$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: PXsOQpw5Dym/hyJm92RIMzHhC21tjH4J/W+5oKAIoP4= Subject key identifier: 35:00:9A:B6:4B:58:8C:9E:03:4E:1D:7C:60:BF:0D:16:5A:32:E8:1E Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 9C Signing time: Thu 03 Jul 2025 06:29:58 +0000 Manifest this update: Thu 03 Jul 2025 06:29:58 +0000 Manifest next update: Thu 10 Jul 2025 06:29:58 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: 1qVmfHjgX57zU6ieSH58gayI9e0ROZTGYlM4ZboLNLU=) 2: 0E89AC7651D911F0B26BF882C4F9AE02.roa (hash: nvv0oHQNlQesLC7oMYNtNrlkaktCwof5cKk9/EWjMoo=) 3: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: Fnj7JWgwdsaeofMVq5UcxcqhmE7c7PXdT8GOJ7pFYSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Jul 3 06:29:58 2025 GMT Not After : Jul 10 06:29:58 2025 GMT Subject: CN=68662366-7d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:be:c6:38:f3:8d:17:b5:fd:1d:45:26:9a: 91:4c:ad:59:86:70:81:3c:47:1b:f1:19:4d:30:6d: 82:44:e0:6d:76:eb:e8:f4:98:2c:8b:a0:f4:76:07: ab:b8:71:38:28:c5:65:ee:d7:30:d2:3d:b1:10:d7: 17:32:04:89:e1:8b:01:4d:a6:4b:2e:6d:f6:70:76: a5:e4:b8:e4:db:9b:92:04:18:7b:60:be:24:ba:7c: 0a:48:51:73:62:62:c5:ca:d1:cd:21:c6:7c:0e:d8: b4:f2:2a:90:68:db:3c:27:f8:5f:9e:d0:5b:5e:68: b2:fb:bd:ae:f4:e4:c7:6e:a5:f7:4b:48:63:97:c9: 5b:b7:49:4c:4f:9e:87:ca:45:59:c2:e3:2e:e3:07: f1:92:f2:1e:1e:51:d8:fa:42:f6:d2:c3:ef:b5:71: 10:24:97:7f:d5:71:08:72:8f:67:13:f2:9a:42:80: 89:a3:4d:6e:19:37:f1:85:3b:0a:01:a0:f1:c0:2e: 47:c5:3c:a2:5f:2e:7e:d8:ca:ca:aa:28:be:7c:53: d9:31:ac:8b:1f:14:17:f2:4c:6f:36:3c:20:64:1b: 1a:c9:ed:ef:ac:d8:51:53:74:28:36:31:6a:27:90: 62:21:1f:55:0d:8d:2c:3a:d9:f2:e0:33:de:34:8a: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:9A:B6:4B:58:8C:9E:03:4E:1D:7C:60:BF:0D:16:5A:32:E8:1E X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:5b:c7:31:1f:01:cd:35:5f:2f:33:f6:16:ad:83:c9:79:e6: 1c:65:c3:81:44:63:b1:3d:ea:5d:31:e1:c9:33:23:08:76:c1: 7e:ed:bb:06:f8:77:c0:95:5c:76:28:f2:49:df:95:1b:fe:bb: f2:77:3e:ad:85:ff:ac:bd:ef:4d:31:71:bc:86:2d:e1:77:86: e0:86:a4:1b:63:2e:b6:9b:03:26:98:26:27:ec:20:56:d7:60: f6:b1:a2:95:ac:35:da:26:6d:7d:0c:44:66:2b:df:d1:4f:d0: ec:80:ea:d9:0e:bc:f0:54:7a:78:40:f0:31:3a:30:1a:de:66: 78:f0:21:48:17:0f:c0:e3:8e:21:23:b7:ab:9f:f1:cf:2c:54: 71:4a:ce:79:6f:44:4c:f4:4b:b2:76:b7:46:0e:ef:bf:15:fd: dd:ca:79:c2:d7:0e:97:82:c3:f7:d8:a2:8d:96:60:80:53:b8: 82:3b:02:e1:95:64:27:e9:ce:cb:f7:b4:5d:7f:64:69:83:2e: ad:83:f5:68:f0:8d:dd:d7:35:80:97:b9:60:34:6c:63:d7:6c: e7:65:58:34:30:08:a8:59:7b:30:b2:a6:b3:c2:bd:a2:22:6b: 11:45:70:a3:66:4b:22:fe:1d:f9:e1:35:19:8f:83:63:0e:79: 38:26:a8:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjUwNzAzMDYyOTU4WhcNMjUwNzEwMDYyOTU4WjAYMRYwFAYD VQQDEw02ODY2MjM2Ni03ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7W+xjjzjRe1/R1FJpqRTK1ZhnCBPEcb8RlNMG2CROBtduvo9Jgsi6D0dger uHE4KMVl7tcw0j2xENcXMgSJ4YsBTaZLLm32cHal5Ljk25uSBBh7YL4kunwKSFFz YmLFytHNIcZ8Dti08iqQaNs8J/hfntBbXmiy+72u9OTHbqX3S0hjl8lbt0lMT56H ykVZwuMu4wfxkvIeHlHY+kL20sPvtXEQJJd/1XEIco9nE/KaQoCJo01uGTfxhTsK AaDxwC5HxTyiXy5+2MrKqii+fFPZMayLHxQX8kxvNjwgZBsaye3vrNhRU3QoNjFq J5BiIR9VDY0sOtny4DPeNIpq7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUAmrZL WIyeA04dfGC/DRZaMugeMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3W8cxHwHNNV8vM/YWrYPJeeYcZcOBRGOxPepdMeHJMyMIdsF+7bsG +HfAlVx2KPJJ35Ub/rvydz6thf+sve9NMXG8hi3hd4bghqQbYy62mwMmmCYn7CBW 12D2saKVrDXaJm19DERmK9/RT9DsgOrZDrzwVHp4QPAxOjAa3mZ48CFIFw/A444h I7ern/HPLFRxSs55b0RM9EuydrdGDu+/Ff3dynnC1w6XgsP32KKNlmCAU7iCOwLh lWQn6c7L97Rdf2Rpgy6tg/Vo8I3d1zWAl7lgNGxj12znZVg0MAioWXswsqazwr2i ImsRRXCjZksi/h354TUZj4NjDnk4Jqh7 -----END CERTIFICATE-----Generated at Fri Jul 4 08:18:40 2025 by rpki-client