$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: e+tvXGHnnrx3joeQgCZC75xV1+hQBfLRVJWLQsWH3pg= Subject key identifier: C9:1D:57:96:3A:33:DB:4E:1E:39:CC:EC:08:D4:BA:8F:7A:E8:F2:38 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 0643 Signing time: Wed 02 Jul 2025 22:56:50 +0000 Manifest this update: Wed 02 Jul 2025 22:56:50 +0000 Manifest next update: Wed 09 Jul 2025 22:56:50 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: /AldF0LTeJEvgEnRLtD0m1mmwvU3sQTxi44n04rI4I4=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Jul 2 22:56:50 2025 GMT Not After : Jul 9 22:56:50 2025 GMT Subject: CN=6865b932-fece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:3e:f0:53:01:65:b8:90:3a:e3:6b:3d:a8: 4f:f6:36:57:f3:e4:7f:9c:c8:09:20:23:55:e4:7a: ae:13:4d:c4:85:48:73:6e:c0:a1:78:6c:b7:3f:12: 61:39:d7:be:b9:7b:e4:a8:10:46:b7:f8:98:3f:6f: 5d:54:37:6a:26:df:1a:5e:39:0a:05:ad:ec:2e:28: 6a:4d:ca:ac:6c:5e:ba:49:18:ec:2f:af:c9:b2:71: b2:67:59:79:d2:e0:f4:3e:11:73:7f:a8:42:74:b7: 37:f9:32:b0:50:ca:24:ab:dc:c8:d7:eb:ff:f9:30: 07:e0:59:d4:90:77:f5:f6:f2:7c:1c:4e:67:8e:46: 5a:79:63:11:a1:9c:a0:5f:b5:51:5d:e4:65:85:7a: fa:3f:75:f3:19:41:b0:cc:23:e3:86:22:05:64:fa: b9:59:a2:f1:a2:72:6b:fa:fc:6b:8d:e2:e7:d7:b4: 4f:9e:51:57:10:d4:58:a1:e7:eb:6d:ad:49:6f:5d: be:0e:92:1a:89:5e:45:c6:7a:e5:f0:8d:9f:e9:d1: 9c:87:c3:c8:03:16:5f:82:0b:34:fd:ff:7b:0d:d7: ea:49:5e:fc:f5:a6:6a:15:53:a4:cd:de:24:67:7c: 80:f2:24:62:3a:90:4c:87:29:19:bf:f1:67:f8:65: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1D:57:96:3A:33:DB:4E:1E:39:CC:EC:08:D4:BA:8F:7A:E8:F2:38 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5e:44:44:05:f5:0d:84:2b:f5:7a:71:39:6a:3b:6e:21:73: 62:08:c8:0c:49:2c:a3:84:cb:96:27:07:e9:65:c9:55:68:eb: cd:48:d1:70:88:5f:a3:a7:7f:48:62:ed:36:2f:29:ea:60:b0: fb:ed:05:b8:ef:d7:3b:b1:34:e6:4c:b0:59:24:3c:20:a0:f4: 2f:9d:f6:c9:18:f5:0b:71:20:f4:7f:89:b7:e8:01:03:a2:dc: a1:2c:37:5e:e3:91:49:48:6c:fd:06:a9:aa:f3:f4:48:8a:39: 1e:0a:00:e9:27:62:17:46:b0:6b:1a:93:8b:23:e3:97:7f:4a: 32:c6:56:ca:c3:59:8a:14:1a:e8:ab:91:ab:7e:d0:f1:73:3b: 3a:03:6f:74:5d:72:65:bd:2a:fe:85:ce:f8:2b:5f:66:b9:7f: bc:3f:c6:93:1d:15:55:f4:b9:55:78:08:07:15:6d:cb:8c:8d: c6:e7:a6:84:2d:b6:28:ee:94:84:aa:d1:4f:56:13:9d:c0:9b: fc:e7:75:c4:9d:7f:eb:df:6c:62:b9:10:de:f4:1e:d7:a6:b2: d3:2f:53:eb:c9:e7:38:c8:6c:5c:a5:44:95:9c:18:91:db:24: 94:f4:3f:09:4f:09:c3:cd:b2:5b:c6:9c:78:8a:72:a3:da:1e: ad:ce:19:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUwNzAyMjI1NjUwWhcNMjUwNzA5MjI1NjUwWjAYMRYwFAYD VQQDEw02ODY1YjkzMi1mZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobI+8FMBZbiQOuNrPahP9jZX8+R/nMgJICNV5HquE03EhUhzbsCheGy3PxJh Ode+uXvkqBBGt/iYP29dVDdqJt8aXjkKBa3sLihqTcqsbF66SRjsL6/JsnGyZ1l5 0uD0PhFzf6hCdLc3+TKwUMokq9zI1+v/+TAH4FnUkHf19vJ8HE5njkZaeWMRoZyg X7VRXeRlhXr6P3XzGUGwzCPjhiIFZPq5WaLxonJr+vxrjeLn17RPnlFXENRYoefr ba1Jb12+DpIaiV5Fxnrl8I2f6dGch8PIAxZfggs0/f97DdfqSV789aZqFVOkzd4k Z3yA8iRiOpBMhykZv/Fn+GWLCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkdV5Y6 M9tOHjnM7AjUuo966PI4MB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLXkREBfUNhCv1enE5ajtuIXNiCMgMSSyjhMuWJwfpZclVaOvNSNFw iF+jp39IYu02LynqYLD77QW479c7sTTmTLBZJDwgoPQvnfbJGPULcSD0f4m36AED otyhLDde45FJSGz9Bqmq8/RIijkeCgDpJ2IXRrBrGpOLI+OXf0oyxlbKw1mKFBro q5GrftDxczs6A290XXJlvSr+hc74K19muX+8P8aTHRVV9LlVeAgHFW3LjI3G56aE LbYo7pSEqtFPVhOdwJv853XEnX/r32xiuRDe9B7XprLTL1Pryec4yGxcpUSVnBiR 2ySU9D8JTwnDzbJbxpx4inKj2h6tzhlU -----END CERTIFICATE-----Generated at Thu Jul 3 06:18:33 2025 by rpki-client