$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: 4BXg1FzO+ALZ5d+AyUm+cCCYvYFw8tI+fpRD5a8XiFg= Subject key identifier: D6:F2:09:FD:E4:E6:5C:46:B2:43:20:4D:CD:1C:CA:31:F7:92:75:1D Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0DD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0DD0 Signing time: Mon 30 Jun 2025 18:06:09 +0000 Manifest this update: Mon 30 Jun 2025 18:06:09 +0000 Manifest next update: Mon 07 Jul 2025 18:06:09 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: Z9goNAfrJY66iHFShXBoH0vPPWDOjjv0flXQQ2JhD4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3536 (0xdd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A, serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: Jun 30 18:06:09 2025 GMT Not After : Jul 7 18:06:09 2025 GMT Subject: CN=6862d211-3c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:b3:5a:02:00:f0:e0:dd:b8:0c:3c:5f:3c: 67:1e:84:b8:cc:8a:1b:2c:5e:fa:00:8a:5e:4d:53: e6:60:a2:0d:38:bf:06:4b:9b:57:fa:0f:27:e2:33: c6:db:26:fb:66:d7:88:30:89:c2:7f:52:ee:75:a3: f2:02:f6:ac:2c:b8:ed:f8:27:19:63:86:db:fa:14: ca:ac:d3:ee:f8:5c:60:74:8e:59:88:61:f7:55:d5: d5:65:1a:a1:cd:07:68:ac:2d:2d:42:2e:39:1d:b9: e0:34:c8:12:05:86:72:81:9d:ac:e1:5d:0d:60:fb: 11:ac:96:f4:7d:23:76:da:13:da:e7:0d:bd:86:be: ed:bd:80:91:b4:d9:f3:97:5e:2e:32:d8:c7:d5:8a: ee:c7:a2:34:0f:31:ad:df:43:ae:a0:ef:2d:58:ed: 0d:b7:62:26:5a:74:f4:87:a2:58:e6:ba:74:26:eb: bb:ec:54:1a:2d:6a:d9:fc:4a:66:01:37:e4:32:9d: 2a:41:eb:80:37:af:ef:24:d7:42:d9:39:f9:23:80: b5:fc:2b:e8:52:62:8f:fa:4c:f2:85:d8:51:f4:42: a7:4d:e2:0e:96:09:61:60:1b:8f:2a:ed:a7:f5:2e: 6b:5a:4a:d8:6c:91:d7:32:46:c2:3b:9e:a6:93:f9: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F2:09:FD:E4:E6:5C:46:B2:43:20:4D:CD:1C:CA:31:F7:92:75:1D X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:08:3a:01:56:b9:b3:a5:83:5f:2f:39:c2:3e:e4:cd:4e:46: 8f:c1:34:5f:30:6e:a8:ea:14:e9:4a:bd:ba:60:51:1e:fd:1d: 85:f4:a0:76:86:18:78:6c:d2:f6:56:51:80:e3:69:3d:23:7c: 18:80:e8:ba:ab:4a:ef:33:78:76:6a:ed:ae:43:ec:5f:db:f1: 32:22:67:d9:84:44:f3:ba:18:f3:f9:7e:3f:23:8d:1b:3c:62: e2:3c:17:ab:2e:1e:b7:69:7e:7f:b6:7a:74:43:c0:91:89:c8: b9:08:0e:d9:5e:3a:25:77:cd:59:cb:8c:5e:6b:7c:0a:08:61: a7:c0:36:ca:3c:44:25:a7:cb:66:b5:32:d4:56:34:77:5d:9d: b4:56:7e:a4:49:3d:6e:9e:3a:45:a4:fc:6d:29:ea:f2:77:66: cd:4d:8c:e8:c8:0a:e3:99:1c:86:61:c4:1b:28:0a:d4:53:0d: d0:4c:e6:f8:62:2d:1e:dc:13:91:b5:ec:67:58:c5:47:05:3e: ae:fe:64:7d:04:2b:b3:99:d8:f1:af:24:05:20:43:4e:4f:52: 23:93:1b:41:cb:17:15:d2:31:dd:6a:f4:73:17:6e:56:e7:1a: 6d:82:3b:5f:7d:0e:63:fe:92:04:4f:cd:3e:ac:01:80:b7:29: 7d:8c:5c:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjUwNjMwMTgwNjA5WhcNMjUwNzA3MTgwNjA5WjAYMRYwFAYD VQQDEw02ODYyZDIxMS0zYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwKzWgIA8ODduAw8XzxnHoS4zIobLF76AIpeTVPmYKINOL8GS5tX+g8n4jPG 2yb7ZteIMInCf1LudaPyAvasLLjt+CcZY4bb+hTKrNPu+FxgdI5ZiGH3VdXVZRqh zQdorC0tQi45HbngNMgSBYZygZ2s4V0NYPsRrJb0fSN22hPa5w29hr7tvYCRtNnz l14uMtjH1Yrux6I0DzGt30OuoO8tWO0Nt2ImWnT0h6JY5rp0Juu77FQaLWrZ/Epm ATfkMp0qQeuAN6/vJNdC2Tn5I4C1/CvoUmKP+kzyhdhR9EKnTeIOlglhYBuPKu2n 9S5rWkrYbJHXMkbCO56mk/nAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbyCf3k 5lxGskMgTc0cyjH3knUdMB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCCDoBVrmzpYNfLznCPuTNTkaPwTRfMG6o6hTpSr26YFEe/R2F9KB2 hhh4bNL2VlGA42k9I3wYgOi6q0rvM3h2au2uQ+xf2/EyImfZhETzuhjz+X4/I40b PGLiPBerLh63aX5/tnp0Q8CRici5CA7ZXjold81Zy4xea3wKCGGnwDbKPEQlp8tm tTLUVjR3XZ20Vn6kST1unjpFpPxtKeryd2bNTYzoyArjmRyGYcQbKArUUw3QTOb4 Yi0e3BORtexnWMVHBT6u/mR9BCuzmdjxryQFIENOT1IjkxtByxcV0jHdavRzF25W 5xptgjtffQ5j/pIET80+rAGAtyl9jFw6 -----END CERTIFICATE-----Generated at Tue Jul 1 22:47:10 2025 by rpki-client