$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: wLmyhLa7ywA8tmbHgW/l+sMDSW91ce8CKQSFITTADOM= Subject key identifier: 9D:14:59:CE:06:F5:0D:B1:3B:71:C0:B5:FA:BD:EF:63:3D:05:69:50 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 092A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 0924 Signing time: Wed 02 Jul 2025 20:30:34 +0000 Manifest this update: Wed 02 Jul 2025 20:30:33 +0000 Manifest next update: Wed 09 Jul 2025 20:30:33 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: mg4CcX0gRGhX0xegixguqhobXza85f6bs3IH3EnNduA=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2346 (0x92a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Jul 2 20:30:33 2025 GMT Not After : Jul 9 20:30:33 2025 GMT Subject: CN=686596e9-a329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:26:4b:ac:cf:39:76:32:20:5e:54:92:76: 6e:e4:5f:0c:1e:17:8e:00:13:5d:88:9d:b5:49:ec: 25:9f:42:3e:0c:77:07:75:79:3b:ef:73:e7:28:2d: 4d:75:c2:f2:74:9d:a9:74:97:6d:28:00:5d:de:79: dc:fc:a2:36:a1:54:a5:ec:35:31:68:26:8b:4d:12: 64:8d:3f:e2:78:16:e6:9a:a6:9f:20:f8:20:f8:d5: 93:e2:26:3c:d2:64:b6:20:59:70:4b:f8:fb:d8:df: 0b:8a:d4:a6:39:17:ee:8f:3a:63:27:3c:f2:39:e8: ce:09:77:d1:82:96:c2:d5:27:fa:e4:0f:c9:7a:56: d8:86:c9:6e:3b:1b:6e:9c:0f:02:67:b6:4f:a8:f7: 0d:42:fc:c2:8b:df:90:6a:96:bf:0b:cf:0a:70:d6: 63:d4:0d:ad:09:95:30:2a:9e:fd:d0:22:e3:9b:97: 0f:ce:4e:6b:0a:27:a1:1e:17:13:d2:7c:b8:5d:34: b4:4d:0e:b3:09:6c:ab:39:72:b8:75:b3:69:a0:b1: 64:b0:0f:e3:61:28:e0:7d:64:d2:2f:7e:d1:4d:fc: 12:f3:b5:5f:fb:c8:d0:14:53:8c:2a:8f:04:28:8a: 1c:2f:50:4a:b7:f4:56:04:00:b0:eb:eb:a4:8f:08: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:14:59:CE:06:F5:0D:B1:3B:71:C0:B5:FA:BD:EF:63:3D:05:69:50 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:1c:86:d9:04:26:11:fd:cc:32:ed:5f:e6:62:c6:fb:90:fc: 2e:7a:61:a7:58:e7:84:9c:af:b9:7d:07:79:b0:23:7c:34:a0: 66:a6:8d:46:d0:40:4b:31:40:66:35:d1:3d:b7:4a:a7:d6:29: 6e:33:c0:92:9f:51:74:7e:65:55:6c:6a:e7:10:37:07:91:c1: e8:23:df:00:4f:23:5b:14:78:0d:a8:33:aa:29:b8:3b:4a:80: 2d:46:a9:12:db:84:50:d0:dc:67:8f:a7:cb:4c:7b:5b:7b:a1: 4e:bb:ed:15:ab:a5:96:d5:6f:15:e9:d4:1a:e0:9a:64:6c:a0: 8f:5c:b9:f5:f3:ad:35:20:91:bb:4f:a5:9e:87:f8:fa:45:86: bf:c1:e6:c9:5d:c3:f4:6a:6c:e4:ca:17:eb:63:fa:3d:0b:bd: 66:0d:b0:6f:67:79:91:6b:20:e9:01:5e:94:fb:06:27:60:74: cc:09:1a:10:a9:09:33:5c:00:a5:85:f8:37:a0:d1:e8:35:2f: 10:76:92:67:6b:d6:65:29:de:5e:e9:3e:26:d6:67:51:61:ec: 39:c4:1b:fb:f1:fb:66:4c:72:e2:33:7a:65:a1:dd:a3:53:76: b7:3f:a5:90:7a:e8:91:2f:e6:2b:bc:25:56:9d:a8:79:bd:50: ac:5e:d4:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUwNzAyMjAzMDMzWhcNMjUwNzA5MjAzMDMzWjAYMRYwFAYD VQQDEw02ODY1OTZlOS1hMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kAmS6zPOXYyIF5UknZu5F8MHheOABNdiJ21Sewln0I+DHcHdXk773PnKC1N dcLydJ2pdJdtKABd3nnc/KI2oVSl7DUxaCaLTRJkjT/ieBbmmqafIPgg+NWT4iY8 0mS2IFlwS/j72N8LitSmORfujzpjJzzyOejOCXfRgpbC1Sf65A/JelbYhsluOxtu nA8CZ7ZPqPcNQvzCi9+Qapa/C88KcNZj1A2tCZUwKp790CLjm5cPzk5rCiehHhcT 0ny4XTS0TQ6zCWyrOXK4dbNpoLFksA/jYSjgfWTSL37RTfwS87Vf+8jQFFOMKo8E KIocL1BKt/RWBACw6+ukjwhXJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0UWc4G 9Q2xO3HAtfq972M9BWlQMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjHIbZBCYR/cwy7V/mYsb7kPwuemGnWOeEnK+5fQd5sCN8NKBmpo1G 0EBLMUBmNdE9t0qn1iluM8CSn1F0fmVVbGrnEDcHkcHoI98ATyNbFHgNqDOqKbg7 SoAtRqkS24RQ0Nxnj6fLTHtbe6FOu+0Vq6WW1W8V6dQa4JpkbKCPXLn18601IJG7 T6Weh/j6RYa/webJXcP0amzkyhfrY/o9C71mDbBvZ3mRayDpAV6U+wYnYHTMCRoQ qQkzXAClhfg3oNHoNS8QdpJna9ZlKd5e6T4m1mdRYew5xBv78ftmTHLiM3plod2j U3a3P6WQeuiRL+YrvCVWnah5vVCsXtSy -----END CERTIFICATE-----Generated at Fri Jul 4 11:04:07 2025 by rpki-client