$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: 3oVUTd1LqAsZfLxX3ckt1hb15WAP2AeqM/ctv4OBy8A= Subject key identifier: EC:DB:AE:79:21:45:FE:B6:A9:98:6D:C0:0A:1D:D9:9D:B1:B2:35:F3 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0C59 Signing time: Wed 02 Jul 2025 18:36:28 +0000 Manifest this update: Wed 02 Jul 2025 18:36:28 +0000 Manifest next update: Wed 09 Jul 2025 18:36:28 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: AbQ4tLFhuM0Z1TSwo9i51oX1enqhLShTs40FmdctMl0=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Jul 2 18:36:28 2025 GMT Not After : Jul 9 18:36:28 2025 GMT Subject: CN=68657c2c-3e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:00:97:c4:e6:d3:62:e7:2a:20:41:2b:a1:83: ed:70:48:9a:e2:72:9a:de:8e:63:f5:b3:5e:f4:32: 4f:bd:63:c3:38:72:f0:69:1d:2b:39:72:1b:e4:b7: 44:ca:91:9b:60:e4:60:95:b9:7d:51:28:f4:e7:8e: 67:d3:2b:50:fb:37:ae:cb:51:f4:79:a3:48:1c:a7: 94:02:a5:1d:69:b5:3c:85:a6:c5:cc:44:24:5f:ab: 83:20:ad:cf:5f:b3:f2:2b:76:91:86:7a:9d:38:15: dd:a0:a6:b5:e3:28:9f:4e:f0:49:f3:16:9a:6a:bd: a2:88:d5:d9:97:f6:cd:22:ea:9d:fa:1e:86:63:7c: db:7a:79:96:9a:2f:14:fc:8f:55:d8:12:6a:f0:0b: ed:7f:a8:c2:73:4a:db:91:d2:a5:ed:fb:16:a0:be: 98:fc:a8:e5:2e:44:6d:32:87:ca:d3:8f:3b:21:98: 61:16:c6:ab:9d:fb:5a:82:a4:df:9e:e1:6c:ed:4b: 48:f9:76:ca:aa:3a:fb:48:db:ef:60:8a:2a:a5:99: 69:64:0a:dc:23:ad:d0:ae:72:3f:84:68:7c:3d:86: 40:f9:14:10:6c:8b:67:e9:dc:c9:1f:3e:ab:d9:10: 73:64:12:7e:46:d7:39:f7:02:2e:b8:ee:f0:23:17: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DB:AE:79:21:45:FE:B6:A9:98:6D:C0:0A:1D:D9:9D:B1:B2:35:F3 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:59:ac:f1:fb:51:52:b2:eb:1f:18:fa:93:05:47:3c:e7:bd: 7b:02:a3:91:c4:f3:f1:2a:bc:65:37:db:db:74:fd:8c:89:a4: 29:da:db:56:56:d2:c4:85:3c:34:c1:58:2c:41:95:f8:d9:a3: 82:33:f5:7a:df:78:56:b6:97:80:ca:c4:9b:7e:9d:8b:e7:04: 97:5a:81:34:53:ab:1b:28:23:36:7d:95:6d:e8:5e:e3:11:0e: 6f:4c:5e:e2:c8:0a:e1:cd:f7:0e:e3:4d:9e:59:fa:9c:06:75: 38:23:36:10:be:0a:5e:1c:f4:9f:ef:7e:31:50:54:0e:47:34: 58:20:ea:36:bd:95:10:94:77:ca:5a:65:ba:80:ab:81:28:38: 07:fe:a5:aa:e1:34:0f:19:54:00:88:91:96:f0:06:7a:31:31: d9:ad:c9:a7:b4:22:77:16:15:9e:45:2a:e0:0d:25:62:c1:88: 04:a9:30:c3:ba:e4:a8:3a:7f:17:a9:f0:81:ad:52:90:64:29: aa:da:4a:eb:b4:b6:37:8e:b5:e1:86:c8:3b:49:b8:16:25:a0: 5a:fd:d8:bb:89:90:ed:34:81:33:70:8a:eb:cc:bb:12:fc:d1: f3:df:bd:50:35:17:64:d9:e6:3a:09:1e:92:dd:41:3d:6f:59: 13:89:8f:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUwNzAyMTgzNjI4WhcNMjUwNzA5MTgzNjI4WjAYMRYwFAYD VQQDEw02ODY1N2MyYy0zZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ACXxObTYucqIEEroYPtcEia4nKa3o5j9bNe9DJPvWPDOHLwaR0rOXIb5LdE ypGbYORglbl9USj0545n0ytQ+zeuy1H0eaNIHKeUAqUdabU8habFzEQkX6uDIK3P X7PyK3aRhnqdOBXdoKa14yifTvBJ8xaaar2iiNXZl/bNIuqd+h6GY3zbenmWmi8U /I9V2BJq8Avtf6jCc0rbkdKl7fsWoL6Y/KjlLkRtMofK0487IZhhFsarnftagqTf nuFs7UtI+XbKqjr7SNvvYIoqpZlpZArcI63QrnI/hGh8PYZA+RQQbItn6dzJHz6r 2RBzZBJ+Rtc59wIuuO7wIxc9KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzbrnkh Rf62qZhtwAod2Z2xsjXzMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrWazx+1FSsusfGPqTBUc85717AqORxPPxKrxlN9vbdP2MiaQp2ttW VtLEhTw0wVgsQZX42aOCM/V633hWtpeAysSbfp2L5wSXWoE0U6sbKCM2fZVt6F7j EQ5vTF7iyArhzfcO402eWfqcBnU4IzYQvgpeHPSf734xUFQORzRYIOo2vZUQlHfK WmW6gKuBKDgH/qWq4TQPGVQAiJGW8AZ6MTHZrcmntCJ3FhWeRSrgDSViwYgEqTDD uuSoOn8XqfCBrVKQZCmq2krrtLY3jrXhhsg7SbgWJaBa/di7iZDtNIEzcIrrzLsS /NHz371QNRdk2eY6CR6S3UE9b1kTiY8/ -----END CERTIFICATE-----Generated at Thu Jul 3 11:22:47 2025 by rpki-client