$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: Mz+iW7uFxwlGdrHizxsZ2oxqMlxOO+ex1VIOWK9p/FA= Subject key identifier: B1:89:D9:C7:C7:30:5B:3A:DF:CE:EC:F7:C1:BD:57:76:52:EA:81:25 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 022A Signing time: Thu 03 Jul 2025 02:19:25 +0000 Manifest this update: Thu 03 Jul 2025 02:19:25 +0000 Manifest next update: Thu 10 Jul 2025 02:19:25 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: dvv7W4lSnFDlspnW9GJha8PIJgnNN0cGMifSN7OEeAU=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: 6NVu2HEI/2vQueP99wzaqxsinrZpCobkN5jNBib82oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Jul 3 02:19:25 2025 GMT Not After : Jul 10 02:19:25 2025 GMT Subject: CN=6865e8ad-0f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c7:2a:a0:7a:5c:76:5a:e4:54:7e:99:df:94: 8b:c4:67:b3:0f:8e:d6:3b:bd:86:3c:dd:96:41:af: ab:fd:26:00:ec:af:28:30:d7:d0:79:28:1c:f0:a0: 94:6c:03:b9:95:99:0d:fa:f5:94:2c:dc:de:ab:8d: 66:87:07:db:cf:50:50:bc:85:be:45:98:bf:b3:26: f4:f9:56:e6:5b:f0:31:36:86:54:a6:9a:3c:50:2a: c2:47:d5:37:9a:35:be:04:4d:fa:b8:5e:8e:85:3c: a9:29:ca:a6:20:6e:ee:34:4c:5f:fe:ab:82:00:d5: 90:69:48:35:ee:fa:d1:e4:7e:53:16:36:34:09:96: ff:84:9e:0a:d7:05:6a:97:27:95:c8:d8:e9:75:24: 73:84:97:a6:7a:9c:f9:36:01:0d:5c:08:c5:13:4a: 75:6f:d9:a9:ee:ce:15:7b:d6:4b:eb:91:83:f6:c1: d1:c0:70:24:73:1d:ad:18:89:69:0b:48:a7:7c:cc: 0a:a9:14:47:3c:dd:c5:fd:a6:d8:c4:a8:8d:80:15: 9d:c1:91:0f:18:0c:62:e6:e7:81:28:98:72:36:8c: 4e:e0:25:b5:02:e0:4d:db:90:17:fb:4b:03:14:bd: 8f:cb:1f:b1:05:d1:bf:81:62:1b:f2:db:b2:00:6f: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:89:D9:C7:C7:30:5B:3A:DF:CE:EC:F7:C1:BD:57:76:52:EA:81:25 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:16:6b:cd:c8:5e:ab:80:4c:63:26:d6:4c:f0:d8:16:24:0d: 54:d8:6f:f4:ec:fe:63:fc:73:e9:fc:e1:3f:cb:66:2f:76:02: 64:12:45:20:72:85:44:24:ef:00:70:92:fc:aa:30:92:55:22: e8:76:1d:6f:8e:bc:d3:bc:f5:9e:cd:ad:da:a8:1d:94:28:47: 6e:25:c9:c0:c2:e6:2c:00:40:77:bb:4f:ca:53:15:c5:fd:24: 5d:52:57:f3:e0:8e:50:46:0c:fc:e4:44:e5:d2:2d:de:f2:ce: ae:c4:7d:3a:1d:7c:0a:52:e1:68:67:9a:6e:28:c8:50:8d:e4: df:cd:b6:4d:7c:d6:79:b1:07:e0:9f:11:6c:31:7a:1d:77:f0: 5b:8b:e9:f7:05:e8:fd:bb:71:65:e3:cd:de:46:ce:ad:cd:95: 07:fe:5c:0c:12:d5:a5:0c:15:bc:b6:76:b8:09:3a:5d:83:08: b1:d7:4d:12:ea:c0:93:ba:fc:e8:2f:17:91:37:2d:a6:e2:51: d0:0b:49:6a:16:fb:ca:f1:a6:ad:b0:8c:0c:2d:56:d1:cd:9b: c4:69:21:ac:19:f6:56:60:bf:d5:3e:55:61:94:bb:62:bf:51: 01:b2:f5:6a:0f:32:4f:66:e6:12:ce:33:e8:d7:0f:cf:a3:7b: 0d:08:b7:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUwNzAzMDIxOTI1WhcNMjUwNzEwMDIxOTI1WjAYMRYwFAYD VQQDEw02ODY1ZThhZC0wZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ccqoHpcdlrkVH6Z35SLxGezD47WO72GPN2WQa+r/SYA7K8oMNfQeSgc8KCU bAO5lZkN+vWULNzeq41mhwfbz1BQvIW+RZi/syb0+VbmW/AxNoZUppo8UCrCR9U3 mjW+BE36uF6OhTypKcqmIG7uNExf/quCANWQaUg17vrR5H5TFjY0CZb/hJ4K1wVq lyeVyNjpdSRzhJemepz5NgENXAjFE0p1b9mp7s4Ve9ZL65GD9sHRwHAkcx2tGIlp C0infMwKqRRHPN3F/abYxKiNgBWdwZEPGAxi5ueBKJhyNoxO4CW1AuBN25AX+0sD FL2Pyx+xBdG/gWIb8tuyAG8o2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGJ2cfH MFs6387s98G9V3ZS6oElMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaFmvNyF6rgExjJtZM8NgWJA1U2G/07P5j/HPp/OE/y2YvdgJkEkUg coVEJO8AcJL8qjCSVSLodh1vjrzTvPWeza3aqB2UKEduJcnAwuYsAEB3u0/KUxXF /SRdUlfz4I5QRgz85ETl0i3e8s6uxH06HXwKUuFoZ5puKMhQjeTfzbZNfNZ5sQfg nxFsMXodd/Bbi+n3Bej9u3Fl483eRs6tzZUH/lwMEtWlDBW8tna4CTpdgwix100S 6sCTuvzoLxeRNy2m4lHQC0lqFvvK8aatsIwMLVbRzZvEaSGsGfZWYL/VPlVhlLti v1EBsvVqDzJPZuYSzjPo1w/Po3sNCLey -----END CERTIFICATE-----Generated at Thu Jul 3 23:35:58 2025 by rpki-client