$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: DxPgoulNSK609j2n4ABEhELBRz7MIL3TFH3H8mGsBzs= Subject key identifier: 9D:5A:ED:11:9C:FB:15:06:21:32:6A:92:67:EB:7B:6C:40:E3:F0:2D Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0877 Signing time: Wed 02 Jul 2025 20:55:07 +0000 Manifest this update: Wed 02 Jul 2025 20:55:06 +0000 Manifest next update: Wed 09 Jul 2025 20:55:06 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: 18+207Mxe+YmJyJQm1VHmtUm0MGL6Y/vXfuZ392nIYA=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Jul 2 20:55:06 2025 GMT Not After : Jul 9 20:55:06 2025 GMT Subject: CN=68659caa-8905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:c3:15:7b:58:7d:1d:3d:76:02:c3:23:77: 23:95:23:d8:45:05:5b:60:72:93:6f:bd:32:39:6f: 09:56:93:28:bc:0a:f7:92:11:15:bf:50:5c:87:98: 15:4b:f0:5a:0f:98:ac:90:b8:67:8f:25:a1:8f:18: 1e:c8:02:cd:6b:d5:66:0d:eb:59:ba:13:24:96:92: 2b:b7:f5:6c:2e:8d:4f:65:0a:7e:2e:6a:df:c4:fc: cd:26:6a:12:7d:d4:08:9f:bd:8c:47:ed:90:13:14: 89:58:b1:2c:9d:d6:3a:1e:fe:f2:0f:3b:e9:e0:f2: 86:56:c4:c7:17:14:0b:a4:c3:5c:77:aa:67:53:7d: 60:56:93:eb:73:ef:74:d7:80:9e:1f:d5:5f:10:b3: 33:7d:c1:35:36:bb:e6:c4:7b:4c:8c:b5:23:16:96: 76:dc:ff:72:64:bc:b8:c3:5d:4b:88:91:53:55:98: 58:d5:8c:c5:06:ad:1a:f0:ec:b7:03:60:f4:ef:0e: 35:24:2d:09:91:79:f5:5e:f6:ae:96:4c:b1:23:5e: 11:14:ab:2d:a2:86:c7:9a:c7:ea:4a:89:ca:96:f0: 9c:b0:b9:52:8d:12:d6:c1:2f:95:13:52:d9:4f:20: 92:c8:f5:c0:3e:f4:c9:17:8c:98:cf:93:50:3a:ae: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:ED:11:9C:FB:15:06:21:32:6A:92:67:EB:7B:6C:40:E3:F0:2D X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e2:3c:ff:7c:b1:47:ac:c0:a1:fb:b1:44:54:36:56:02:b2: 50:81:7a:ef:fc:3a:04:24:3b:02:91:98:14:25:ec:74:79:0c: d9:39:fd:30:7e:3c:de:b8:8e:b7:dd:b7:58:62:4e:d7:57:5f: 92:4a:a6:05:18:52:59:46:fe:e6:c7:3a:41:df:e1:c9:50:8a: b8:e3:00:aa:91:5c:ac:a1:02:0b:d2:bb:8c:22:3a:b1:6f:7f: b6:de:85:6c:06:5d:1c:43:6d:07:63:73:ef:d2:a6:e7:0b:bb: e6:b5:06:e0:18:95:23:dc:52:df:d8:04:38:ae:05:3d:19:76: d7:8b:c6:5b:43:68:46:40:dd:e0:bf:53:50:f1:d3:bc:57:f4: 1f:56:28:f4:f3:30:c0:22:8d:b4:a3:30:a8:02:e0:8d:55:19: 02:4d:fe:a6:c9:ac:49:8d:60:c9:d8:68:63:e7:65:4e:23:83: d4:76:9a:15:cc:77:d0:70:bd:a3:7e:6e:6d:22:47:0c:44:82: 9f:ba:6d:d7:92:1e:0f:df:a8:17:5d:97:dc:ce:8f:ca:ac:4a: d9:de:75:75:d3:cc:d5:29:0e:24:0c:43:ce:2c:34:fa:86:c4: 6c:79:d7:17:6b:ef:76:65:74:05:96:fd:02:dd:64:1e:18:62: cc:0d:51:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwNzAyMjA1NTA2WhcNMjUwNzA5MjA1NTA2WjAYMRYwFAYD VQQDEw02ODY1OWNhYS04OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUDDFXtYfR09dgLDI3cjlSPYRQVbYHKTb70yOW8JVpMovAr3khEVv1Bch5gV S/BaD5iskLhnjyWhjxgeyALNa9VmDetZuhMklpIrt/VsLo1PZQp+LmrfxPzNJmoS fdQIn72MR+2QExSJWLEsndY6Hv7yDzvp4PKGVsTHFxQLpMNcd6pnU31gVpPrc+90 14CeH9VfELMzfcE1NrvmxHtMjLUjFpZ23P9yZLy4w11LiJFTVZhY1YzFBq0a8Oy3 A2D07w41JC0JkXn1XvaulkyxI14RFKstoobHmsfqSonKlvCcsLlSjRLWwS+VE1LZ TyCSyPXAPvTJF4yYz5NQOq6VswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1a7RGc +xUGITJqkmfre2xA4/AtMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv4jz/fLFHrMCh+7FEVDZWArJQgXrv/DoEJDsCkZgUJex0eQzZOf0w fjzeuI633bdYYk7XV1+SSqYFGFJZRv7mxzpB3+HJUIq44wCqkVysoQIL0ruMIjqx b3+23oVsBl0cQ20HY3Pv0qbnC7vmtQbgGJUj3FLf2AQ4rgU9GXbXi8ZbQ2hGQN3g v1NQ8dO8V/QfVij08zDAIo20ozCoAuCNVRkCTf6myaxJjWDJ2Ghj52VOI4PUdpoV zHfQcL2jfm5tIkcMRIKfum3Xkh4P36gXXZfczo/KrErZ3nV108zVKQ4kDEPOLDT6 hsRsedcXa+92ZXQFlv0C3WQeGGLMDVGI -----END CERTIFICATE-----Generated at Thu Jul 3 14:15:58 2025 by rpki-client