$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: rU00gOuKZ1ZrGDR8oJlJ6pI8k3VPWIh1KojaPfS2dcg= Subject key identifier: 9E:9A:07:6C:82:45:DF:56:5F:13:EE:67:DA:AC:B1:7B:F5:74:37:5D Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 019C Signing time: Tue 01 Jul 2025 03:54:06 +0000 Manifest this update: Tue 01 Jul 2025 03:54:06 +0000 Manifest next update: Tue 08 Jul 2025 03:54:06 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: uuqqCxI7onmzB4R9bzETqWRfU9xXIDmpK2uijacHt4Q=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: wIfWv8k11m2nJjvD9OZyvuvwJHOiHTaCFNkOK+76jZw=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 8Baf5eHeRnNrGmSSDb+55e+ExZ2m5tnzgHIxbW3wB58=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: /e5dKdsxY7i/S5RsJcqyRRAjOevxOXqA06J4ijaW9S8=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: 1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Jul 1 03:54:06 2025 GMT Not After : Jul 8 03:54:06 2025 GMT Subject: CN=68635bde-2b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:bd:6b:28:ab:4b:72:cb:7f:52:a4:19:62: c3:f5:6b:bc:9f:2c:af:c5:0c:50:26:38:ad:41:5b: b2:15:1f:d9:3c:6c:dd:87:c8:ab:3d:5f:22:af:51: f5:99:30:ba:16:3b:62:97:a2:73:3e:32:7b:43:b1: d6:40:e0:2b:ba:41:24:75:00:5a:8f:ed:da:7b:16: 1d:4e:2e:83:48:91:07:68:9f:84:7b:03:38:84:c1: d1:24:7d:4e:3c:96:cc:bf:c9:ed:0b:16:d5:64:22: ef:cd:e3:ed:2f:04:a8:3d:39:f9:61:99:37:b9:ea: a1:87:54:ff:56:7c:3c:4c:86:03:ee:7a:79:35:99: 06:bf:31:74:31:69:27:14:31:9f:ac:a8:aa:26:57: 22:1e:07:f5:fe:9f:7c:e6:05:9a:49:c7:d1:0d:a6: c3:bf:7c:02:89:51:0b:17:22:d6:69:2d:9a:fc:94: ee:19:d6:29:34:80:5c:bd:1c:f8:4a:0e:7f:83:35: 44:6b:b9:ee:e9:66:ac:92:7d:23:07:35:e8:b8:7b: eb:39:58:6c:03:2d:07:dc:37:0a:f5:be:2f:68:87: e2:d5:b4:1b:a7:ce:86:e2:bc:46:86:76:12:42:a5: cf:11:18:ab:24:10:aa:2e:5c:06:f6:b8:2a:27:74: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9A:07:6C:82:45:DF:56:5F:13:EE:67:DA:AC:B1:7B:F5:74:37:5D X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7d:0d:82:9d:3d:42:f0:50:63:23:6c:ba:38:0a:b0:30:9c: 0c:ce:6f:84:fa:67:cf:87:0b:c2:4e:1a:54:4f:24:92:3f:ef: 48:1a:4f:3f:aa:60:aa:9c:e2:15:8f:78:d8:83:6b:81:9d:b8: a6:76:e5:a6:92:83:92:fa:0c:5c:7e:91:d5:fd:6a:5f:cb:2c: 1b:be:ef:ce:a0:97:0e:1b:a5:11:0a:cf:b3:fe:73:e6:77:37: 56:85:8f:be:a5:53:d0:b8:9b:b7:a8:37:51:e6:28:dc:2e:8d: 1a:60:2d:d6:1c:0a:46:03:88:b5:33:e9:95:50:9b:a4:1f:e8: bc:d6:55:90:86:38:f1:25:95:64:b3:c8:3e:6e:82:a6:a9:2e: 46:40:2c:07:64:74:47:77:1f:80:d9:0f:b0:4b:b3:9b:b8:6e: 50:87:ba:ca:d8:7d:5f:84:a6:d5:ae:53:94:6d:3c:05:e5:b1: f5:24:c8:81:2e:46:99:96:32:e4:2b:e8:7a:28:05:22:72:09: e8:38:f4:ec:46:7a:46:5c:ab:05:44:5c:2f:b5:e2:57:92:cc: 5a:94:d4:f5:a3:fe:59:84:5f:55:1a:ab:47:4d:eb:50:9d:f3: 0f:7c:89:9e:40:89:e1:e3:38:59:6d:f6:02:cf:82:e3:86:36: b1:19:ad:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUwNzAxMDM1NDA2WhcNMjUwNzA4MDM1NDA2WjAYMRYwFAYD VQQDEw02ODYzNWJkZS0yYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg69ayirS3LLf1KkGWLD9Wu8nyyvxQxQJjitQVuyFR/ZPGzdh8irPV8ir1H1 mTC6Fjtil6JzPjJ7Q7HWQOArukEkdQBaj+3aexYdTi6DSJEHaJ+EewM4hMHRJH1O PJbMv8ntCxbVZCLvzePtLwSoPTn5YZk3ueqhh1T/Vnw8TIYD7np5NZkGvzF0MWkn FDGfrKiqJlciHgf1/p985gWaScfRDabDv3wCiVELFyLWaS2a/JTuGdYpNIBcvRz4 Sg5/gzVEa7nu6Waskn0jBzXouHvrOVhsAy0H3DcK9b4vaIfi1bQbp86G4rxGhnYS QqXPERirJBCqLlwG9rgqJ3TuswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6aB2yC Rd9WXxPuZ9qssXv1dDddMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIfQ2CnT1C8FBjI2y6OAqwMJwMzm+E+mfPhwvCThpUTySSP+9IGk8/ qmCqnOIVj3jYg2uBnbimduWmkoOS+gxcfpHV/Wpfyywbvu/OoJcOG6URCs+z/nPm dzdWhY++pVPQuJu3qDdR5ijcLo0aYC3WHApGA4i1M+mVUJukH+i81lWQhjjxJZVk s8g+boKmqS5GQCwHZHRHdx+A2Q+wS7ObuG5Qh7rK2H1fhKbVrlOUbTwF5bH1JMiB LkaZljLkK+h6KAUicgnoOPTsRnpGXKsFRFwvteJXksxalNT1o/5ZhF9VGqtHTetQ nfMPfImeQInh4zhZbfYCz4LjhjaxGa0l -----END CERTIFICATE-----Generated at Thu Jul 3 01:13:42 2025 by rpki-client