$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: ZBZynvDOAB/Y3NT7c17fBClTTpvQPD1OgY09eVhRzJY= Subject key identifier: 42:5E:F1:1B:A7:9E:DA:AC:7D:81:46:87:D9:F1:A3:77:0B:61:20:80 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: C0 Signing time: Tue 01 Jul 2025 06:25:48 +0000 Manifest this update: Tue 01 Jul 2025 06:25:48 +0000 Manifest next update: Tue 08 Jul 2025 06:25:48 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: nFOfh0+ySG3RDTiNEbw0hVfa/vFIJAZWs0V5CLGmrQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Jul 1 06:25:48 2025 GMT Not After : Jul 8 06:25:48 2025 GMT Subject: CN=68637f6c-bf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:a6:ad:cd:0f:21:a0:ba:98:be:3f:f8:6b: 80:4e:7a:01:c6:27:5f:c8:3d:38:52:2f:3d:73:81: e3:5d:43:8e:6b:b9:73:a1:ef:65:d1:b3:e8:9a:88: ba:36:02:04:21:be:88:54:90:8c:36:7c:33:1b:a2: 43:62:44:00:fb:84:62:28:71:8e:39:f1:ed:1b:9a: 27:80:5d:90:73:ff:b5:ce:4c:97:c4:fc:04:9a:7e: 04:84:c4:3b:3f:1a:98:09:43:85:d3:0d:e0:e1:f7: 62:c4:18:01:9f:5f:a0:bb:c4:90:a0:d4:fa:34:25: e0:c5:c5:3a:86:70:3c:b8:5a:df:d0:9a:6f:6f:ab: 8d:a9:a5:85:ca:33:94:fa:91:25:0e:55:33:34:6f: 86:58:b9:2d:e9:ef:41:41:0f:88:48:db:40:1c:13: 91:4e:5e:eb:ef:7c:22:42:3f:16:de:f1:37:de:e8: 16:34:9c:b5:69:9a:94:c0:3c:95:9e:1d:90:84:68: 00:6b:6a:68:7f:5d:ab:40:f9:6e:15:04:da:b5:5f: 74:d8:71:03:0d:55:77:de:d2:d7:f0:2a:5b:47:73: 21:9f:be:83:ec:4b:19:85:0c:91:49:c1:ce:da:76: 9e:2a:be:78:7f:d2:3f:a5:53:3f:19:c4:c2:e2:db: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5E:F1:1B:A7:9E:DA:AC:7D:81:46:87:D9:F1:A3:77:0B:61:20:80 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:61:d9:e6:70:77:c2:03:52:22:25:b5:4e:cd:b8:cb:18: d8:9f:62:a8:18:01:8d:70:8d:6c:bd:b6:f9:1e:4a:fa:38:ec: f3:43:c2:7f:eb:b2:00:58:4b:2e:6f:6f:4f:39:77:c8:92:b6: 32:99:ce:27:e2:6e:2b:0b:9e:2f:85:ff:64:cb:99:7b:a1:8a: 44:d7:70:0b:2d:49:da:a7:bb:53:06:fd:60:d7:f7:3e:55:3a: 82:eb:9d:ce:ba:65:89:7e:af:0c:b2:7f:16:c6:12:33:99:e2: a2:5c:00:ba:2e:01:e7:5f:90:18:98:e1:01:57:5c:00:83:df: da:71:2f:37:82:af:98:de:70:2d:c7:36:db:60:b5:68:33:60: e6:91:52:f6:7f:ba:88:d8:c2:a4:fb:b6:d1:dd:91:38:8a:83: a9:83:07:b4:9f:c1:39:73:b4:f2:33:65:f1:8a:6c:86:d8:38: b3:59:52:82:b8:a9:f4:87:67:5c:e9:65:4f:fd:58:ac:27:62: 10:66:d9:4e:99:ae:78:0a:52:32:35:4b:84:17:80:8e:58:04: 67:f9:3c:31:3d:1e:fe:30:3f:3b:8d:48:c2:e6:bc:18:31:54: 34:49:bd:9e:1a:f8:00:c8:4d:b1:08:d0:17:cc:2d:20:29:4c: 8c:11:05:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjUwNzAxMDYyNTQ4WhcNMjUwNzA4MDYyNTQ4WjAYMRYwFAYD VQQDEw02ODYzN2Y2Yy1iZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnimrc0PIaC6mL4/+GuATnoBxidfyD04Ui89c4HjXUOOa7lzoe9l0bPomoi6 NgIEIb6IVJCMNnwzG6JDYkQA+4RiKHGOOfHtG5ongF2Qc/+1zkyXxPwEmn4EhMQ7 PxqYCUOF0w3g4fdixBgBn1+gu8SQoNT6NCXgxcU6hnA8uFrf0Jpvb6uNqaWFyjOU +pElDlUzNG+GWLkt6e9BQQ+ISNtAHBORTl7r73wiQj8W3vE33ugWNJy1aZqUwDyV nh2QhGgAa2pof12rQPluFQTatV902HEDDVV33tLX8CpbR3Mhn76D7EsZhQyRScHO 2naeKr54f9I/pVM/GcTC4ttbhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJe8Run ntqsfYFGh9nxo3cLYSCAMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcC2HZ5nB3wgNSIiW1Ts24yxjYn2KoGAGNcI1svbb5Hkr6OOzzQ8J/ 67IAWEsub29POXfIkrYymc4n4m4rC54vhf9ky5l7oYpE13ALLUnap7tTBv1g1/c+ VTqC653OumWJfq8Msn8WxhIzmeKiXAC6LgHnX5AYmOEBV1wAg9/acS83gq+Y3nAt xzbbYLVoM2DmkVL2f7qI2MKk+7bR3ZE4ioOpgwe0n8E5c7TyM2XximyG2DizWVKC uKn0h2dc6WVP/VisJ2IQZtlOma54ClIyNUuEF4COWARn+TwxPR7+MD87jUjC5rwY MVQ0Sb2eGvgAyE2xCNAXzC0gKUyMEQXi -----END CERTIFICATE-----Generated at Tue Jul 1 17:06:58 2025 by rpki-client