$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: y/hPKN+bKHPjiXHYv4wUINhdL4j7vTqq6gas3v582Eg= Subject key identifier: 51:1F:5C:FB:E6:8F:07:A7:37:C4:3F:BC:C4:99:52:B4:D1:2B:F2:8A Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0CB8 Signing time: Sat 28 Jun 2025 17:53:59 +0000 Manifest this update: Sat 28 Jun 2025 17:53:59 +0000 Manifest next update: Sat 05 Jul 2025 17:53:59 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: OGy+AprFoDghuldNoyT5b3LFRmp2r6BSVRBP/HprHpc=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: +d8JTMdE/OZF41ywsfLWbdDiFe60dYPx5jzZe3nPzII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Jun 28 17:53:59 2025 GMT Not After : Jul 5 17:53:59 2025 GMT Subject: CN=68602c37-4c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:60:eb:f1:c2:f4:7d:0a:5f:28:79:a7:96: 64:98:14:16:da:e7:f9:e6:10:b2:33:ae:3a:9d:f0: bd:f2:e7:55:7b:0e:4b:c4:54:45:5e:d2:a8:d4:6a: 57:cd:f5:d9:c8:77:e5:87:a8:9a:19:e9:93:b8:e4: e4:68:05:d8:80:6f:66:40:22:44:7b:75:ec:4b:7f: 2b:18:77:ae:a5:0a:0f:ee:9c:37:49:50:d6:b7:97: 81:83:b6:74:65:5d:90:ab:1c:e6:7e:35:91:4c:95: 6f:3a:d9:32:bf:21:eb:33:5c:93:15:7b:95:4f:9c: 13:73:f4:c1:ed:27:8e:0b:8c:e9:cd:84:83:20:64: 32:b6:e2:86:44:c8:f3:e5:00:35:40:78:9e:0e:6f: 75:d3:8d:cd:b4:ed:9e:91:0f:62:ef:6d:a9:3b:d9: 12:f5:2b:39:ec:40:9d:e4:77:00:15:e9:e3:51:3b: 14:83:5d:c2:4e:a8:2f:15:cd:e9:db:e7:c1:1f:4c: c8:33:4e:d3:b4:19:d1:36:7a:fc:e0:79:23:7d:77: 4e:cc:d2:7a:d1:d3:dc:5c:4d:8a:32:42:ba:37:28: b1:10:f3:78:a9:df:bc:13:0a:c1:5a:b3:bc:8b:ac: 37:42:bc:a5:42:df:8c:c4:59:9b:77:f6:d8:1c:a7: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1F:5C:FB:E6:8F:07:A7:37:C4:3F:BC:C4:99:52:B4:D1:2B:F2:8A X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:15:e1:e3:62:2b:fc:f5:2b:49:4f:65:f2:55:61:7d:e0: ea:a0:c3:b6:c4:23:13:08:f8:9f:e6:8d:97:eb:6e:51:38:c6: 76:63:b5:3c:6f:ad:29:cf:3b:62:98:e2:7a:af:95:94:27:96: 4b:03:e5:34:05:7e:00:9e:e2:fd:8b:ac:ab:18:55:d6:e5:e1: ac:17:0f:2b:47:be:40:2e:81:fb:a7:8c:12:b6:25:9d:22:e0: d0:04:cd:fe:69:94:04:16:ce:39:9f:29:e5:4f:72:5c:8a:d8: fa:d9:a4:98:e1:99:4a:8d:cb:1e:44:45:02:5b:4d:67:f8:a7: ac:d9:26:2c:de:67:a4:3c:f7:52:85:7b:42:ea:2d:6e:fa:2c: 09:d4:43:e0:d4:50:d8:f1:17:e2:41:cb:76:26:70:71:18:bd: 29:c8:99:74:ed:34:23:7f:64:7d:33:1f:4a:84:e7:85:09:fb: 20:df:d9:5a:6d:c7:8d:a1:f6:e8:83:84:97:a6:2e:4d:44:e5: 2d:7b:f6:71:cd:aa:be:83:fa:94:74:f1:9c:ec:98:3a:6b:81: fe:61:4b:36:56:9c:3e:1c:99:6f:9b:7d:0b:f0:f9:92:f2:4c: b7:f4:9f:cf:f7:7a:10:b2:ef:2f:5e:ea:d1:de:6c:c0:97:f2: ff:7f:be:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUwNjI4MTc1MzU5WhcNMjUwNzA1MTc1MzU5WjAYMRYwFAYD VQQDEw02ODYwMmMzNy00YzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspxg6/HC9H0KXyh5p5ZkmBQW2uf55hCyM646nfC98udVew5LxFRFXtKo1GpX zfXZyHflh6iaGemTuOTkaAXYgG9mQCJEe3XsS38rGHeupQoP7pw3SVDWt5eBg7Z0 ZV2QqxzmfjWRTJVvOtkyvyHrM1yTFXuVT5wTc/TB7SeOC4zpzYSDIGQytuKGRMjz 5QA1QHieDm91043NtO2ekQ9i722pO9kS9Ss57ECd5HcAFenjUTsUg13CTqgvFc3p 2+fBH0zIM07TtBnRNnr84HkjfXdOzNJ60dPcXE2KMkK6NyixEPN4qd+8EwrBWrO8 i6w3QrylQt+MxFmbd/bYHKeVywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEfXPvm jwenN8Q/vMSZUrTRK/KKMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfIRXh42Ir/PUrSU9l8lVhfeDqoMO2xCMTCPif5o2X625ROMZ2Y7U8 b60pzztimOJ6r5WUJ5ZLA+U0BX4AnuL9i6yrGFXW5eGsFw8rR75ALoH7p4wStiWd IuDQBM3+aZQEFs45nynlT3Jcitj62aSY4ZlKjcseREUCW01n+Kes2SYs3mekPPdS hXtC6i1u+iwJ1EPg1FDY8RfiQct2JnBxGL0pyJl07TQjf2R9Mx9KhOeFCfsg39la bceNofbog4SXpi5NROUte/Zxzaq+g/qUdPGc7Jg6a4H+YUs2Vpw+HJlvm30L8PmS 8ky39J/P93oQsu8vXurR3mzAl/L/f77s -----END CERTIFICATE-----Generated at Mon Jun 30 19:35:44 2025 by rpki-client