$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: aJo1r1lyhhKL+G0aVeRdE6SUVYqHVeeMWcf5FGxo4Ek= Subject key identifier: 8E:F2:FC:6F:2B:C9:C9:C4:70:83:F6:F4:5F:73:23:B0:50:B1:3A:0A Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0C80 Signing time: Sat 28 Jun 2025 18:00:25 +0000 Manifest this update: Sat 28 Jun 2025 18:00:24 +0000 Manifest next update: Sat 05 Jul 2025 18:00:24 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: Lx4CIFs8L2c9glZAIn1Vy2pLYwLyAlA+LWgOmtRnsf0=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Jun 28 18:00:24 2025 GMT Not After : Jul 5 18:00:24 2025 GMT Subject: CN=68602db8-e177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cb:d7:66:89:97:df:31:1d:66:11:af:ca:19: 8b:56:91:a9:30:4e:d4:b8:a6:e9:f7:23:de:09:44: 7b:ed:54:19:38:e0:1a:32:19:12:24:4f:ba:34:1f: b4:60:b7:d7:ad:d2:60:2a:79:dc:a3:23:8b:9f:e3: bc:66:97:00:00:13:b7:19:47:f9:9b:27:0f:12:2c: 25:58:11:55:b0:7d:fc:7d:54:96:91:be:72:03:8d: c8:36:9e:99:4a:6d:a6:e3:55:c4:40:51:68:dc:e9: 85:97:72:7b:86:db:99:e2:da:55:55:30:eb:40:51: bc:58:c6:69:da:10:65:c9:0f:98:67:fb:86:9e:04: 14:80:3e:da:cc:52:35:47:7b:7e:70:7a:76:23:d4: 1f:60:cb:40:e4:9c:f1:fb:1e:8d:1c:9f:c8:6f:14: f4:91:bc:e0:90:31:f1:01:fa:a3:4e:6f:47:6d:2a: 11:89:33:7c:e7:15:07:01:fb:74:a3:7b:6a:e7:e6: 0c:be:ed:58:dc:f3:67:89:46:16:f6:c1:60:db:eb: 96:4e:a3:ea:09:be:f7:a1:f1:3a:65:65:8a:52:a9: 92:b5:fb:e2:04:a8:9f:42:9d:58:62:31:b5:48:5b: 98:38:60:44:a4:ce:36:82:12:fa:e9:fb:c9:87:9b: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F2:FC:6F:2B:C9:C9:C4:70:83:F6:F4:5F:73:23:B0:50:B1:3A:0A X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c6:45:ab:27:f7:b6:5a:f6:04:63:cd:6e:6a:2a:70:8b:ab: df:d5:f2:8f:2c:5c:29:0d:57:47:f1:22:fd:5f:9a:7a:a2:36: 27:a3:18:31:d2:9c:a3:21:de:b2:61:9f:46:7e:06:9c:d7:d8: 93:f8:b8:21:99:89:c7:eb:af:a0:78:d7:1a:ea:41:03:9d:58: 54:34:06:b9:6a:3c:ac:f2:bf:4a:95:69:3e:64:99:42:6b:3e: d9:79:37:1d:95:dd:cd:19:ae:16:de:fa:b1:36:a6:58:3f:0c: f1:ef:f5:b7:63:09:02:1e:f7:69:5d:f9:33:8b:8b:ed:aa:69: c0:dc:18:b5:1f:fc:7d:f2:84:91:4d:d7:f0:06:8f:8e:c0:29: 97:a9:31:99:a4:82:8c:94:cd:03:95:9d:9b:d5:73:94:48:ba: 7f:4e:52:b6:8b:75:f0:66:0d:f5:2e:ef:c5:fb:67:0e:bf:30: 64:1c:f9:9b:a7:b3:a4:cb:d8:b0:e3:db:f7:27:57:65:93:a1: 12:7b:93:bb:fd:c1:91:04:49:d0:2b:d7:6a:61:dc:12:23:2d: 7a:69:a1:df:07:94:ba:e1:b4:34:e5:3a:c5:76:4a:6b:23:3d: c7:f5:7c:09:ce:fd:cf:af:00:63:d0:a3:e6:41:a5:c1:0b:e1: 3c:03:80:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwNjI4MTgwMDI0WhcNMjUwNzA1MTgwMDI0WjAYMRYwFAYD VQQDEw02ODYwMmRiOC1lMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cvXZomX3zEdZhGvyhmLVpGpME7UuKbp9yPeCUR77VQZOOAaMhkSJE+6NB+0 YLfXrdJgKnncoyOLn+O8ZpcAABO3GUf5mycPEiwlWBFVsH38fVSWkb5yA43INp6Z Sm2m41XEQFFo3OmFl3J7htuZ4tpVVTDrQFG8WMZp2hBlyQ+YZ/uGngQUgD7azFI1 R3t+cHp2I9QfYMtA5Jzx+x6NHJ/IbxT0kbzgkDHxAfqjTm9HbSoRiTN85xUHAft0 o3tq5+YMvu1Y3PNniUYW9sFg2+uWTqPqCb73ofE6ZWWKUqmStfviBKifQp1YYjG1 SFuYOGBEpM42ghL66fvJh5vdHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7y/G8r ycnEcIP29F9zI7BQsToKMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBexkWrJ/e2WvYEY81uaipwi6vf1fKPLFwpDVdH8SL9X5p6ojYnoxgx 0pyjId6yYZ9Gfgac19iT+LghmYnH66+geNca6kEDnVhUNAa5ajys8r9KlWk+ZJlC az7ZeTcdld3NGa4W3vqxNqZYPwzx7/W3YwkCHvdpXfkzi4vtqmnA3Bi1H/x98oSR TdfwBo+OwCmXqTGZpIKMlM0DlZ2b1XOUSLp/TlK2i3XwZg31Lu/F+2cOvzBkHPmb p7Oky9iw49v3J1dlk6ESe5O7/cGRBEnQK9dqYdwSIy16aaHfB5S64bQ05TrFdkpr Iz3H9XwJzv3PrwBj0KPmQaXBC+E8A4B0 -----END CERTIFICATE-----Generated at Mon Jun 30 09:48:55 2025 by rpki-client