$ rpki-client -vvf rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft File: 1ZVULlIPSK9153kD6majnGTB0KM.mft (raw, json) Hash identifier: ippJP5zZUXyBSwIidfEJTvG2iiOBBrx7Ned+DHaAJ74= Subject key identifier: 99:AE:66:8D:B4:2E:DC:06:6D:09:63:2A:4C:2C:09:53:C0:66:46:BE Authority key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 Certificate issuer: /CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft Manifest number: 0117 Signing time: Thu 03 Jul 2025 05:01:30 +0000 Manifest this update: Thu 03 Jul 2025 05:01:29 +0000 Manifest next update: Thu 10 Jul 2025 05:01:29 +0000 Files and hashes: 1: 1ZVULlIPSK9153kD6majnGTB0KM.crl (hash: O7F1xNeFIO9S/e6Jb1zgZNkJG71oV2rWrSli7Aej6GE=) 2: A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa (hash: 80qu5haW6721xx7xV/uutyDDcTxrv0bPQaiLvhProi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175866, serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3 Validity Not Before: Jul 3 05:01:29 2025 GMT Not After : Jul 10 05:01:29 2025 GMT Subject: CN=68660ea9-9d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:14:82:86:c9:22:e2:b8:f8:31:80:e6:d8: 33:35:4a:56:99:2d:df:45:56:67:c2:9b:eb:4c:60: e0:9c:b7:64:a8:c0:6d:9f:1b:2a:e0:c4:33:1f:21: 2b:e1:0e:6f:f9:51:44:c8:45:d0:34:08:6e:dd:59: f0:97:c9:a7:8c:5b:ed:27:c1:7b:b0:d3:8c:2a:64: 8d:f2:d9:a6:6a:17:99:53:9d:58:15:17:9a:42:20: dd:32:2b:0e:02:83:5e:87:86:20:f8:08:43:7e:b3: 86:79:e7:c9:14:fc:1b:3b:f1:a8:e4:d5:8f:de:ed: 0e:49:93:bf:39:b2:52:63:45:79:81:2a:35:1a:66: 08:26:ae:7b:20:c2:37:92:e1:54:40:81:e7:bd:46: 74:5d:5c:d3:a3:51:16:6d:07:04:ed:e2:7d:2e:2c: 67:ad:07:98:56:2a:ef:4f:fc:5f:f3:d5:3a:0e:b3: b1:4d:00:f2:78:20:90:3e:e7:ac:81:19:ab:2e:b1: c6:e8:4b:7c:2a:52:17:83:99:ca:79:eb:cf:74:55: b9:d3:25:f4:f0:81:6e:64:b0:c1:c6:50:fd:56:82: ae:47:99:4d:fb:de:c9:c5:c9:37:d8:b2:ac:b7:81: 41:c0:7e:4e:12:91:a7:94:a5:70:c1:5d:c7:99:2e: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AE:66:8D:B4:2E:DC:06:6D:09:63:2A:4C:2C:09:53:C0:66:46:BE X509v3 Authority Key Identifier: keyid:D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:98:b3:87:9c:24:1f:7f:d9:6c:98:eb:3c:76:e6:ef:2e:f0: 16:78:7c:39:3c:ac:31:82:fb:a5:52:dd:88:49:73:c4:06:05: 02:98:d7:5b:ae:36:eb:11:95:12:3c:02:2e:e9:97:e5:ad:f9: 52:6d:83:0f:65:dc:e4:ec:b6:44:f2:de:9e:85:8a:63:a3:94: f0:e5:83:e7:1c:31:99:3e:ee:82:b4:80:aa:35:0d:e0:54:4b: 95:0b:d8:0d:82:b0:73:d6:a6:44:36:1a:c7:81:1a:b3:f2:33: c1:9a:20:8d:0d:a3:3d:44:98:c6:86:9b:d8:2a:4f:67:98:2c: 21:81:cd:5b:0f:0b:ad:c8:1e:5d:8d:58:e3:a0:75:5a:a0:03: 22:d2:fa:d9:d8:91:ed:15:7c:a1:79:f7:e5:85:a2:73:5c:34: 28:d5:90:0b:8b:21:0c:62:70:cb:52:8b:ab:46:1b:11:36:64: 01:68:bb:05:1b:f3:70:e0:ed:9b:b1:df:94:03:77:7a:aa:0c: 75:79:fb:be:69:93:e5:70:9c:ff:41:2d:b4:ab:9f:e7:8f:d8: 7f:0c:57:db:e8:fe:90:af:e6:e6:04:b8:bd:41:d2:a1:99:14: 0f:d9:9c:a7:f5:bf:3a:48:00:0f:7b:bb:63:1c:fc:54:5c:43: ea:b6:e7:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NjYxMTAvBgNVBAUTKEQ1OTU1NDJFNTIwRjQ4QUY3NUU3NzkwM0VBNjZBMzlD NjRDMUQwQTMwHhcNMjUwNzAzMDUwMTI5WhcNMjUwNzEwMDUwMTI5WjAYMRYwFAYD VQQDEw02ODY2MGVhOS05ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mgUgobJIuK4+DGA5tgzNUpWmS3fRVZnwpvrTGDgnLdkqMBtnxsq4MQzHyEr 4Q5v+VFEyEXQNAhu3Vnwl8mnjFvtJ8F7sNOMKmSN8tmmaheZU51YFReaQiDdMisO AoNeh4Yg+AhDfrOGeefJFPwbO/Go5NWP3u0OSZO/ObJSY0V5gSo1GmYIJq57IMI3 kuFUQIHnvUZ0XVzTo1EWbQcE7eJ9LixnrQeYVirvT/xf89U6DrOxTQDyeCCQPues gRmrLrHG6Et8KlIXg5nKeevPdFW50yX08IFuZLDBxlD9VoKuR5lN+97Jxck32LKs t4FBwH5OEpGnlKVwwV3HmS4qcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmuZo20 LtwGbQljKkwsCVPAZka+MB8GA1UdIwQYMBaAFNWVVC5SD0ivded5A+pmo5xkwdCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg2Ni9GMTlEMjIwMkFG RDkxMUVFODRDNkYyN0JDNEY5QUUwMi8xWlZVTGxJUFNLOTE1M2tENm1ham5HVEIw S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFaVlVMbElQU0s5MTUza0Q2bWFqbkdUQjBLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg2Ni9GMTlEMjIwMkFGRDkxMUVFODRDNkYyN0JDNEY5QUUwMi8xWlZVTGxJUFNL OTE1M2tENm1ham5HVEIwS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbmLOHnCQff9lsmOs8dubvLvAWeHw5PKwxgvulUt2ISXPEBgUCmNdb rjbrEZUSPAIu6ZflrflSbYMPZdzk7LZE8t6ehYpjo5Tw5YPnHDGZPu6CtICqNQ3g VEuVC9gNgrBz1qZENhrHgRqz8jPBmiCNDaM9RJjGhpvYKk9nmCwhgc1bDwutyB5d jVjjoHVaoAMi0vrZ2JHtFXyhefflhaJzXDQo1ZALiyEMYnDLUourRhsRNmQBaLsF G/Nw4O2bsd+UA3d6qgx1efu+aZPlcJz/QS20q5/nj9h/DFfb6P6Qr+bmBLi9QdKh mRQP2Zyn9b86SAAPe7tjHPxUXEPqtuex -----END CERTIFICATE-----Generated at Thu Jul 3 09:39:05 2025 by rpki-client