$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: BAy4Hw0rTMtFECM5kVpLyV+KLFByRadqF9/VxMrIZpQ= Subject key identifier: C3:F3:42:DA:59:2F:F5:FC:FE:0C:00:F2:AD:C5:46:00:1F:C9:93:8D Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 08B9 Signing time: Wed 02 Jul 2025 20:45:13 +0000 Manifest this update: Wed 02 Jul 2025 20:45:12 +0000 Manifest next update: Wed 09 Jul 2025 20:45:12 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: Bn+LckcudOgYQVjBXlmKbS05pey3WQi45rXp1icv5Aw=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Jul 2 20:45:12 2025 GMT Not After : Jul 9 20:45:12 2025 GMT Subject: CN=68659a58-84ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:40:b8:c9:00:82:57:ba:1e:e6:e2:32:3b: aa:4b:60:c6:7e:23:59:de:f6:09:d8:d0:44:63:4f: f6:60:be:2a:45:e2:67:ed:44:dc:3f:6a:79:ff:95: 09:5d:53:00:03:9f:70:5e:29:5a:d8:6c:8f:a8:db: 81:24:cb:14:df:78:f7:7c:5a:ed:ff:15:a5:23:ef: 29:2c:8b:39:7c:ae:ca:1e:f8:85:c6:f5:0a:14:df: fe:25:bd:dc:17:07:bf:36:a0:41:13:fc:af:71:3b: fa:34:31:aa:17:cf:74:df:78:ac:e3:3d:10:f4:63: f0:29:36:8c:59:cf:26:08:a4:63:82:d2:41:96:a9: 29:05:76:57:f4:00:ae:9e:a9:e4:5e:6b:60:dc:66: 6f:ca:ee:2c:75:f0:ec:20:29:80:06:18:9d:ac:bf: 97:98:70:a5:df:9a:09:2f:e9:5e:c1:0b:39:fb:1b: 3e:cf:d3:3b:9d:8c:5d:6b:f4:75:24:13:b3:ae:f8: 70:3c:36:fc:d4:42:59:0f:41:85:dc:37:85:44:8f: 4e:2b:a3:37:d8:85:35:c1:26:7c:0d:78:dc:8d:1c: 5b:4d:1b:9f:93:2b:7a:82:04:02:78:11:26:0e:be: 0c:00:d1:8a:2c:57:18:49:26:7f:5b:de:10:9d:67: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F3:42:DA:59:2F:F5:FC:FE:0C:00:F2:AD:C5:46:00:1F:C9:93:8D X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ec:be:17:ec:dc:e7:b6:07:19:ce:93:8c:4f:1d:7b:1e:a7: a4:57:dc:75:24:f0:44:d5:a0:ee:ca:6a:1c:20:04:6c:90:f2: 9e:ea:44:a1:32:a7:44:1d:fb:8b:24:53:97:e8:3a:cc:67:3a: b6:11:a5:08:81:30:19:e8:02:24:3a:78:c0:8d:ce:8c:d9:68: 08:9f:83:e2:b6:0e:d1:7a:55:43:f2:0d:9f:56:45:f6:60:d8: 80:74:7c:70:ff:b1:b8:91:af:94:68:3f:ec:ba:f7:68:36:fe: 4c:b9:e6:64:d0:ac:8e:ca:8e:36:bb:4a:56:2d:14:5b:80:32: d0:64:4d:50:09:83:f8:55:79:06:c9:5d:2e:b2:5c:8e:70:08: 84:96:cf:3a:7a:10:0a:30:ab:36:3f:23:f0:59:e6:f3:71:cf: 27:87:44:c8:64:67:c5:23:b3:c9:24:35:44:2b:74:6d:59:e1: 47:10:3b:86:2e:be:76:3c:af:ee:f1:8b:ac:1e:c6:09:bf:53: 4d:1d:a3:c3:dc:b6:d4:d7:83:36:5a:13:f9:01:3c:f1:38:e1: 5e:23:63:53:4b:2b:8b:7f:ec:19:7a:d0:cb:fc:5f:fa:12:65: db:49:5e:be:bf:83:77:9d:a8:dd:6f:2f:bc:9b:d1:e6:77:8a: 66:fa:09:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjUwNzAyMjA0NTEyWhcNMjUwNzA5MjA0NTEyWjAYMRYwFAYD VQQDEw02ODY1OWE1OC04NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuglAuMkAgle6HubiMjuqS2DGfiNZ3vYJ2NBEY0/2YL4qReJn7UTcP2p5/5UJ XVMAA59wXila2GyPqNuBJMsU33j3fFrt/xWlI+8pLIs5fK7KHviFxvUKFN/+Jb3c Fwe/NqBBE/yvcTv6NDGqF89033is4z0Q9GPwKTaMWc8mCKRjgtJBlqkpBXZX9ACu nqnkXmtg3GZvyu4sdfDsICmABhidrL+XmHCl35oJL+lewQs5+xs+z9M7nYxda/R1 JBOzrvhwPDb81EJZD0GF3DeFRI9OK6M32IU1wSZ8DXjcjRxbTRufkyt6ggQCeBEm Dr4MANGKLFcYSSZ/W94QnWfYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPzQtpZ L/X8/gwA8q3FRgAfyZONMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA47L4X7NzntgcZzpOMTx17HqekV9x1JPBE1aDuymocIARskPKe6kSh MqdEHfuLJFOX6DrMZzq2EaUIgTAZ6AIkOnjAjc6M2WgIn4Pitg7RelVD8g2fVkX2 YNiAdHxw/7G4ka+UaD/suvdoNv5MueZk0KyOyo42u0pWLRRbgDLQZE1QCYP4VXkG yV0uslyOcAiEls86ehAKMKs2PyPwWebzcc8nh0TIZGfFI7PJJDVEK3RtWeFHEDuG Lr52PK/u8YusHsYJv1NNHaPD3LbU14M2WhP5ATzxOOFeI2NTSyuLf+wZetDL/F/6 EmXbSV6+v4N3najdby+8m9Hmd4pm+gnu -----END CERTIFICATE-----Generated at Fri Jul 4 18:56:12 2025 by rpki-client