$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: tKxd2xhOGq3L1AbQ4drj8eyh/aKgRB+midKctkVU384= Subject key identifier: 7A:ED:58:BF:6E:BA:C0:17:2B:E2:2B:5D:34:4E:48:E9:ED:F8:BD:00 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 2456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 2446 Signing time: Wed 02 Jul 2025 15:54:24 +0000 Manifest this update: Wed 02 Jul 2025 15:54:24 +0000 Manifest next update: Wed 09 Jul 2025 15:54:24 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: 4WswAewt7xXU9SwE0qJXw/ktuiUfEFeNip5QFAn8ef4=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9302 (0x2456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Jul 2 15:54:24 2025 GMT Not After : Jul 9 15:54:24 2025 GMT Subject: CN=68655630-caf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:d1:b9:ee:fc:47:bd:24:d0:f5:66:f9:68: 3b:3e:45:64:b0:39:38:51:1a:a0:8a:7f:fe:0e:4d: 47:44:44:18:a3:5f:73:51:2f:13:2b:8f:57:59:90: f9:be:5f:37:93:84:2e:76:31:fe:93:2f:d9:ed:14: ec:10:6a:04:2e:5e:68:73:da:4a:10:64:18:7a:51: 7d:a1:ca:4a:2b:44:54:b3:78:02:52:3c:ed:09:83: fb:c7:3d:fd:9a:6c:1e:5a:4c:37:82:36:98:da:3c: 6d:b3:f1:e8:3a:09:5b:e0:30:cb:93:b7:05:ed:ef: 48:96:7e:b9:5a:41:8b:0f:28:9d:40:0c:39:90:ea: ea:07:a7:33:4e:82:2f:02:16:54:2b:6b:a4:b7:94: 9d:97:34:f4:2c:4f:62:e9:98:d3:60:df:ba:09:e6: 3f:42:d1:57:8b:ae:b4:01:65:d2:a2:51:76:61:b0: bb:f8:50:5c:66:2b:48:6f:a2:a2:6c:78:e0:da:03: cc:96:79:e6:54:b2:b2:57:bc:67:cd:9c:74:88:d4: f8:e6:a3:16:b2:e1:07:74:e4:cf:4b:ac:c8:b0:9e: ea:65:11:2e:26:f4:af:0b:5d:ca:b2:e5:17:c7:4b: ed:1e:47:0f:9f:c2:21:60:c1:59:e1:67:64:5f:9f: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:ED:58:BF:6E:BA:C0:17:2B:E2:2B:5D:34:4E:48:E9:ED:F8:BD:00 X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5d:5c:df:88:9d:2f:40:ae:b1:76:30:1e:76:09:13:29:50: dc:dd:2d:5f:0a:64:2a:58:b7:19:5a:f3:cb:73:42:26:74:7e: 0d:6e:fb:94:0a:aa:9e:29:71:ab:b4:f4:a6:62:94:32:91:01: b9:f0:bd:80:3b:9b:53:d4:5d:19:33:44:6b:f5:03:0f:e3:bd: a7:0a:0d:c4:3b:d1:f9:4c:2a:09:9a:49:5f:0c:63:7d:04:46: ba:af:b8:b8:97:06:c6:c8:aa:70:02:d2:49:1f:92:59:e4:81: 97:b5:46:6f:be:b8:8a:e7:af:0b:bc:65:c8:f8:df:f7:16:e7: ad:61:4c:87:28:9c:7d:5a:7f:7a:43:d5:be:9b:f6:e2:2b:6a: 88:68:3d:70:a5:b3:c7:a2:54:f2:a0:9c:fa:55:b3:4f:71:ac: af:b5:ff:47:36:f9:db:49:4d:0c:36:31:55:c3:11:77:80:44: fb:80:fe:1f:3a:46:2e:16:b9:1f:a7:9a:4d:bc:9e:1f:e9:ba: 79:8a:94:e5:7c:0d:4b:30:72:d2:a5:88:1f:17:66:d9:dd:ae: 84:3d:80:b6:87:17:3f:64:49:ce:9c:8f:a3:0c:41:4f:83:4a: 7d:61:d2:50:12:12:c7:23:af:23:f6:38:47:43:b5:f9:6d:ac: 7c:cb:d1:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUwNzAyMTU1NDI0WhcNMjUwNzA5MTU1NDI0WjAYMRYwFAYD VQQDEw02ODY1NTYzMC1jYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuknRue78R70k0PVm+Wg7PkVksDk4URqgin/+Dk1HREQYo19zUS8TK49XWZD5 vl83k4QudjH+ky/Z7RTsEGoELl5oc9pKEGQYelF9ocpKK0RUs3gCUjztCYP7xz39 mmweWkw3gjaY2jxts/HoOglb4DDLk7cF7e9Iln65WkGLDyidQAw5kOrqB6czToIv AhZUK2ukt5SdlzT0LE9i6ZjTYN+6CeY/QtFXi660AWXSolF2YbC7+FBcZitIb6Ki bHjg2gPMlnnmVLKyV7xnzZx0iNT45qMWsuEHdOTPS6zIsJ7qZREuJvSvC13KsuUX x0vtHkcPn8IhYMFZ4WdkX5/9tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrtWL9u usAXK+IrXTROSOnt+L0AMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHXVzfiJ0vQK6xdjAedgkTKVDc3S1fCmQqWLcZWvPLc0ImdH4NbvuU CqqeKXGrtPSmYpQykQG58L2AO5tT1F0ZM0Rr9QMP472nCg3EO9H5TCoJmklfDGN9 BEa6r7i4lwbGyKpwAtJJH5JZ5IGXtUZvvriK568LvGXI+N/3FuetYUyHKJx9Wn96 Q9W+m/biK2qIaD1wpbPHolTyoJz6VbNPcayvtf9HNvnbSU0MNjFVwxF3gET7gP4f OkYuFrkfp5pNvJ4f6bp5ipTlfA1LMHLSpYgfF2bZ3a6EPYC2hxc/ZEnOnI+jDEFP g0p9YdJQEhLHI68j9jhHQ7X5bax8y9EO -----END CERTIFICATE-----Generated at Fri Jul 4 01:11:53 2025 by rpki-client