7d:60:5c:e2:36:8c:ac:43:74:8e:80:fa:c4:61: 97:18:69:c4:05:5f:04:95:59:2d:d1:f0:ac:f6:19: 2e:3d:ee:1c:23:14:f6:a9:03:6e:8d:73:fc:8a:58: 9b:d6:a3:f2:d9:42:bb:60:09:ee:d1:af:ce:8f:10: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4D:99:59:7A:58:8E:11:C2:3E:89:2D:CD:06:20:1E:F4:70:64:74 X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:0e:65:1c:60:e6:eb:d7:5b:cc:3f:30:65:08:3c:24:53:87: 4b:00:e5:2d:44:89:92:99:09:85:79:86:21:d1:dd:69:c0:b5: d6:e8:43:c7:a7:2a:9d:8b:c3:aa:8d:6b:1d:ff:19:bd:9a:06: 97:e8:f6:23:e7:35:9c:50:18:b1:82:f5:0d:d1:dd:e1:3c:56: 1a:21:f1:8e:3e:a7:3a:f2:78:89:60:b4:98:c1:e2:aa:df:3d: 7e:55:d3:3e:e8:04:30:0f:58:86:7d:1e:10:fa:58:86:6f:11: 13:ea:1b:3f:7a:95:b2:dc:40:d4:a4:aa:01:9d:74:fc:8a:02: 1c:ca:0c:d2:2c:b9:65:fd:8e:62:05:a4:f4:d2:3e:49:7a:4f: 20:85:97:3a:19:10:a5:85:71:b3:f9:b8:c2:cf:ce:0d:98:ba: ff:de:59:09:d8:f7:96:11:de:52:d7:b4:f3:3c:9e:04:11:7b: b1:ca:71:23:a8:35:6d:05:20:c0:e9:ff:f7:1c:76:b8:d8:d1: b7:bf:cb:49:f8:17:a9:dd:54:b1:de:6b:6a:84:65:87:27:e8: a1:5b:21:5b:ff:5a:26:99:f6:02:e3:62:90:6c:cb:c6:7f:c2: d7:63:4d:db:9f:98:37:4e:31:7d:99:65:0b:36:75:68:59:0e: b1:d9:aa:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjUwNjI5MDE0NzEyWhcNMjUwNzA2MDE0NzEyWjAYMRYwFAYD VQQDEw02ODYwOWIyMC1iNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRCvNPcMYGRX7d+ExS2jdqWUI76G5ONAQz9yKHQo1N8HC/u/g0eCrDje2+tL ux1uoHpujLkKVvn4voHOH/8YIMb4hFG6m8tBrFMMGVkTiV4iLn4LJpgyIPuAcern XvKW7DhjZdXC+BfQsutcOCjQlyEaIRBk3OThJKv2nWHsAQ2vlmUzh1G9+sR5d7wO CaR6d74T2MUxBXq3cc5o6DVYhkJK0uvjgoKPHmGsk18hqaGP24lBVDemIDAfIo9z 39Z7XdlSfWBc4jaMrEN0joD6xGGXGGnEBV8ElVkt0fCs9hkuPe4cIxT2qQNujXP8 ilib1qPy2UK7YAnu0a/OjxB9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxNmVl6 WI4Rwj6JLc0GIB70cGR0MB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEDmUcYObr11vMPzBlCDwkU4dLAOUtRImSmQmFeYYh0d1pwLXW6EPH pyqdi8OqjWsd/xm9mgaX6PYj5zWcUBixgvUN0d3hPFYaIfGOPqc68niJYLSYweKq 3z1+VdM+6AQwD1iGfR4Q+liGbxET6hs/epWy3EDUpKoBnXT8igIcygzSLLll/Y5i BaT00j5Jek8ghZc6GRClhXGz+bjCz84NmLr/3lkJ2PeWEd5S17TzPJ4EEXuxynEj qDVtBSDA6f/3HHa42NG3v8tJ+Bep3VSx3mtqhGWHJ+ihWyFb/1ommfYC42KQbMvG f8LXY03bn5g3TjF9mWULNnVoWQ6x2aqU -----END CERTIFICATE-----Generated at Mon Jun 30 19:29:15 2025 by rpki-client