$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: NuBNhc9VPtGjd2URSXWjNSK6MlUFpYmGklgtc1mN1o0= Subject key identifier: E7:B0:B2:D4:DC:8E:DE:62:14:46:81:69:1A:98:7E:9F:D7:81:FC:14 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 46 Signing time: Tue 01 Jul 2025 08:11:22 +0000 Manifest this update: Tue 01 Jul 2025 08:11:22 +0000 Manifest next update: Tue 08 Jul 2025 08:11:22 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: HOZc3UnKkZ+EYet62hVE9Mm0sHKIZh2X0iVItT5eWa8=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Jul 1 08:11:22 2025 GMT Not After : Jul 8 08:11:22 2025 GMT Subject: CN=6863982a-bb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:2e:5d:8c:b7:5c:ec:85:0f:18:7b:e2:d7: 4e:b0:ab:7f:86:91:70:a4:7f:8d:a4:89:c6:c4:71: 47:65:06:ef:52:a7:00:2b:e2:1b:70:9f:ed:72:2c: a9:eb:1f:06:02:fa:5c:ac:81:1d:f8:83:c3:9a:bc: 6b:74:6c:78:fd:64:97:ff:d6:6b:bc:9b:d4:e8:ee: d0:79:19:ea:93:c7:55:e7:a6:04:ae:e3:11:04:e1: ce:f8:9b:3c:15:9f:43:86:20:d5:b7:08:c9:6e:c5: 56:c3:c2:62:3d:24:bd:00:27:b8:66:d3:28:cf:87: aa:f4:39:a2:df:ce:b3:7e:9e:e3:2e:e3:12:e1:fc: be:87:f2:4f:d1:e5:68:24:85:20:59:f9:57:23:de: b1:f8:4f:82:48:72:c5:7f:4c:14:e0:c1:f1:09:ef: eb:b4:92:59:1d:b0:14:a0:0e:d9:e7:49:21:93:f4: a2:31:b3:d2:d8:d8:f2:39:0e:14:c7:bf:ce:a7:f9: 51:42:f8:9d:e4:63:d0:1c:75:05:2d:01:61:3b:8c: 3a:34:5e:8c:ba:5b:bd:d8:c2:71:56:2b:03:8b:c9: 57:a5:ad:52:10:2e:0c:c2:a2:27:46:34:7a:da:44: 4e:8f:3b:6c:fc:5a:77:d6:83:84:77:44:17:ac:25: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B0:B2:D4:DC:8E:DE:62:14:46:81:69:1A:98:7E:9F:D7:81:FC:14 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:d8:1a:12:1c:39:2e:29:3b:9c:d6:a3:2c:4b:3a:c5:ad:2b: e6:d3:fd:c9:a9:d1:8d:21:e7:86:6c:8b:30:5e:c5:b7:5d:df: 28:90:4a:42:01:a7:d6:45:2f:c3:4c:a4:1d:82:2f:e5:92:83: 24:6c:be:93:17:93:40:4a:8d:31:c3:c2:b8:87:02:3f:3d:26: 88:9c:81:8e:7d:70:ae:51:97:9e:d8:04:c9:1a:7f:e5:0e:e3: 6e:cf:17:26:c7:58:a3:da:7f:2c:ca:86:35:93:41:d3:e7:e6: 6e:7a:61:d9:b0:79:76:ec:b9:5c:04:e7:b3:1e:49:0a:5a:41: e6:3d:58:42:01:58:fb:85:43:c9:ae:89:a5:af:cb:2a:0d:81: ee:d5:61:20:95:c1:dc:22:05:a8:2c:92:ce:2a:53:19:53:0d: 23:d8:0a:f0:73:b2:8f:8d:f6:7d:77:4f:c6:90:c6:d4:d4:16: 20:01:f1:92:28:e7:61:eb:c8:28:38:6d:55:3c:4a:6b:67:f1: 6d:87:80:e6:76:d6:21:12:b3:f6:70:3a:aa:ae:b6:68:4b:b8: 18:45:fb:8c:ef:9e:d1:8d:5d:84:3c:35:16:9d:36:bc:65:86: 7e:4b:71:b0:ad:b4:69:99:8b:6d:0d:cd:1f:51:6e:e8:0e:2c: 30:fc:93:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA3MDEwODExMjJaFw0yNTA3MDgwODExMjJaMBgxFjAUBgNV BAMTDTY4NjM5ODJhLWJiMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVTC5djLdc7IUPGHvi106wq3+GkXCkf42kicbEcUdlBu9SpwAr4htwn+1yLKnr HwYC+lysgR34g8OavGt0bHj9ZJf/1mu8m9To7tB5GeqTx1XnpgSu4xEE4c74mzwV n0OGINW3CMluxVbDwmI9JL0AJ7hm0yjPh6r0OaLfzrN+nuMu4xLh/L6H8k/R5Wgk hSBZ+Vcj3rH4T4JIcsV/TBTgwfEJ7+u0klkdsBSgDtnnSSGT9KIxs9LY2PI5DhTH v86n+VFC+J3kY9AcdQUtAWE7jDo0Xoy6W73YwnFWKwOLyVelrVIQLgzCoidGNHra RE6PO2z8WnfWg4R3RBesJb6dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU57Cy1NyO 3mIURoFpGph+n9eB/BQwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANHYGhIcOS4pO5zWoyxLOsWtK+bT/cmp0Y0h54ZsizBexbdd3yiQSkIB p9ZFL8NMpB2CL+WSgyRsvpMXk0BKjTHDwriHAj89JoicgY59cK5Rl57YBMkaf+UO 427PFybHWKPafyzKhjWTQdPn5m56YdmweXbsuVwE57MeSQpaQeY9WEIBWPuFQ8mu iaWvyyoNge7VYSCVwdwiBagsks4qUxlTDSPYCvBzso+N9n13T8aQxtTUFiAB8ZIo 52HryCg4bVU8Smtn8W2HgOZ21iESs/ZwOqqutmhLuBhF+4zvntGNXYQ8NRadNrxl hn5LcbCttGmZi20NzR9RbugOLDD8k+g= -----END CERTIFICATE-----Generated at Wed Jul 2 13:03:43 2025 by rpki-client