$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: kUenJ73Ut/QtiwNTlToLcEnwXUrOMRSbMsVLKtw6k9E= Subject key identifier: 85:7D:B2:F9:50:DD:6B:5A:1C:29:D6:2A:FA:34:70:2F:69:3E:88:3E Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 4C Signing time: Thu 03 Jul 2025 07:40:10 +0000 Manifest this update: Thu 03 Jul 2025 07:40:09 +0000 Manifest next update: Thu 10 Jul 2025 07:40:09 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: IhHaACGRVMt0BnPufnWPaMry5bVJNX+4COfJVHAxZi8=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: KNC2/s+vZ/9r775F1mGNGMou3oGOdH7k+vpChxT9cqQ=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: zMJUwcQ85fc9WyQBZ4Df3FrM+qiFXLoVLbfqvgsrYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Jul 3 07:40:09 2025 GMT Not After : Jul 10 07:40:09 2025 GMT Subject: CN=686633da-7ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:a7:73:18:b2:50:22:2a:f9:9b:a6:7a:da: 4c:8b:ac:a1:d6:b5:b0:fd:86:7a:de:9b:ec:16:eb: 7e:af:b4:f2:47:04:a9:cd:f7:7e:31:9f:b6:0c:8c: 01:b2:85:cc:d2:aa:b2:f6:d9:75:95:13:84:6c:65: 28:e3:8d:7d:1a:31:e5:66:23:65:8d:2b:6a:34:5b: bb:f8:15:0c:d7:4b:b1:70:f6:c7:7e:62:4e:f6:e4: b5:8b:60:da:df:b1:47:14:5b:f0:c9:01:b1:67:41: 97:90:cb:dd:2f:75:e8:82:ff:24:99:94:2c:61:7d: 08:a1:63:21:d9:67:0f:11:95:77:e1:6c:ed:fc:74: d8:7a:5c:83:6a:67:85:d3:7c:9e:42:62:65:a3:98: cb:69:f5:cc:c9:50:ea:9b:50:a9:ae:7e:d8:ef:d5: 52:7d:47:90:62:3a:10:12:a5:06:fd:52:f0:4e:10: df:af:3e:3c:6a:71:82:26:48:92:57:b5:db:06:d5: 54:1d:52:0d:bc:a6:4c:fb:46:56:3b:cf:4f:06:b5: ec:a9:1d:63:50:97:38:8c:4c:92:83:fe:ca:24:c0: 04:1c:04:93:5f:59:9c:8a:85:a1:5e:53:81:cf:a5: ee:86:29:1c:1b:83:7b:b6:17:24:3a:ee:4a:f9:63: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7D:B2:F9:50:DD:6B:5A:1C:29:D6:2A:FA:34:70:2F:69:3E:88:3E X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:76:50:71:b8:c2:a7:a4:69:2f:8c:ac:77:64:b4:92:d1:d9: 32:73:6f:e4:b1:29:7b:e6:00:33:52:af:57:6e:2d:c2:e1:dd: 52:43:a9:7b:e5:dd:22:97:7e:f2:52:2b:79:4d:84:fd:0e:9a: f8:90:4a:bd:77:a4:04:e1:d0:84:27:46:75:e7:e0:fa:c6:49: eb:98:52:df:ff:da:d0:fc:e0:ea:99:ff:1a:e8:21:4e:52:2f: d1:0f:43:9f:37:71:e1:9d:53:73:de:93:08:05:81:80:35:9a: e2:2c:de:a1:13:0c:39:e5:6d:88:71:6b:69:fc:fe:92:f7:da: 7a:57:99:06:6b:0d:6c:2d:e9:a7:2f:d0:0f:5f:bf:30:88:05: d8:90:5a:03:2d:85:d5:11:31:21:89:be:56:c3:1e:80:68:0b: 7c:78:9f:e2:9c:6a:69:5e:77:f2:dd:19:30:b0:ee:b6:99:21: 8f:3c:bb:69:77:b9:fd:ab:6d:14:08:27:bd:23:89:52:20:56: 8a:53:1e:5d:d8:e5:70:e5:c5:81:b8:5a:91:c0:c3:76:96:c0: aa:c5:ed:8f:42:9e:dc:54:28:a5:e3:99:8d:76:04:5a:ca:a5: 17:96:b8:65:11:c3:4f:ea:53:a6:22:a0:92:41:0e:6d:a4:5a: cd:7c:f0:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA3MDMwNzQwMDlaFw0yNTA3MTAwNzQwMDlaMBgxFjAUBgNV BAMTDTY4NjYzM2RhLTdhYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG+KdzGLJQIir5m6Z62kyLrKHWtbD9hnrem+wW636vtPJHBKnN934xn7YMjAGy hczSqrL22XWVE4RsZSjjjX0aMeVmI2WNK2o0W7v4FQzXS7Fw9sd+Yk725LWLYNrf sUcUW/DJAbFnQZeQy90vdeiC/ySZlCxhfQihYyHZZw8RlXfhbO38dNh6XINqZ4XT fJ5CYmWjmMtp9czJUOqbUKmuftjv1VJ9R5BiOhASpQb9UvBOEN+vPjxqcYImSJJX tdsG1VQdUg28pkz7RlY7z08GteypHWNQlziMTJKD/sokwAQcBJNfWZyKhaFeU4HP pe6GKRwbg3u2FyQ67kr5Yx0LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhX2y+VDd a1ocKdYq+jRwL2k+iD4wHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHB2UHG4wqekaS+MrHdktJLR2TJzb+SxKXvmADNSr1duLcLh3VJDqXvl 3SKXfvJSK3lNhP0OmviQSr13pATh0IQnRnXn4PrGSeuYUt//2tD84OqZ/xroIU5S L9EPQ583ceGdU3PekwgFgYA1muIs3qETDDnlbYhxa2n8/pL32npXmQZrDWwt6acv 0A9fvzCIBdiQWgMthdURMSGJvlbDHoBoC3x4n+Kcamled/LdGTCw7raZIY88u2l3 uf2rbRQIJ70jiVIgVopTHl3Y5XDlxYG4WpHAw3aWwKrF7Y9CntxUKKXjmY12BFrK pReWuGURw0/qU6YioJJBDm2kWs188NU= -----END CERTIFICATE-----Generated at Thu Jul 3 21:48:24 2025 by rpki-client