$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: aNdZF/rZBzvVZ3zwRZplVnnBrJvEr8EEtRbcCUNBGgA= Subject key identifier: 97:A0:A3:7A:5C:64:8E:BC:56:0F:8C:3D:3E:ED:4A:D6:6A:B8:D5:D4 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 0283 Signing time: Thu 03 Jul 2025 02:03:37 +0000 Manifest this update: Thu 03 Jul 2025 02:03:36 +0000 Manifest next update: Thu 10 Jul 2025 02:03:36 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: 49dcfdgPY9k+pv1r/umQ9KKG2fWvCzEMKIA3V7dw170=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Jul 3 02:03:36 2025 GMT Not After : Jul 10 02:03:36 2025 GMT Subject: CN=6865e4f9-6115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:24:66:ae:8b:13:8e:c4:01:a1:4a:13:c2: b8:85:c0:74:dc:f8:65:90:dc:68:00:d0:a9:53:c5: f1:99:9a:7d:e9:17:f7:28:cd:7c:f2:bc:ee:b5:d5: 43:2a:7f:17:44:de:91:f8:7e:5d:88:ac:36:19:b5: 59:f3:ad:3d:e9:60:fc:b4:19:a9:93:d6:7b:fa:db: 52:b2:3a:ee:58:ee:44:47:00:17:e7:2a:d3:a8:56: af:1c:14:84:65:24:7e:6b:0b:e3:bd:ac:fe:13:9e: 43:5f:63:ab:45:5d:3a:31:4b:d2:f1:ab:f9:ac:fa: 5d:8b:bb:c1:cc:21:1d:da:74:b0:0d:7e:e7:f0:29: 05:8c:5f:7d:ca:24:1a:8e:cf:32:74:f3:ec:23:a3: 40:68:66:ad:44:e0:2b:cb:b8:c6:80:15:ad:b6:b9: 39:ac:57:a0:d4:df:15:c7:2f:e9:96:65:1b:6e:32: 5b:1b:ed:62:26:c3:3f:bb:93:a2:58:60:71:4e:29: 0d:3d:6d:91:6e:d7:29:48:4d:fa:d4:a8:7f:c4:92: 25:14:21:73:83:05:c1:e2:0f:25:a6:4b:1e:b2:f5: df:21:f7:3e:5c:23:4a:7f:14:34:06:59:ea:30:a0: 73:2d:44:c5:c1:5d:6b:2c:1a:c8:da:a5:7e:88:da: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A0:A3:7A:5C:64:8E:BC:56:0F:8C:3D:3E:ED:4A:D6:6A:B8:D5:D4 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:74:17:ab:d8:cd:1f:e9:e5:26:cb:72:cd:f5:bf:74:f8:e7: fc:e1:b9:a8:5e:a4:da:ec:a1:33:2b:ae:fd:57:d4:b0:81:45: 05:5a:23:57:af:91:75:5e:28:de:ec:c5:a1:d1:17:ed:f6:a0: 41:44:8e:04:f1:4c:e7:5d:a7:75:b9:a5:b3:72:56:1e:f5:eb: b2:dc:0c:6a:08:d8:75:38:36:62:6f:c2:0b:3b:80:ae:2d:bf: d7:e6:e3:b2:21:21:b1:4d:7c:36:de:55:f7:b7:07:71:17:59: 20:c2:c7:ab:fe:e4:23:76:80:46:dd:4f:04:7c:23:e5:26:38: 58:3c:6a:64:d8:89:0f:a0:0c:91:18:79:45:da:e1:7d:b8:2d: df:73:c6:82:87:2a:0c:81:81:20:c6:35:e8:d4:bd:4e:b3:5a: 1a:8b:94:b7:a0:e3:1f:4b:11:8e:6f:cd:ba:01:fd:ef:78:31: fb:e0:31:e9:4f:6e:bc:69:46:4f:81:42:73:aa:78:e8:50:d5: 77:8d:b9:c7:6d:f0:4c:b1:48:2b:6d:3a:bb:fd:12:3d:db:ef: 85:a1:3d:23:ba:65:0e:b7:4e:a3:81:6f:87:ab:2e:a3:88:2b: c3:ff:d0:2f:00:c2:d4:26:4a:30:03:6f:4e:da:0b:d2:cc:f8: da:12:c0:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUwNzAzMDIwMzM2WhcNMjUwNzEwMDIwMzM2WjAYMRYwFAYD VQQDEw02ODY1ZTRmOS02MTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlYkZq6LE47EAaFKE8K4hcB03PhlkNxoANCpU8XxmZp96Rf3KM188rzutdVD Kn8XRN6R+H5diKw2GbVZ86096WD8tBmpk9Z7+ttSsjruWO5ERwAX5yrTqFavHBSE ZSR+awvjvaz+E55DX2OrRV06MUvS8av5rPpdi7vBzCEd2nSwDX7n8CkFjF99yiQa js8ydPPsI6NAaGatROAry7jGgBWttrk5rFeg1N8Vxy/plmUbbjJbG+1iJsM/u5Oi WGBxTikNPW2RbtcpSE361Kh/xJIlFCFzgwXB4g8lpksesvXfIfc+XCNKfxQ0Blnq MKBzLUTFwV1rLBrI2qV+iNr8hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJego3pc ZI68Vg+MPT7tStZquNXUMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0dBer2M0f6eUmy3LN9b90+Of84bmoXqTa7KEzK679V9SwgUUFWiNX r5F1Xije7MWh0Rft9qBBRI4E8UznXad1uaWzclYe9euy3AxqCNh1ODZib8ILO4Cu Lb/X5uOyISGxTXw23lX3twdxF1kgwser/uQjdoBG3U8EfCPlJjhYPGpk2IkPoAyR GHlF2uF9uC3fc8aChyoMgYEgxjXo1L1Os1oai5S3oOMfSxGOb826Af3veDH74DHp T268aUZPgUJzqnjoUNV3jbnHbfBMsUgrbTq7/RI92++FoT0jumUOt06jgW+Hqy6j iCvD/9AvAMLUJkowA29O2gvSzPjaEsDN -----END CERTIFICATE-----Generated at Thu Jul 3 09:50:00 2025 by rpki-client