$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: 3/IB2XTKg81W9lOHH9wZkw6DtJt2TNhOUZ7Zl0lVks8= Subject key identifier: CE:34:DE:01:BF:D9:86:3D:F7:5E:55:2C:89:68:A7:9B:CD:87:E9:C6 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: CC Signing time: Thu 03 Jul 2025 05:54:11 +0000 Manifest this update: Thu 03 Jul 2025 05:54:11 +0000 Manifest next update: Thu 10 Jul 2025 05:54:11 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: Ikk1cuGGKnxpqzyw6PY8hEqfIzPoyM4idfduPVP3glw=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Jul 3 05:54:11 2025 GMT Not After : Jul 10 05:54:11 2025 GMT Subject: CN=68661b03-665d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:d2:46:a5:ce:ce:fa:77:51:71:a4:d0:2c: bb:de:d7:47:ab:a0:34:0c:29:7b:3d:49:db:5b:69: 39:cf:57:bd:a8:66:73:c8:de:b6:a1:05:a3:79:e3: 63:ff:8b:2c:86:04:a6:6e:67:ae:41:61:22:92:b8: 23:73:e6:7e:55:b2:ad:07:aa:e3:ba:80:d5:66:13: 64:16:97:0e:96:bd:e7:21:73:a3:f6:be:7c:5a:c3: 3c:b1:14:53:1b:42:ba:1e:ff:c6:2c:2c:27:54:5f: 84:a0:f7:6b:0c:83:95:94:2e:46:96:27:1a:3e:86: a9:c6:35:13:09:8e:67:c7:40:9b:ee:40:28:26:2e: 20:fb:09:3c:60:fc:7e:15:7f:06:36:82:f8:ed:6c: 78:78:0b:b7:05:44:c2:52:8a:11:28:e6:f0:21:04: 9c:f7:2d:5b:b8:18:c4:ad:2c:ab:bf:1a:f9:64:87: 4b:80:63:12:28:f3:c9:b4:48:ce:38:9e:cd:4c:4a: 0c:54:67:7d:19:bd:2e:5a:34:30:43:2e:bd:98:1b: 3c:1c:df:f7:d7:7d:37:39:a7:2a:27:28:d2:24:87: ed:66:7f:81:a8:14:9e:4a:eb:cf:8e:8f:59:3d:16: 13:8c:2e:ef:0e:3e:4e:41:12:7c:2f:81:ba:78:7d: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:34:DE:01:BF:D9:86:3D:F7:5E:55:2C:89:68:A7:9B:CD:87:E9:C6 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:44:cb:c0:49:b9:31:4d:dd:fb:7a:49:ed:14:50:dd:26:1e: 25:63:79:22:5d:f9:07:e9:3e:5c:92:3f:dd:4e:7a:92:44:2f: 02:b9:99:31:d1:d7:fa:a6:9b:75:d7:73:dd:72:d4:f3:4f:39: 75:cc:82:1d:c6:bb:f6:ca:05:e1:ac:d5:5b:ab:16:f0:ac:f4: 84:82:4d:ca:78:5e:38:2a:c0:50:f6:bd:ae:2d:e8:c6:fd:25: 68:af:f6:c6:43:60:cc:95:2a:e7:54:b5:f3:18:88:1e:72:af: 9e:ea:47:a1:0c:6e:8e:3e:4b:e0:08:9e:ab:1f:cd:d9:13:68: 4b:8e:ff:b7:db:80:1c:40:aa:ca:8e:5a:e8:0d:fc:c2:5c:37: 45:04:28:08:e0:3a:b4:0b:70:17:b9:e7:c9:1f:82:c7:65:52: 6b:b5:73:df:65:09:9f:b0:fe:a5:ea:cc:7e:79:bd:61:8c:22: 61:4f:73:c4:a5:c5:eb:b7:36:4e:d2:8f:9f:d6:35:8d:31:6e: a9:3f:ff:21:d6:51:98:75:03:d6:ff:ca:96:85:82:37:ff:2a: 04:09:43:c8:85:db:d4:08:55:3b:35:05:5a:b2:71:b1:34:a9: 69:ee:84:70:47:45:21:fe:4f:2c:fc:19:a3:a0:09:7f:60:14: c2:f1:e3:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwNzAzMDU1NDExWhcNMjUwNzEwMDU1NDExWjAYMRYwFAYD VQQDEw02ODY2MWIwMy02NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylTSRqXOzvp3UXGk0Cy73tdHq6A0DCl7PUnbW2k5z1e9qGZzyN62oQWjeeNj /4sshgSmbmeuQWEikrgjc+Z+VbKtB6rjuoDVZhNkFpcOlr3nIXOj9r58WsM8sRRT G0K6Hv/GLCwnVF+EoPdrDIOVlC5GlicaPoapxjUTCY5nx0Cb7kAoJi4g+wk8YPx+ FX8GNoL47Wx4eAu3BUTCUooRKObwIQSc9y1buBjErSyrvxr5ZIdLgGMSKPPJtEjO OJ7NTEoMVGd9Gb0uWjQwQy69mBs8HN/31303OacqJyjSJIftZn+BqBSeSuvPjo9Z PRYTjC7vDj5OQRJ8L4G6eH2oLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM403gG/ 2YY9915VLIlop5vNh+nGMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtRMvASbkxTd37ekntFFDdJh4lY3kiXfkH6T5ckj/dTnqSRC8CuZkx 0df6ppt113PdctTzTzl1zIIdxrv2ygXhrNVbqxbwrPSEgk3KeF44KsBQ9r2uLejG /SVor/bGQ2DMlSrnVLXzGIgecq+e6kehDG6OPkvgCJ6rH83ZE2hLjv+324AcQKrK jlroDfzCXDdFBCgI4Dq0C3AXuefJH4LHZVJrtXPfZQmfsP6l6sx+eb1hjCJhT3PE pcXrtzZO0o+f1jWNMW6pP/8h1lGYdQPW/8qWhYI3/yoECUPIhdvUCFU7NQVasnGx NKlp7oRwR0Uh/k8s/BmjoAl/YBTC8ePi -----END CERTIFICATE-----Generated at Fri Jul 4 14:59:51 2025 by rpki-client