$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft File: znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json) Hash identifier: RcwLSmcs3CNtdcAATljnye7cVTuySHrrbYtJu1n9whY= Subject key identifier: 9D:24:13:2B:AE:B8:87:0F:D4:5B:1B:93:BB:98:37:DE:AA:D6:A1:81 Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 Certificate issuer: /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft Manifest number: 0830 Signing time: Mon 30 Jun 2025 21:04:00 +0000 Manifest this update: Mon 30 Jun 2025 21:04:00 +0000 Manifest next update: Mon 07 Jul 2025 21:04:00 +0000 Files and hashes: 1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: VXESBqERJFJGJ5HR6xBX/dR/nnOSRKK8jP4oxtIm27M=) 2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: V9wdh8jyKUELoyH3ltxRaciIlStsT6ht66mAyTIa1HI=) 3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: Fa6SdUbTPUudXOpSSwXnBEDK9cTtldS1jBd7HoHcy+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Validity Not Before: Jun 30 21:04:00 2025 GMT Not After : Jul 7 21:04:00 2025 GMT Subject: CN=6862fbc0-4d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:14:08:c3:52:73:c7:98:97:21:6d:7f:71: 53:c9:04:67:24:3a:b7:32:d8:cd:58:99:b6:af:2c: 2c:c1:14:25:a4:25:30:d9:7f:2c:3f:2e:95:e0:14: e3:83:5f:92:92:86:55:02:f5:9b:00:93:25:2f:87: 34:5e:96:5f:26:96:05:42:f5:56:53:5b:58:54:92: 7b:67:87:65:8b:4f:fb:93:96:19:cf:65:b8:00:0c: 28:6d:e7:4c:db:f5:40:74:db:f5:b6:6c:af:2f:35: 6e:45:d0:10:07:13:b9:02:68:ad:77:90:5f:fc:44: 43:75:84:46:43:db:b2:51:33:a8:ad:ab:b2:ac:01: db:66:e9:d0:1e:cb:ee:ec:f6:0a:f0:96:7f:81:db: 2e:a9:0f:2b:7c:27:ae:4a:0a:cb:ec:3c:c2:37:27: a2:bd:a8:c9:ab:4b:ec:23:58:69:46:9f:a1:59:f4: 83:7a:5f:9f:66:d3:d8:50:31:75:0c:74:af:70:61: f5:24:2b:ff:ab:9c:9c:85:2d:db:12:b8:65:80:56: b3:36:e7:e4:64:cb:8c:d5:42:2e:e9:fc:ef:4e:06: 9c:3f:41:2a:94:c7:e6:9f:9e:70:72:c3:f0:00:43: e8:26:ee:78:5e:fd:d3:f3:2d:23:fb:2c:04:66:41: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:24:13:2B:AE:B8:87:0F:D4:5B:1B:93:BB:98:37:DE:AA:D6:A1:81 X509v3 Authority Key Identifier: keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e8:20:9b:90:2d:61:86:57:55:47:88:40:1f:f1:8c:75:2c: 9e:2c:7b:1f:08:d8:1f:e3:c3:37:9c:c8:7f:8b:b9:60:3f:73: f1:f5:19:0a:97:23:6e:5b:8a:ed:62:91:1d:5e:7d:f3:a7:cb: 96:77:78:f5:4e:a7:52:56:3b:3d:3f:88:92:2b:fe:a5:ef:5d: 58:26:09:4c:30:86:d8:14:7a:52:4c:f8:e5:b1:07:1f:f6:64: 71:91:25:9b:77:b5:61:02:1f:45:9a:10:5c:9d:58:43:e8:c6: 3f:4a:2c:fc:3b:2f:f9:8a:02:ca:5c:06:ac:9f:99:f5:0c:18: c9:27:37:01:94:8d:8b:8f:97:10:a8:ed:d4:f0:2c:8f:e3:a5: 32:64:d5:d6:b9:e6:ce:6d:7b:6d:16:56:29:39:52:ff:52:8b: 2a:a6:4e:32:0c:4f:2b:a6:d9:52:9c:ea:53:52:4b:c1:18:ed: 76:d9:ee:fd:30:16:ae:4e:f4:c4:8f:47:08:e2:35:b7:f9:2c: 67:d2:b2:bf:10:74:10:9a:2f:5b:a7:67:bd:e9:47:30:12:f7: 27:97:2e:f2:6c:3c:46:9f:f0:53:71:47:f7:aa:8b:8b:b9:a3: cd:d1:99:6d:54:28:fc:22:b0:07:07:54:57:eb:d9:b3:12:0e: 34:82:f6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE NUY5Q0I3MzUwHhcNMjUwNjMwMjEwNDAwWhcNMjUwNzA3MjEwNDAwWjAYMRYwFAYD VQQDEw02ODYyZmJjMC00ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jcUCMNSc8eYlyFtf3FTyQRnJDq3MtjNWJm2rywswRQlpCUw2X8sPy6V4BTj g1+SkoZVAvWbAJMlL4c0XpZfJpYFQvVWU1tYVJJ7Z4dli0/7k5YZz2W4AAwobedM 2/VAdNv1tmyvLzVuRdAQBxO5Amitd5Bf/ERDdYRGQ9uyUTOorauyrAHbZunQHsvu 7PYK8JZ/gdsuqQ8rfCeuSgrL7DzCNyeivajJq0vsI1hpRp+hWfSDel+fZtPYUDF1 DHSvcGH1JCv/q5ychS3bErhlgFazNufkZMuM1UIu6fzvTgacP0EqlMfmn55wcsPw AEPoJu54Xv3T8y0j+ywEZkH1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0kEyuu uIcP1Fsbk7uYN96q1qGBMB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTQxNS9CQzY2MTA2RUREOTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2 SFB3MFdNVFI2UWpWLWN0elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT6CCbkC1hhldVR4hAH/GMdSyeLHsfCNgf48M3nMh/i7lgP3Px9RkK lyNuW4rtYpEdXn3zp8uWd3j1TqdSVjs9P4iSK/6l711YJglMMIbYFHpSTPjlsQcf 9mRxkSWbd7VhAh9FmhBcnVhD6MY/Siz8Oy/5igLKXAasn5n1DBjJJzcBlI2Lj5cQ qO3U8CyP46UyZNXWuebObXttFlYpOVL/Uosqpk4yDE8rptlSnOpTUkvBGO122e79 MBauTvTEj0cI4jW3+Sxn0rK/EHQQmi9bp2e96UcwEvcnly7ybDxGn/BTcUf3qouL uaPN0ZltVCj8IrAHB1RX69mzEg40gvb0 -----END CERTIFICATE-----Generated at Wed Jul 2 22:22:32 2025 by rpki-client