$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: 0rfe+aROFfgj4ihBJcyUfnu2UcDFG+SBRDjAOyxfZOk= Subject key identifier: 15:E4:54:90:7D:8F:C6:29:E2:72:13:B3:74:9B:9E:E7:BD:70:B0:C3 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 15B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 15B1 Signing time: Mon 30 Jun 2025 16:55:40 +0000 Manifest this update: Mon 30 Jun 2025 16:55:40 +0000 Manifest next update: Mon 07 Jul 2025 16:55:40 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: fQk+Mv0StlC/ZiFMb+tfbtXKSb/PRupNEBqEM8VeijE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5553 (0x15b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: Jun 30 16:55:40 2025 GMT Not After : Jul 7 16:55:40 2025 GMT Subject: CN=6862c18c-641e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:30:f7:20:87:94:4e:2d:a3:0b:98:a7:a6: 94:e6:74:32:d7:45:2b:0d:9e:b8:63:4c:ca:b1:a4: d5:83:2a:ff:16:a9:90:c9:e7:06:fe:09:15:e1:88: c7:35:e9:79:06:37:9a:a9:9e:35:12:8b:a6:4e:08: a1:a7:93:17:a4:ac:b9:b3:6f:5f:e2:59:6f:f6:62: fd:26:d0:8f:53:f9:53:ba:6f:21:8b:b8:63:f2:28: c7:de:fb:31:7c:0a:55:5c:70:da:53:96:ce:7c:1f: 3f:f1:32:87:47:42:b1:ec:c4:ed:65:6d:1e:49:ac: ad:00:c1:36:22:c6:d0:d3:36:78:55:ed:71:0a:b7: 92:af:50:01:aa:2c:95:57:f5:77:19:d3:4f:e2:29: b4:26:da:9a:fd:c0:9e:07:6b:ab:6e:97:12:98:5e: 77:62:c6:32:fa:71:5c:61:01:3e:0e:98:42:37:7c: 40:6f:66:54:97:cf:3c:ac:29:f4:e6:ae:a5:9e:7e: 3b:fb:93:07:b1:c5:b1:aa:68:ae:7e:b8:68:f3:78: 26:b9:41:26:99:50:0d:63:24:5d:c5:52:f0:d2:98: ec:49:d5:89:c0:c5:74:c9:81:4e:04:a6:fb:fb:80: 17:7d:f5:b8:dd:ef:d0:66:21:d3:4f:2f:68:be:4c: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E4:54:90:7D:8F:C6:29:E2:72:13:B3:74:9B:9E:E7:BD:70:B0:C3 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:02:d7:4d:da:ee:3b:50:3a:4f:4c:ab:23:0f:cf:45:50:62: bb:1a:df:fc:94:1b:95:ab:54:86:da:66:1d:2e:d5:30:fe:a5: 39:fb:13:42:2e:92:81:45:03:a5:59:e2:50:99:0f:93:93:a4: 2b:a5:0b:94:7a:26:4c:d7:70:04:1a:a6:5f:10:f5:4c:31:60: c6:a4:ed:42:65:dc:d8:c2:70:4e:eb:0f:cd:9c:09:16:eb:ca: 17:3f:86:b2:43:07:b3:e1:96:77:b8:6a:14:3d:dc:fb:8a:a6: 9d:a4:e2:33:e9:45:6d:4d:d8:a8:25:20:dc:5e:e0:b5:f1:80: dd:a9:72:e7:2e:77:73:cd:4c:d1:90:dc:90:1f:50:be:51:a0: 11:1b:8f:74:8d:a7:b2:d9:80:bc:6f:52:64:84:c3:7f:5d:3f: e6:3e:9f:59:e8:32:ee:b1:53:f9:76:5c:f5:b9:c4:55:3a:02: f2:75:4a:14:06:ac:fe:32:90:e3:99:c5:1a:01:ed:76:c9:62: 50:89:7b:bc:ee:c9:d3:7e:f5:68:d4:cf:d1:45:1a:96:71:69: 50:e8:1e:b0:7b:8c:1d:9d:6a:76:3f:d0:b8:b9:ec:77:c6:d6: 5e:0c:11:ec:b5:2c:93:1d:b0:8b:d6:eb:f6:48:78:ea:0d:b8: 57:68:74:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjUwNjMwMTY1NTQwWhcNMjUwNzA3MTY1NTQwWjAYMRYwFAYD VQQDEw02ODYyYzE4Yy02NDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVQw9yCHlE4towuYp6aU5nQy10UrDZ64Y0zKsaTVgyr/FqmQyecG/gkV4YjH Nel5BjeaqZ41EoumTgihp5MXpKy5s29f4llv9mL9JtCPU/lTum8hi7hj8ijH3vsx fApVXHDaU5bOfB8/8TKHR0Kx7MTtZW0eSaytAME2IsbQ0zZ4Ve1xCreSr1ABqiyV V/V3GdNP4im0Jtqa/cCeB2urbpcSmF53YsYy+nFcYQE+DphCN3xAb2ZUl888rCn0 5q6lnn47+5MHscWxqmiufrho83gmuUEmmVANYyRdxVLw0pjsSdWJwMV0yYFOBKb7 +4AXffW43e/QZiHTTy9ovkwupQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXkVJB9 j8Yp4nITs3Sbnue9cLDDMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQAtdN2u47UDpPTKsjD89FUGK7Gt/8lBuVq1SG2mYdLtUw/qU5+xNC LpKBRQOlWeJQmQ+Tk6QrpQuUeiZM13AEGqZfEPVMMWDGpO1CZdzYwnBO6w/NnAkW 68oXP4ayQwez4ZZ3uGoUPdz7iqadpOIz6UVtTdioJSDcXuC18YDdqXLnLndzzUzR kNyQH1C+UaARG490jaey2YC8b1JkhMN/XT/mPp9Z6DLusVP5dlz1ucRVOgLydUoU Bqz+MpDjmcUaAe12yWJQiXu87snTfvVo1M/RRRqWcWlQ6B6we4wdnWp2P9C4uex3 xtZeDBHstSyTHbCL1uv2SHjqDbhXaHRJ -----END CERTIFICATE-----Generated at Wed Jul 2 13:46:38 2025 by rpki-client