$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: +gjipjjPFTjWyRDJDCLh7uCXJWU5xAr23mVZL7LACJ0= Subject key identifier: 31:69:D5:1F:AB:78:1A:08:05:B3:B3:B9:FB:AB:B8:BD:F9:2A:44:08 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: A1 Signing time: Thu 03 Jul 2025 06:55:08 +0000 Manifest this update: Thu 03 Jul 2025 06:55:07 +0000 Manifest next update: Thu 10 Jul 2025 06:55:07 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: xIdCKmQOgo7fUjnUYPZKMGFJzZbBcj9k6PT4uPSfLrw=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 5: 6AA381F62A8011F087319941C4F9AE02.roa (hash: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs=) 6: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Jul 3 06:55:07 2025 GMT Not After : Jul 10 06:55:07 2025 GMT Subject: CN=6866294c-8758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:d0:74:9e:ed:eb:ef:6b:18:3c:7f:e8:a6: 29:58:89:9a:c8:04:51:69:dd:80:e6:f2:ec:24:cf: a9:b4:12:9c:0e:33:c7:ae:c6:4c:a9:d7:a2:f4:e5: 01:d9:ba:36:ae:df:24:a5:71:9e:b8:3b:87:3c:1a: 1c:44:ed:5a:46:81:8d:be:93:a6:11:f4:a5:4a:f2: ea:99:a0:c8:1e:0e:ed:55:d9:63:92:4d:cd:a7:19: 72:99:3d:23:ce:73:72:9f:94:64:2e:5b:ef:ac:ce: 5d:07:c8:55:26:df:aa:a5:0f:09:8f:79:52:16:b3: 85:ab:7f:4e:86:d7:18:c2:d0:eb:19:dd:1a:41:2f: 63:4a:e0:1f:be:ab:8c:23:6b:0e:f7:b4:ea:22:99: ac:0b:85:ad:5f:b6:31:48:3c:14:c6:69:ab:3c:f2: de:21:7f:58:1f:6c:90:56:51:4a:54:3b:3c:e6:27: 78:75:d7:b0:75:cc:5d:d6:6b:30:22:92:fe:5b:e4: 75:18:0e:e2:a9:b5:bb:73:29:52:e4:bf:76:c4:95: 71:8b:41:bb:9a:55:e4:7a:ba:aa:67:b0:80:c9:96: 91:9a:bc:70:4d:79:c2:bd:41:eb:c1:e2:cf:ba:68: 34:98:13:85:d8:be:35:ba:a1:f5:b4:6a:91:a4:75: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:69:D5:1F:AB:78:1A:08:05:B3:B3:B9:FB:AB:B8:BD:F9:2A:44:08 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d6:4e:ee:d7:38:5c:0c:a0:b9:2f:4f:ca:c1:cf:c1:11:dd: 43:d3:d3:9b:4a:12:9a:0f:71:66:2a:ce:cc:1b:ca:9a:88:63: 8f:be:04:d2:35:92:d8:64:4b:da:57:00:72:38:7a:44:04:63: fb:c8:64:63:4e:22:6d:07:c5:ed:9d:83:23:61:55:e5:47:4c: d3:f8:fa:c1:39:3c:46:90:13:5f:95:db:ca:da:f7:38:92:dd: e5:37:30:e0:3c:9b:b9:49:8e:f4:01:10:06:3e:56:81:8f:82: bc:43:43:51:52:82:02:f9:84:64:67:c9:72:e1:41:08:8b:14: a2:0f:0c:f1:07:f8:42:5b:bb:88:aa:38:80:e4:a2:5b:b8:00: 9f:43:9d:39:df:5f:02:de:f3:a8:1a:20:9c:95:87:52:7e:ee: 8c:9d:6c:b5:5c:00:df:e3:cd:ba:87:5a:48:28:a1:ae:79:c6: 4d:7f:6c:16:f9:1c:1f:c6:2a:71:14:9d:62:47:3f:fc:a6:dc: 39:47:ab:4d:fb:13:17:94:3d:23:7c:d8:31:3e:f7:68:79:dd: f0:ef:a4:71:4e:2b:7b:d0:8f:24:cd:ec:10:5a:4b:6c:f3:a8: 33:78:be:e5:5e:70:be:1d:9b:1c:38:bb:85:73:60:51:2b:ad: 38:16:36:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwNzAzMDY1NTA3WhcNMjUwNzEwMDY1NTA3WjAYMRYwFAYD VQQDEw02ODY2Mjk0Yy04NzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAbQdJ7t6+9rGDx/6KYpWImayARRad2A5vLsJM+ptBKcDjPHrsZMqdei9OUB 2bo2rt8kpXGeuDuHPBocRO1aRoGNvpOmEfSlSvLqmaDIHg7tVdljkk3NpxlymT0j znNyn5RkLlvvrM5dB8hVJt+qpQ8Jj3lSFrOFq39OhtcYwtDrGd0aQS9jSuAfvquM I2sO97TqIpmsC4WtX7YxSDwUxmmrPPLeIX9YH2yQVlFKVDs85id4ddewdcxd1msw IpL+W+R1GA7iqbW7cylS5L92xJVxi0G7mlXkerqqZ7CAyZaRmrxwTXnCvUHrweLP umg0mBOF2L41uqH1tGqRpHU9JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFp1R+r eBoIBbOzufuruL35KkQIMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl1k7u1zhcDKC5L0/Kwc/BEd1D09ObShKaD3FmKs7MG8qaiGOPvgTS NZLYZEvaVwByOHpEBGP7yGRjTiJtB8XtnYMjYVXlR0zT+PrBOTxGkBNfldvK2vc4 kt3lNzDgPJu5SY70ARAGPlaBj4K8Q0NRUoIC+YRkZ8ly4UEIixSiDwzxB/hCW7uI qjiA5KJbuACfQ505318C3vOoGiCclYdSfu6MnWy1XADf4826h1pIKKGuecZNf2wW +RwfxipxFJ1iRz/8ptw5R6tN+xMXlD0jfNgxPvdoed3w76RxTit70I8kzewQWkts 86gzeL7lXnC+HZscOLuFc2BRK604FjbQ -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:17 2025 by rpki-client