$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: m5xxwqh3SsJMb22u/jKaLiqJIduTggsvTo64X5gyDPM= Subject key identifier: E6:34:19:2C:0C:9E:AF:C1:6F:92:61:63:EB:CC:BC:A4:DD:7A:A1:C5 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 14C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 14AA Signing time: Wed 02 Jul 2025 17:02:13 +0000 Manifest this update: Wed 02 Jul 2025 17:02:12 +0000 Manifest next update: Wed 09 Jul 2025 17:02:12 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: c62e3QhCPSpHqndlsJWh7H7yBG2qwHcv5Bej2ze6rbc=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: KlBzZE2KV7lzBc+tNUy/mqi1akgFY3Eb2SwhsYFxcBI=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: uMpXCjBvKkjgsvqgftGEXm10xWManwhepg98lroRmbE=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 6D0gW6FWFI2VeP1xT9SYxSMf8UjausKvml76wHWoNrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5320 (0x14c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Jul 2 17:02:12 2025 GMT Not After : Jul 9 17:02:12 2025 GMT Subject: CN=68656615-60f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:c0:fd:b2:28:38:37:2a:c9:dc:26:97:26: 99:7f:b5:bf:81:c9:40:54:7e:c4:22:41:1f:a2:a7: 87:63:a3:f1:ab:8c:4f:09:ef:ea:b9:e7:b2:ab:c6: ff:6d:df:b8:a2:b4:c0:f3:16:d8:19:12:f4:69:1a: c5:ac:ec:08:a9:59:92:29:03:7e:97:43:90:72:6b: 23:aa:b8:e2:45:b9:6b:59:53:6f:ff:69:da:d6:70: ae:fd:16:43:56:61:28:c1:87:79:4d:80:aa:22:6d: 51:8c:9d:bd:27:34:8e:91:8b:ee:02:a4:e7:08:67: b4:38:59:12:fb:4d:64:8d:de:8d:6c:60:65:c7:67: 05:64:f5:88:80:aa:4d:15:0e:29:a1:88:da:37:86: 2e:22:86:c2:9b:e6:8f:d6:05:9c:30:bb:91:dc:28: 89:d5:a6:29:70:f8:9d:3d:04:fd:1c:91:19:d7:aa: 63:cb:af:bf:47:0c:78:f7:f8:8d:d4:50:05:f1:2c: 54:b3:7a:a1:5b:bd:df:cd:57:27:75:74:1e:7a:15: cc:cf:4d:37:22:46:77:e0:39:e0:3b:d3:67:85:ba: d0:43:b3:c0:da:81:69:4c:de:0e:7b:b2:2b:d1:7e: 8c:7f:c2:5a:83:50:1d:c7:64:85:c7:43:4b:f3:b9: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:19:2C:0C:9E:AF:C1:6F:92:61:63:EB:CC:BC:A4:DD:7A:A1:C5 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:df:e4:d1:7b:c4:ba:04:cd:2e:56:24:ba:84:41:ee:e7:5c: cc:cb:db:06:83:65:2e:3c:90:3b:ec:30:ba:c0:6e:fe:15:70: f5:64:85:7f:41:2a:96:47:3f:4f:d7:ec:c5:6d:ca:d4:b3:e8: 79:a7:b5:37:95:4d:8b:48:69:4c:84:97:a2:a9:9a:ec:25:ef: c7:a9:db:b2:1d:b6:b5:4f:d2:70:9c:c7:ad:3c:f6:bf:0c:93: e1:a8:44:4c:92:b4:83:45:e2:e3:ea:5c:69:29:35:44:9f:57: db:b2:91:fd:b7:5c:7f:8f:4a:1e:da:c8:b5:1a:db:22:d8:6c: 15:64:38:b3:53:07:9e:e8:24:93:5c:83:5e:de:90:1b:34:4a: 7e:df:cd:ae:21:af:b9:f8:48:a2:ce:cc:b4:d5:9c:d4:b5:cd: a8:93:81:0d:dc:82:7d:27:f6:4a:61:74:01:01:d1:7e:29:57: 44:3d:da:45:76:ed:73:46:bf:06:83:ae:bc:3f:99:90:98:91: 6e:87:07:77:8f:e2:6b:96:eb:64:91:a4:52:27:a6:2a:fc:db: b0:4a:93:46:9f:b4:d1:3c:97:70:a8:be:5c:02:5a:c7:e5:74: 47:87:4c:ea:8c:47:73:34:0d:fb:9e:b2:45:ae:5a:f0:3d:cd: d4:77:22:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUwNzAyMTcwMjEyWhcNMjUwNzA5MTcwMjEyWjAYMRYwFAYD VQQDEw02ODY1NjYxNS02MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NjA/bIoODcqydwmlyaZf7W/gclAVH7EIkEfoqeHY6Pxq4xPCe/queeyq8b/ bd+4orTA8xbYGRL0aRrFrOwIqVmSKQN+l0OQcmsjqrjiRblrWVNv/2na1nCu/RZD VmEowYd5TYCqIm1RjJ29JzSOkYvuAqTnCGe0OFkS+01kjd6NbGBlx2cFZPWIgKpN FQ4poYjaN4YuIobCm+aP1gWcMLuR3CiJ1aYpcPidPQT9HJEZ16pjy6+/Rwx49/iN 1FAF8SxUs3qhW73fzVcndXQeehXMz003IkZ34DngO9NnhbrQQ7PA2oFpTN4Oe7Ir 0X6Mf8Jag1Adx2SFx0NL87kRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY0GSwM nq/Bb5JhY+vMvKTdeqHFMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo3+TRe8S6BM0uViS6hEHu51zMy9sGg2UuPJA77DC6wG7+FXD1ZIV/ QSqWRz9P1+zFbcrUs+h5p7U3lU2LSGlMhJeiqZrsJe/HqduyHba1T9JwnMetPPa/ DJPhqERMkrSDReLj6lxpKTVEn1fbspH9t1x/j0oe2si1Gtsi2GwVZDizUwee6CST XINe3pAbNEp+382uIa+5+Eiizsy01ZzUtc2ok4EN3IJ9J/ZKYXQBAdF+KVdEPdpF du1zRr8Gg668P5mQmJFuhwd3j+JrlutkkaRSJ6Yq/NuwSpNGn7TRPJdwqL5cAlrH 5XRHh0zqjEdzNA37nrJFrlrwPc3UdyLW -----END CERTIFICATE-----Generated at Fri Jul 4 14:19:50 2025 by rpki-client