$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json) Hash identifier: WE9uI3TNCzhk9/uagNyywKmoiXIupxr/o2EvRDxUBtM= Subject key identifier: 75:E6:E1:49:6A:15:B7:A4:A9:1D:67:8B:98:D0:48:B9:3E:A5:9D:EE Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 13D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft Manifest number: 13D1 Signing time: Mon 30 Jun 2025 17:07:57 +0000 Manifest this update: Mon 30 Jun 2025 17:07:56 +0000 Manifest next update: Mon 07 Jul 2025 17:07:56 +0000 Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: sCn1WvdG0PlMB20ygsEfV4OOSE6zEy/7ZFdBDLP+9Dg=) 2: A59866188BC311E88445685EC4F9AE02.roa (hash: UY4nyIE+VkK/iFAfXsE3PqiNSHJ4rK/Ulyy62xkzmis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5080 (0x13d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Jun 30 17:07:56 2025 GMT Not After : Jul 7 17:07:56 2025 GMT Subject: CN=6862c46c-ca70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:bf:61:fa:e4:9c:36:88:a4:00:b6:ce:2e:5c: 08:c1:78:0e:e3:9b:20:8e:58:68:44:c9:a4:97:2a: 33:1c:a7:16:f0:d3:e0:40:6c:bd:ee:0f:8d:b9:3d: 52:ba:45:4a:12:6e:8d:55:aa:23:c4:5c:2f:00:43: 2b:05:6a:9a:fa:d5:23:a3:75:10:91:dd:dc:b6:a4: 63:46:a2:13:3a:a0:79:b2:5b:20:dc:c6:00:dd:8c: 5c:dd:83:b4:78:a1:0f:32:82:7e:06:a2:89:36:92: cd:85:8b:37:d4:43:56:9f:b2:3f:6e:0d:ab:fb:4c: 8c:1b:8d:ec:9b:bb:9e:09:73:43:30:cd:a5:bd:2d: 3a:8e:85:97:c0:e8:18:b0:e1:4f:e2:d5:3d:43:90: 82:a6:ad:33:ce:88:ec:47:12:5a:c3:81:89:e2:92: 27:b7:d8:c6:61:8c:48:e8:17:d8:ae:4d:99:d2:b3: 92:6d:32:34:6d:61:ae:9c:d9:2a:ef:a5:7d:57:c3: b6:de:5c:c1:d0:51:13:39:fe:2c:5f:b2:a0:24:3e: 9c:73:c0:77:ea:07:7a:ed:c3:83:a7:c2:e9:ae:a7: 43:ef:0e:08:8b:9c:ea:93:d5:1d:fa:d5:03:3b:30: 8d:bc:9f:92:e4:d4:8d:df:15:75:02:b1:27:b1:44: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E6:E1:49:6A:15:B7:A4:A9:1D:67:8B:98:D0:48:B9:3E:A5:9D:EE X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c3:0b:31:91:7f:5c:3c:f0:37:61:c8:3f:95:91:0e:7e:07: 5f:e7:a0:de:2d:f2:3a:f8:b2:45:b2:88:04:f0:5a:7e:b9:fe: a1:9a:4e:a3:6f:b3:91:94:80:a5:af:0f:84:20:40:7e:a0:9d: d9:18:56:af:9a:50:f1:3d:0f:3e:c4:25:4a:6d:23:8e:01:58: 35:34:ca:e3:8e:54:19:65:96:17:bc:71:79:9d:e3:45:a8:c2: 9e:70:ac:15:47:5c:f3:2d:e0:84:66:5a:4d:d1:2e:07:e2:73: 2b:e5:bc:2c:d9:19:7e:50:32:de:f5:ad:d0:7c:d4:d2:39:4c: 00:9a:79:bb:ac:b0:3c:b4:12:96:3e:60:0e:38:65:39:12:de: cd:51:3d:17:91:dd:50:9c:09:c4:d7:02:67:0e:46:6e:63:f9: 87:e8:04:e6:a4:24:ef:4e:08:e9:4d:f6:e0:c0:c8:ab:d8:a2: a7:a5:50:4a:19:cb:1c:6e:58:11:d3:15:38:6d:21:95:b6:e9: be:38:78:40:f7:31:47:7e:ef:0e:87:ab:7c:4d:f3:a5:a7:d2: d2:a9:34:25:d9:11:8f:b3:7a:4b:43:f6:7f:6a:16:70:2b:4a: 43:73:17:df:a2:82:53:b3:38:01:02:5e:10:cb:30:eb:14:0a: 1a:22:39:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjUwNjMwMTcwNzU2WhcNMjUwNzA3MTcwNzU2WjAYMRYwFAYD VQQDEw02ODYyYzQ2Yy1jYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA979h+uScNoikALbOLlwIwXgO45sgjlhoRMmklyozHKcW8NPgQGy97g+NuT1S ukVKEm6NVaojxFwvAEMrBWqa+tUjo3UQkd3ctqRjRqITOqB5slsg3MYA3Yxc3YO0 eKEPMoJ+BqKJNpLNhYs31ENWn7I/bg2r+0yMG43sm7ueCXNDMM2lvS06joWXwOgY sOFP4tU9Q5CCpq0zzojsRxJaw4GJ4pInt9jGYYxI6BfYrk2Z0rOSbTI0bWGunNkq 76V9V8O23lzB0FETOf4sX7KgJD6cc8B36gd67cODp8LprqdD7w4Ii5zqk9Ud+tUD OzCNvJ+S5NSN3xV1ArEnsUSmSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXm4Ulq FbekqR1ni5jQSLk+pZ3uMB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0RCMS9EQTJBNDJCRThCQzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VD WklVdkV0R0xJWXdGNUVpRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+wwsxkX9cPPA3Ycg/lZEOfgdf56DeLfI6+LJFsogE8Fp+uf6hmk6j b7ORlIClrw+EIEB+oJ3ZGFavmlDxPQ8+xCVKbSOOAVg1NMrjjlQZZZYXvHF5neNF qMKecKwVR1zzLeCEZlpN0S4H4nMr5bws2Rl+UDLe9a3QfNTSOUwAmnm7rLA8tBKW PmAOOGU5Et7NUT0Xkd1QnAnE1wJnDkZuY/mH6ATmpCTvTgjpTfbgwMir2KKnpVBK GcscblgR0xU4bSGVtum+OHhA9zFHfu8Oh6t8TfOlp9LSqTQl2RGPs3pLQ/Z/ahZw K0pDcxffooJTszgBAl4QyzDrFAoaIjnb -----END CERTIFICATE-----Generated at Wed Jul 2 00:43:33 2025 by rpki-client