$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: 1+vqoR3XB7PW5H0oaIPEt+F6nFJUGUQSPmYnCma0fLQ= Subject key identifier: C3:97:C0:39:9F:60:B4:B8:84:73:04:07:C8:F1:50:F9:E5:EC:55:22 Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 19 Signing time: Tue 01 Jul 2025 08:44:53 +0000 Manifest this update: Tue 01 Jul 2025 08:44:52 +0000 Manifest next update: Tue 08 Jul 2025 08:44:52 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: kvonOWoLBPMavCrUI8Eed8rT01b41XOczYIN95OuY+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Jul 1 08:44:52 2025 GMT Not After : Jul 8 08:44:52 2025 GMT Subject: CN=6863a004-9e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:97:d5:7b:89:aa:c0:c0:57:97:37:67:77: a4:eb:bc:c4:69:82:a1:fb:c8:8e:20:e2:f0:a9:24: 37:b7:62:39:6f:f8:64:33:4c:ed:b0:2c:6b:c4:7c: 3b:e4:ae:6b:7d:51:22:fc:13:67:b4:9e:de:56:9d: be:fe:8c:6b:4c:7e:06:e9:60:e5:41:84:16:ff:82: 90:ef:47:62:cf:38:a4:7d:e6:15:9f:0b:00:27:e3: 88:a9:85:4a:c0:9c:75:e9:6b:62:a3:e6:6b:00:e5: ba:55:a0:99:0d:4e:62:52:ca:7a:d9:43:f2:e6:8d: 80:dd:77:5f:90:b4:8a:8b:f1:a1:bd:df:38:91:d6: aa:f7:6c:b1:24:1b:9e:62:5f:6d:f9:fc:28:95:e2: 93:84:be:73:f4:1d:0a:05:b8:15:22:16:d2:c1:21: c9:f6:0e:22:6e:97:5a:5c:93:ff:24:7f:ec:25:a5: bc:40:95:58:ae:03:88:64:be:fa:3f:fd:33:ff:4c: 39:7d:41:ed:87:7c:23:04:b9:f5:80:cd:a9:59:a9: 53:68:6d:40:3a:3d:aa:fe:02:3f:1b:9a:54:30:af: 38:75:61:b0:36:92:1a:26:c1:8b:75:de:7f:c5:85: 3a:fe:35:c8:45:c9:44:db:b1:7e:71:1e:9d:a3:df: 5e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:97:C0:39:9F:60:B4:B8:84:73:04:07:C8:F1:50:F9:E5:EC:55:22 X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:99:30:72:42:8d:04:fd:b3:78:df:7b:71:fb:61:8a:46:9b: fb:77:17:70:9c:e0:50:e8:4c:bc:45:11:8e:b5:f8:58:1e:e8: ce:9a:0f:87:64:06:dc:8b:b2:1a:87:55:47:15:d6:43:cc:1b: 81:59:c6:d6:12:9d:be:74:a4:ac:1a:9c:d8:c5:8e:10:8a:aa: 7f:c1:9e:c5:41:9e:d6:dc:90:2f:4e:76:ce:0c:2c:af:4d:87: 95:1b:d1:90:58:79:d2:cd:12:ba:da:32:70:69:dd:c7:dc:d0: 76:e9:41:72:9e:01:4e:ac:34:9f:cb:2f:58:3c:92:6f:03:8a: f8:2f:f8:2e:77:5a:68:af:08:81:26:89:30:20:33:dd:62:2f: 63:e8:e7:22:ef:cf:bc:0d:76:fc:2c:98:3f:91:18:38:6c:73: ec:3f:13:39:92:e1:de:d3:da:03:a2:b7:88:bd:96:0b:4b:65: 27:7e:61:75:3c:8e:c7:12:4a:06:ba:88:ba:dc:84:02:58:13: 4f:c2:53:e3:e2:b1:01:2d:74:ea:b5:7e:16:f5:c8:01:c6:18: 93:00:ae:82:c4:47:13:33:fe:0f:7e:3a:d1:4e:58:ff:57:4b: 06:2d:7c:d9:d2:c3:78:0a:28:62:8b:63:14:ea:ca:6c:20:a0: 50:ee:30:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTA3MDEwODQ0NTJaFw0yNTA3MDgwODQ0NTJaMBgxFjAUBgNV BAMTDTY4NjNhMDA0LTllNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA9JfVe4mqwMBXlzdnd6TrvMRpgqH7yI4g4vCpJDe3Yjlv+GQzTO2wLGvEfDvk rmt9USL8E2e0nt5Wnb7+jGtMfgbpYOVBhBb/gpDvR2LPOKR95hWfCwAn44iphUrA nHXpa2Kj5msA5bpVoJkNTmJSynrZQ/LmjYDdd1+QtIqL8aG93ziR1qr3bLEkG55i X235/CiV4pOEvnP0HQoFuBUiFtLBIcn2DiJul1pck/8kf+wlpbxAlViuA4hkvvo/ /TP/TDl9Qe2HfCMEufWAzalZqVNobUA6Par+Aj8bmlQwrzh1YbA2khomwYt13n/F hTr+NchFyUTbsX5xHp2j315TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw5fAOZ9g tLiEcwQHyPFQ+eXsVSIwHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOZMHJCjQT9s3jfe3H7YYpGm/t3F3Cc4FDoTLxFEY61+Fge6M6aD4dk BtyLshqHVUcV1kPMG4FZxtYSnb50pKwanNjFjhCKqn/BnsVBntbckC9Ods4MLK9N h5Ub0ZBYedLNErraMnBp3cfc0HbpQXKeAU6sNJ/LL1g8km8Divgv+C53WmivCIEm iTAgM91iL2Po5yLvz7wNdvwsmD+RGDhsc+w/EzmS4d7T2gOit4i9lgtLZSd+YXU8 jscSSga6iLrchAJYE0/CU+PisQEtdOq1fhb1yAHGGJMAroLERxMz/g9+OtFOWP9X SwYtfNnSw3gKKGKLYxTqymwgoFDuMGQ= -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:27 2025 by rpki-client