$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: bqJkHSiiESaV4tbLFsc0G7h3rciZ93hGBpqfDXlskyI= Subject key identifier: 08:A2:FB:81:C5:E2:59:04:7D:26:C2:08:63:5D:AB:FD:AD:3B:E5:06 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 09C9 Signing time: Wed 02 Jul 2025 20:12:15 +0000 Manifest this update: Wed 02 Jul 2025 20:12:14 +0000 Manifest next update: Wed 09 Jul 2025 20:12:14 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: 9MkhV824HSAEaOkCy2BPRFgxYDULrRqkIk1UbsqSFEE=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Jul 2 20:12:14 2025 GMT Not After : Jul 9 20:12:14 2025 GMT Subject: CN=6865929f-45c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:61:13:a3:be:60:40:fe:86:a7:ef:ad:1b: b2:22:9c:ac:64:46:6b:9b:62:10:39:06:5d:d3:2f: 2c:13:d0:7a:62:5a:3d:18:71:d1:94:62:f4:9d:aa: 27:77:e1:6d:47:fd:b1:32:ba:c3:29:0f:d4:04:d2: db:dc:31:2b:1b:ca:23:57:de:57:c6:dd:96:bf:5c: 11:2a:4e:96:11:6b:a9:b4:7b:cd:57:c0:28:16:94: 36:90:06:5c:23:11:df:a5:84:d6:e8:12:24:bf:0c: 10:3a:74:26:0d:e7:23:80:fa:ff:a3:6d:6f:48:ec: 02:9e:8c:f1:3e:18:6d:4f:4f:c8:ef:79:54:25:b1: 53:e7:05:2b:a8:da:e0:ad:63:d5:ff:38:e1:6e:b8: e4:47:2b:5e:62:94:32:d3:f1:2a:33:b2:de:5a:d0: 94:84:cb:9b:c0:d1:70:f3:f8:10:1e:20:1b:3b:8a: 92:fe:b2:64:c5:73:45:bd:33:77:f4:c4:dd:e3:1a: a7:97:0f:29:c8:75:a3:d7:99:bd:fd:6f:79:a3:ee: 46:10:d3:26:c9:ed:eb:bb:aa:4c:28:48:37:34:7a: 84:e8:d0:1e:97:0a:e2:08:52:f1:64:00:81:c8:ab: ac:08:0a:91:20:34:28:4a:db:51:3d:b8:68:77:23: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A2:FB:81:C5:E2:59:04:7D:26:C2:08:63:5D:AB:FD:AD:3B:E5:06 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5e:a1:c0:6b:bb:6d:1a:52:cf:40:65:c7:d8:2d:c2:83:48: 0a:63:b4:5b:8d:0f:4b:c2:83:3f:69:c3:1d:f1:1c:7b:fd:9d: 60:7f:62:74:3a:5c:2b:d4:2d:7d:bf:42:30:d5:48:12:e6:92: f3:75:92:3e:76:0a:ea:22:fe:0c:e5:dd:9f:1b:48:3b:c5:a0: 77:49:d1:45:a0:f5:82:dd:97:6c:e6:cb:58:89:3c:e6:15:b9: 6f:5d:a5:ae:0d:0b:18:ab:a7:5e:dd:37:6a:9d:0a:ac:56:44: 14:18:6a:eb:d3:58:04:e8:c6:93:a9:c8:98:e2:27:3c:ee:a7: f8:d3:06:76:1e:de:10:3b:e9:ee:fc:d7:90:fe:b5:2e:8d:6e: 53:f0:93:69:28:db:f4:cf:b3:e6:e2:01:18:92:0b:66:c6:bc: cd:e4:c0:ef:a0:58:45:13:12:d8:38:4e:5e:57:c7:50:ae:ff: dd:ef:15:4d:e6:d8:47:a2:e6:07:3a:99:09:1e:80:1a:30:78: 72:f4:14:1d:8d:2b:c6:39:99:e8:dd:3c:76:20:42:87:b4:55: fb:79:32:bf:10:80:46:96:23:15:78:1f:81:bb:dd:f9:0c:3d: 3d:db:a1:d6:eb:5f:ae:db:58:be:56:36:41:8d:93:70:d7:a6: 18:2c:ce:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUwNzAyMjAxMjE0WhcNMjUwNzA5MjAxMjE0WjAYMRYwFAYD VQQDEw02ODY1OTI5Zi00NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupRhE6O+YED+hqfvrRuyIpysZEZrm2IQOQZd0y8sE9B6Ylo9GHHRlGL0naon d+FtR/2xMrrDKQ/UBNLb3DErG8ojV95Xxt2Wv1wRKk6WEWuptHvNV8AoFpQ2kAZc IxHfpYTW6BIkvwwQOnQmDecjgPr/o21vSOwCnozxPhhtT0/I73lUJbFT5wUrqNrg rWPV/zjhbrjkRyteYpQy0/EqM7LeWtCUhMubwNFw8/gQHiAbO4qS/rJkxXNFvTN3 9MTd4xqnlw8pyHWj15m9/W95o+5GENMmye3ru6pMKEg3NHqE6NAelwriCFLxZACB yKusCAqRIDQoSttRPbhodyOeCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAii+4HF 4lkEfSbCCGNdq/2tO+UGMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIXqHAa7ttGlLPQGXH2C3Cg0gKY7RbjQ9LwoM/acMd8Rx7/Z1gf2J0 Olwr1C19v0Iw1UgS5pLzdZI+dgrqIv4M5d2fG0g7xaB3SdFFoPWC3Zds5stYiTzm FblvXaWuDQsYq6de3TdqnQqsVkQUGGrr01gE6MaTqciY4ic87qf40wZ2Ht4QO+nu /NeQ/rUujW5T8JNpKNv0z7Pm4gEYkgtmxrzN5MDvoFhFExLYOE5eV8dQrv/d7xVN 5thHouYHOpkJHoAaMHhy9BQdjSvGOZno3Tx2IEKHtFX7eTK/EIBGliMVeB+Bu935 DD0926HW61+u21i+VjZBjZNw16YYLM51 -----END CERTIFICATE-----Generated at Thu Jul 3 01:13:30 2025 by rpki-client