$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: /PDTEcYELm4BwECsFDoVLSyOh0C+NoupotgDp8bua8E= Subject key identifier: 04:F0:9D:3D:15:CD:B5:D4:AD:3D:D3:15:F0:FB:8E:71:75:EE:F9:10 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 1386 Signing time: Wed 02 Jul 2025 17:11:20 +0000 Manifest this update: Wed 02 Jul 2025 17:11:20 +0000 Manifest next update: Wed 09 Jul 2025 17:11:20 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: 2jUw43VNrfik74EWp96yeyvoQmw5nPtbWmtASYV6hTs=) 2: E56024B49A7D11EF99ECF636C4F9AE02.roa (hash: Z+Qa/TRo5h7nk3cyXsljnoh1CPkaDTGA57/oGQq8Hz4=) 3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: 8gjKsYz7WG4pNJyUO7HEfsSkLwblJAwHtH8OBbO9vkU=) 4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5043 (0x13b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Jul 2 17:11:20 2025 GMT Not After : Jul 9 17:11:20 2025 GMT Subject: CN=68656838-dff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:e7:a9:c5:5e:9c:21:66:55:f8:ad:90:67: a1:6e:03:66:3e:38:84:ff:d4:22:3c:a3:0b:d4:8d: 96:bc:18:43:eb:ed:ca:24:53:a0:cd:90:7e:03:da: d2:71:94:d6:19:7d:05:c1:6a:20:05:9d:b2:a8:c4: 2f:0e:f0:8d:a5:e6:2c:d5:8c:7a:cd:c5:0e:c2:f4: ac:f1:6b:92:d3:15:25:24:80:33:d4:ab:7c:b2:1e: 80:0e:71:0e:cd:85:45:21:53:34:1b:57:ee:a2:2f: e5:1a:8e:32:3f:d7:62:a0:10:85:b1:f3:28:54:50: e1:07:fc:b1:11:25:c7:5e:02:c6:0c:a7:1c:a2:4d: 3f:62:30:3e:a1:29:a7:7d:73:70:3a:66:03:b6:bc: 9c:d7:4b:5b:56:59:27:d9:ff:49:15:31:c4:7e:3a: da:12:cc:fe:5b:18:83:3d:a0:44:0d:1a:21:0b:05: ca:ab:0a:66:85:d1:fb:f8:84:b5:e8:2d:43:a1:f2: 78:ba:ec:6a:d2:ab:31:53:bd:65:ef:81:20:31:f1: 5c:91:66:aa:f5:5e:a1:c0:1b:d1:f9:da:64:41:20: 71:9a:08:a7:99:13:09:99:b7:b9:60:ee:82:dc:90: a8:15:de:a9:75:1d:03:d1:b1:1f:84:75:06:6f:75: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F0:9D:3D:15:CD:B5:D4:AD:3D:D3:15:F0:FB:8E:71:75:EE:F9:10 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4e:1e:b1:a5:fb:30:e4:f1:6a:70:76:a6:20:10:b7:57:4e: e6:27:24:6b:92:3b:a1:a3:a2:95:c6:9e:77:92:20:69:d3:92: 64:33:fc:7b:99:21:6d:da:f4:66:a5:fa:a3:f4:68:24:89:b3: a9:5e:3e:77:6e:14:a7:dd:ae:95:bb:7c:85:02:f5:d8:b6:a4: 75:52:42:df:1a:17:8c:3d:35:0a:f2:ae:93:df:bb:c1:26:4a: 7c:8e:a6:84:5b:dc:0c:d4:5a:1e:4a:65:8c:cc:0c:24:29:c9: 65:4e:65:44:cf:30:66:41:eb:04:a2:4f:82:fb:fc:1e:4f:a3: f2:d2:45:38:3a:65:03:55:35:21:6d:76:2c:c3:04:03:cf:9c: 9f:d4:2e:1a:f6:b9:ac:64:58:74:6d:41:4b:53:af:9a:ed:5c: d3:75:1d:d6:ce:89:df:9d:53:80:5f:cd:6e:80:2f:47:ac:f3: a8:e0:f7:bb:07:e9:30:ea:35:27:5a:ca:4d:3e:af:8f:ea:fb: e5:66:35:80:0b:a5:eb:76:36:6f:3f:fb:d5:2e:45:14:c4:17: 00:22:85:ff:0c:54:e5:44:15:09:4d:ef:de:22:b8:ec:11:86: 8e:60:66:9f:24:e4:d7:09:6a:cd:0e:dc:20:39:44:60:d9:cd: 9a:d6:bd:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwNzAyMTcxMTIwWhcNMjUwNzA5MTcxMTIwWjAYMRYwFAYD VQQDEw02ODY1NjgzOC1kZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmjnqcVenCFmVfitkGehbgNmPjiE/9QiPKML1I2WvBhD6+3KJFOgzZB+A9rS cZTWGX0FwWogBZ2yqMQvDvCNpeYs1Yx6zcUOwvSs8WuS0xUlJIAz1Kt8sh6ADnEO zYVFIVM0G1fuoi/lGo4yP9dioBCFsfMoVFDhB/yxESXHXgLGDKccok0/YjA+oSmn fXNwOmYDtryc10tbVlkn2f9JFTHEfjraEsz+WxiDPaBEDRohCwXKqwpmhdH7+IS1 6C1DofJ4uuxq0qsxU71l74EgMfFckWaq9V6hwBvR+dpkQSBxmginmRMJmbe5YO6C 3JCoFd6pdR0D0bEfhHUGb3UnMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATwnT0V zbXUrT3TFfD7jnF17vkQMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKTh6xpfsw5PFqcHamIBC3V07mJyRrkjuho6KVxp53kiBp05JkM/x7 mSFt2vRmpfqj9GgkibOpXj53bhSn3a6Vu3yFAvXYtqR1UkLfGheMPTUK8q6T37vB Jkp8jqaEW9wM1FoeSmWMzAwkKcllTmVEzzBmQesEok+C+/weT6Py0kU4OmUDVTUh bXYswwQDz5yf1C4a9rmsZFh0bUFLU6+a7VzTdR3WzonfnVOAX81ugC9HrPOo4Pe7 B+kw6jUnWspNPq+P6vvlZjWAC6XrdjZvP/vVLkUUxBcAIoX/DFTlRBUJTe/eIrjs EYaOYGafJOTXCWrNDtwgOURg2c2a1r1X -----END CERTIFICATE-----Generated at Thu Jul 3 11:07:10 2025 by rpki-client