$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: 0MnsAxViZLK0drxwgXWYfBaAwN43eqAZlfxo1hYqG5o= Subject key identifier: D9:78:9F:DA:C3:7D:AD:6B:67:72:71:9A:47:4A:F2:FC:DF:F9:F6:87 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 0565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 0564 Signing time: Wed 02 Jul 2025 23:38:57 +0000 Manifest this update: Wed 02 Jul 2025 23:38:57 +0000 Manifest next update: Wed 09 Jul 2025 23:38:57 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: 4N53gjvHR4ljovGW5cd+na5bvPy6PjShqfK3GdkzDLI=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Jul 2 23:38:57 2025 GMT Not After : Jul 9 23:38:57 2025 GMT Subject: CN=6865c311-4ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:08:70:1d:93:3b:6c:a3:6b:6b:0b:20:dc: 2a:1f:e5:f1:b6:2a:4d:d7:5e:1a:68:ab:d3:9e:19: fb:af:bb:d4:52:33:a4:97:45:cc:79:db:fc:a5:65: e0:61:71:fd:34:c9:f6:fc:1f:2e:7a:67:a6:92:bf: 56:88:00:d4:19:db:af:66:b3:c9:9f:2c:81:89:0a: 3b:23:42:1c:09:36:76:d3:dd:34:0d:6c:7e:69:08: 16:0a:85:0a:ac:9c:06:03:8a:ad:9d:ad:05:7b:b6: 82:c9:aa:e0:8e:cd:7c:cb:da:3e:a1:9d:9f:3b:c2: 61:68:52:7d:43:ac:14:ce:66:bb:aa:28:ce:1c:bc: 54:bb:06:79:ac:88:2a:42:83:5a:a0:76:ea:d2:c1: 9d:c5:29:c2:41:91:49:4d:c8:7d:71:07:15:19:23: f3:d6:9d:8b:90:be:21:c7:94:21:cb:f6:fa:c9:e6: 3a:2a:16:9d:a3:9e:5c:c8:3b:6b:3b:2f:c2:ec:05: 11:80:52:8e:e2:97:d8:b0:74:50:54:fa:0b:68:28: da:bc:6b:da:83:db:4d:16:17:08:f0:bd:59:a5:5a: fc:14:30:e0:a3:e4:77:0e:3e:40:aa:b9:76:be:98: ed:ed:2b:57:b2:04:19:3a:eb:2d:86:a0:d0:4b:ec: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:78:9F:DA:C3:7D:AD:6B:67:72:71:9A:47:4A:F2:FC:DF:F9:F6:87 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b5:ae:d9:39:a2:2d:38:1d:bb:94:96:77:ed:a1:44:f7:64: 53:ef:6f:a4:04:03:50:6b:e2:90:d9:ad:49:b4:f2:e8:5e:66: 72:93:be:09:45:cc:4a:50:cc:7a:82:7a:97:9f:a7:37:3a:fd: 8d:8b:96:e6:f9:d0:9f:3d:b6:2b:dc:4b:ff:08:61:45:1b:e8: 4b:37:16:2f:4f:7d:10:6e:1a:56:e8:59:e1:ae:17:34:13:63: b7:b4:93:5f:64:b6:60:db:f9:7e:ab:e4:27:77:74:7a:4f:53: 80:fe:0a:a5:bc:59:43:a4:12:d3:bf:01:14:eb:ec:36:f6:28: cc:58:c3:1b:f2:ca:87:a6:13:06:1b:7b:61:bf:08:6c:a2:d7: a4:5b:f1:6d:09:3b:55:08:75:51:ca:98:a4:1f:97:c4:a3:32: 13:50:b9:38:31:e1:cf:c6:c1:5f:4e:18:78:be:23:aa:fe:7a: 0c:cc:8f:7a:d7:32:b8:66:9e:22:4b:ff:fb:c0:59:97:46:23: 07:65:8d:7d:87:08:ac:62:aa:0c:f2:fe:e5:4e:c9:2f:00:41: 11:86:c0:c0:06:b9:21:f4:42:2c:cc:71:3c:e8:3b:97:83:ea: fb:e6:08:d9:22:59:61:40:fd:bb:9f:fc:d3:53:5a:21:cc:df: a3:d7:23:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUwNzAyMjMzODU3WhcNMjUwNzA5MjMzODU3WjAYMRYwFAYD VQQDEw02ODY1YzMxMS00ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0EIcB2TO2yja2sLINwqH+XxtipN114aaKvTnhn7r7vUUjOkl0XMedv8pWXg YXH9NMn2/B8uememkr9WiADUGduvZrPJnyyBiQo7I0IcCTZ20900DWx+aQgWCoUK rJwGA4qtna0Fe7aCyargjs18y9o+oZ2fO8JhaFJ9Q6wUzma7qijOHLxUuwZ5rIgq QoNaoHbq0sGdxSnCQZFJTch9cQcVGSPz1p2LkL4hx5Qhy/b6yeY6Khado55cyDtr Oy/C7AURgFKO4pfYsHRQVPoLaCjavGvag9tNFhcI8L1ZpVr8FDDgo+R3Dj5Aqrl2 vpjt7StXsgQZOusthqDQS+z2NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl4n9rD fa1rZ3JxmkdK8vzf+faHMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUta7ZOaItOB27lJZ37aFE92RT72+kBANQa+KQ2a1JtPLoXmZyk74J RcxKUMx6gnqXn6c3Ov2Ni5bm+dCfPbYr3Ev/CGFFG+hLNxYvT30QbhpW6Fnhrhc0 E2O3tJNfZLZg2/l+q+Qnd3R6T1OA/gqlvFlDpBLTvwEU6+w29ijMWMMb8sqHphMG G3thvwhsotekW/FtCTtVCHVRypikH5fEozITULk4MeHPxsFfThh4viOq/noMzI96 1zK4Zp4iS//7wFmXRiMHZY19hwisYqoM8v7lTskvAEERhsDABrkh9EIszHE86DuX g+r75gjZIllhQP27n/zTU1ohzN+j1yPH -----END CERTIFICATE-----Generated at Fri Jul 4 18:39:32 2025 by rpki-client