$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: VKn+dSP/8xVD5/A6hH8Uh6tmFvDmQar+FeDnPstXWxU= Subject key identifier: E3:65:68:F0:06:57:E1:09:32:49:9C:A2:DE:89:B0:D0:87:30:9C:36 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B1E Signing time: Wed 02 Jul 2025 16:25:04 +0000 Manifest this update: Wed 02 Jul 2025 16:25:04 +0000 Manifest next update: Wed 09 Jul 2025 16:25:04 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: PZt/78icEGIRuPfGCWTmXfLhW0It3firnE2aIEjZMA4=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6966 (0x1b36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Jul 2 16:25:04 2025 GMT Not After : Jul 9 16:25:04 2025 GMT Subject: CN=68655d60-7c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:53:75:b0:43:1a:ad:76:5c:fd:1e:25:ef: a2:7c:0e:62:d5:73:5f:39:07:65:97:83:a5:0c:53: 18:06:9d:9b:cd:5f:55:2d:47:45:93:8b:e0:74:2b: 11:8d:85:4c:27:b0:1d:5d:0e:6d:0c:81:1e:78:10: 82:61:74:08:b5:e4:63:57:ab:d1:f2:fb:b1:91:e8: 81:c5:c5:f6:d7:88:1c:ad:5a:70:7a:9a:ad:c0:a2: 65:85:62:44:0a:82:c0:54:59:48:4c:d0:c5:10:7a: 00:5c:6d:ea:5c:e9:77:66:c4:55:c8:85:0f:95:da: b2:a2:28:9e:fe:a4:ae:fa:49:0d:0e:9c:5b:61:92: 34:21:ff:c9:49:1e:50:6d:86:f1:19:26:e0:b9:91: ea:c6:56:b7:fc:7c:34:fa:58:96:6d:95:70:a7:3b: 18:d5:54:22:00:5e:0f:7f:ed:48:67:3a:cd:55:79: 96:cd:c3:e7:0d:5d:5b:0f:c2:b9:45:a8:6c:b0:ab: 25:b8:44:7b:0e:02:3c:aa:a2:7f:38:68:37:88:b4: 3d:54:4c:61:44:6e:96:15:01:8c:44:8a:20:b0:49: 79:5f:3b:b4:e1:14:24:af:32:b1:97:68:ee:34:4b: 64:e1:e0:67:f8:ab:02:45:3f:b1:12:b8:94:0c:fb: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:68:F0:06:57:E1:09:32:49:9C:A2:DE:89:B0:D0:87:30:9C:36 X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:5a:ba:93:cd:51:ae:d6:42:ae:7a:ea:54:dc:c1:a6:bb:61: 64:31:fc:61:5b:05:9e:ef:78:08:0a:be:f5:d5:5e:11:d2:8b: 00:30:39:5a:9b:f3:cc:0d:4f:fa:f6:2b:1c:bd:ec:0d:db:f0: b3:48:bf:3c:20:2f:27:ad:1e:30:a6:f5:c1:36:40:1b:2e:4c: 05:55:20:4a:01:c1:ed:09:2a:89:37:7f:98:a1:11:a5:59:e8: 0c:db:d5:d9:eb:52:77:61:f2:35:88:87:ec:d7:22:bc:7a:9f: 84:82:ed:ad:08:68:a4:f5:04:a6:7a:ff:62:67:67:12:a8:87: 56:58:b1:14:d5:34:27:e5:04:12:10:e3:bf:e9:75:16:b6:7c: f0:06:7e:4f:82:45:43:8a:5d:1b:e2:d5:41:1d:92:6f:ac:27: 41:51:28:98:dd:ff:72:84:68:f6:94:58:1a:e1:6d:28:fa:e1: ac:38:0a:10:95:81:c1:ae:85:ef:d2:43:90:09:b6:74:f5:d6: f9:31:54:ea:f4:f6:49:ef:bb:ad:eb:e6:91:84:09:76:3a:46: a0:fe:02:4d:2a:50:96:c3:a1:29:93:16:b4:a1:74:94:51:48: f8:da:1f:02:35:ae:08:a2:53:d7:45:d3:37:85:3d:6b:f5:99: a1:fd:db:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUwNzAyMTYyNTA0WhcNMjUwNzA5MTYyNTA0WjAYMRYwFAYD VQQDEw02ODY1NWQ2MC03YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysxTdbBDGq12XP0eJe+ifA5i1XNfOQdll4OlDFMYBp2bzV9VLUdFk4vgdCsR jYVMJ7AdXQ5tDIEeeBCCYXQIteRjV6vR8vuxkeiBxcX214gcrVpwepqtwKJlhWJE CoLAVFlITNDFEHoAXG3qXOl3ZsRVyIUPldqyoiie/qSu+kkNDpxbYZI0If/JSR5Q bYbxGSbguZHqxla3/Hw0+liWbZVwpzsY1VQiAF4Pf+1IZzrNVXmWzcPnDV1bD8K5 RahssKsluER7DgI8qqJ/OGg3iLQ9VExhRG6WFQGMRIogsEl5Xzu04RQkrzKxl2ju NEtk4eBn+KsCRT+xEriUDPsOLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONlaPAG V+EJMkmcot6JsNCHMJw2MB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJWrqTzVGu1kKueupU3MGmu2FkMfxhWwWe73gICr711V4R0osAMDla m/PMDU/69iscvewN2/CzSL88IC8nrR4wpvXBNkAbLkwFVSBKAcHtCSqJN3+YoRGl WegM29XZ61J3YfI1iIfs1yK8ep+Egu2tCGik9QSmev9iZ2cSqIdWWLEU1TQn5QQS EOO/6XUWtnzwBn5PgkVDil0b4tVBHZJvrCdBUSiY3f9yhGj2lFga4W0o+uGsOAoQ lYHBroXv0kOQCbZ09db5MVTq9PZJ77ut6+aRhAl2Okag/gJNKlCWw6Epkxa0oXSU UUj42h8CNa4IolPXRdM3hT1r9Zmh/du3 -----END CERTIFICATE-----Generated at Wed Jul 2 22:37:09 2025 by rpki-client