$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: cELSDyLsYIUQlcsxgDHllY/G0nK9J5KB21r8xcNBFXE= Subject key identifier: 51:4A:42:61:25:42:B0:91:1D:C4:5A:48:BF:06:FB:F3:35:66:60:1B Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 60 Signing time: Thu 03 Jul 2025 07:16:42 +0000 Manifest this update: Thu 03 Jul 2025 07:16:42 +0000 Manifest next update: Thu 10 Jul 2025 07:16:42 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: wCOOWvAoPEJJqXJns6bVSl/0G45rNVSp0/Pyy69yyDs=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Jul 3 07:16:42 2025 GMT Not After : Jul 10 07:16:42 2025 GMT Subject: CN=68662e5a-0820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:8f:d3:e7:94:88:05:ab:7c:a1:b5:72:b1: b5:ef:24:4c:fb:e6:00:4e:e0:ca:1a:1f:4a:96:ee: 5a:92:63:d3:6e:4e:5f:ec:9a:3f:ee:86:d4:6c:8e: 0b:fd:e4:63:0e:93:88:ff:b5:20:3c:d7:d8:36:42: 28:b8:7c:24:68:ba:f0:ea:e9:6c:3e:c3:b8:c7:07: 4b:e6:e7:37:41:f7:84:b6:8b:fe:4f:bf:e2:c7:b0: db:ff:e6:cc:10:a7:5b:1d:e3:6c:2a:ee:bf:13:5b: 84:ab:45:09:d4:27:df:df:27:00:26:ca:76:04:12: 05:0f:c5:d9:e0:46:62:91:0c:ca:31:9c:cf:49:da: f0:ea:2f:40:d4:08:65:b9:41:97:2a:a6:3a:ee:e1: 07:46:3d:8b:0a:ee:63:95:a3:0d:6b:7d:cc:8c:b3: b8:67:83:43:e2:f6:13:6a:a4:d5:a3:d8:da:12:8b: 3f:e5:26:b6:d7:cf:d1:07:fd:7a:ad:f3:92:3b:8b: 39:41:b5:f1:3e:c9:34:91:2d:c8:b4:6d:73:19:5e: fb:9b:c6:fd:55:92:cb:12:f5:41:a0:36:b6:1c:26: ea:ed:e4:d9:69:1a:27:61:e6:e4:3f:ca:1c:8e:7f: 6b:c1:c3:b8:42:5f:82:00:50:0c:4f:70:4d:e8:3c: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4A:42:61:25:42:B0:91:1D:C4:5A:48:BF:06:FB:F3:35:66:60:1B X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d3:f3:60:a6:5b:63:f6:1c:fd:7f:fb:bb:93:5a:83:0e:36: 83:98:44:75:18:c6:6c:b2:6b:1e:29:a0:73:92:97:23:da:b8: 49:08:8b:ba:cf:94:75:0c:04:2c:4a:98:f3:48:0f:9b:0c:66: b4:25:04:a4:f5:8c:6f:3d:d6:ed:95:3a:df:f4:2c:9a:cc:2a: 69:a9:d6:f7:2a:a8:b3:59:3e:3a:c2:05:b0:4f:46:83:fd:fc: 68:ba:bf:a5:26:3a:cd:9d:cb:ca:19:84:f6:da:90:f7:45:85: ba:7c:7b:78:94:b5:28:4a:5d:59:f5:67:3e:6d:c3:24:a9:8a: 02:7c:9a:3b:47:c3:89:98:c0:b9:f4:b6:a9:70:c5:a6:c1:4b: 39:c2:c4:34:03:1f:79:8e:c1:0b:4c:09:77:45:95:f8:e9:b7: 18:1a:0d:62:4f:87:6b:09:d7:0c:8d:e9:26:3d:60:74:93:14: 30:ff:19:de:89:ed:cd:8b:57:84:23:42:10:56:e1:ca:d4:97: 40:76:21:52:6f:3a:85:d3:71:6f:f7:71:8d:79:e5:39:e1:2b: 0e:40:b3:6b:48:0a:b1:06:25:aa:74:ac:69:9f:c3:f4:af:e5: 30:3b:3a:63:fb:fb:3c:73:23:99:d9:7f:2c:b0:ed:20:3f:23: 7a:52:f8:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoNjVBOEQwOEIyRUM4RjQyRDQzQjlBQTdBNDIzNTE3MkJC N0VEMTY2NTAeFw0yNTA3MDMwNzE2NDJaFw0yNTA3MTAwNzE2NDJaMBgxFjAUBgNV BAMTDTY4NjYyZTVhLTA4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRco/T55SIBat8obVysbXvJEz75gBO4MoaH0qW7lqSY9NuTl/smj/uhtRsjgv9 5GMOk4j/tSA819g2Qii4fCRouvDq6Ww+w7jHB0vm5zdB94S2i/5Pv+LHsNv/5swQ p1sd42wq7r8TW4SrRQnUJ9/fJwAmynYEEgUPxdngRmKRDMoxnM9J2vDqL0DUCGW5 QZcqpjru4QdGPYsK7mOVow1rfcyMs7hng0Pi9hNqpNWj2NoSiz/lJrbXz9EH/Xqt 85I7izlBtfE+yTSRLci0bXMZXvubxv1VkssS9UGgNrYcJurt5NlpGidh5uQ/yhyO f2vBw7hCX4IAUAxPcE3oPJnXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUUpCYSVC sJEdxFpIvwb78zVmYBswHwYDVR0jBBgwFoAUZajQiy7I9C1Duap6QjUXK7ftFmUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzY0QkE0QkE4QzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFqUWl5N0k5QzFEdWFwNlFqVVhLN2Z0Rm1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzY0QkE0QkE4QzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMx RHVhcDZRalVYSzdmdEZtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfT82CmW2P2HP1/+7uTWoMONoOYRHUYxmyyax4poHOSlyPauEkIi7rP lHUMBCxKmPNID5sMZrQlBKT1jG891u2VOt/0LJrMKmmp1vcqqLNZPjrCBbBPRoP9 /Gi6v6UmOs2dy8oZhPbakPdFhbp8e3iUtShKXVn1Zz5twySpigJ8mjtHw4mYwLn0 tqlwxabBSznCxDQDH3mOwQtMCXdFlfjptxgaDWJPh2sJ1wyN6SY9YHSTFDD/Gd6J 7c2LV4QjQhBW4crUl0B2IVJvOoXTcW/3cY155TnhKw5As2tICrEGJap0rGmfw/Sv 5TA7OmP7+zxzI5nZfyyw7SA/I3pS+Ec= -----END CERTIFICATE-----Generated at Fri Jul 4 02:22:19 2025 by rpki-client