$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: AcZU/PnNMeOwPIZiOCswEzU4iH28Uc7iKQQOCBUBckE= Subject key identifier: BC:19:34:98:FD:8F:3E:86:1D:73:7A:9D:70:B6:8A:AF:FD:23:6F:34 Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 230A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 22FB Signing time: Wed 02 Jul 2025 15:57:35 +0000 Manifest this update: Wed 02 Jul 2025 15:57:34 +0000 Manifest next update: Wed 09 Jul 2025 15:57:34 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: CIDU5j8TkoBw2MrVZfBUwNZwfFcYxYd/Qt9mretp6yM=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8970 (0x230a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: Jul 2 15:57:34 2025 GMT Not After : Jul 9 15:57:34 2025 GMT Subject: CN=686556ee-8a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c5:c2:6b:e4:e5:2d:5d:1d:18:23:92:6a:94: 65:24:32:aa:fd:36:42:78:d5:11:f5:b2:fc:7e:e8: b4:7b:55:1d:91:84:67:77:e2:3b:0b:f8:bb:bc:5e: b1:2c:a0:3d:f3:28:61:37:30:01:8e:70:d5:34:96: 9d:ef:7a:95:b8:b6:0b:74:b7:45:62:2b:f2:05:7c: c0:5e:da:35:65:17:22:48:0f:c6:ea:fc:93:21:19: cc:0c:31:2e:79:80:74:26:e9:b6:1d:e6:c7:dc:0f: ad:4b:a5:fd:0d:11:5d:fb:ae:d4:20:5f:40:54:60: 43:a3:94:92:c3:72:66:1e:98:19:74:72:86:c0:02: ae:29:ba:7d:ec:68:bc:41:dd:b9:0a:12:f6:2f:d3: b3:51:b2:5a:c5:81:aa:43:60:79:e6:3c:d9:b0:14: f3:01:ca:62:3f:e3:59:7d:c9:a5:5a:66:89:f7:19: 93:7b:14:5b:89:75:5b:9a:c0:df:d3:29:3a:45:22: d8:a5:d0:4c:94:bb:e6:84:7f:79:34:c9:28:a6:92: f6:eb:e7:e6:82:b3:de:5e:93:29:6c:16:11:16:5d: 47:aa:39:42:f2:7b:39:80:60:60:86:f9:02:51:72: ba:1d:dd:82:66:b7:92:58:4a:4b:5a:68:25:e3:5d: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:19:34:98:FD:8F:3E:86:1D:73:7A:9D:70:B6:8A:AF:FD:23:6F:34 X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a2:e9:b5:0c:f4:8e:c7:db:41:1b:ca:59:27:fd:7a:43:ae: 03:6b:a7:c3:ba:75:95:42:8c:23:4a:5c:da:a2:6e:59:3e:08: 05:4b:7a:72:fb:c3:c8:62:81:5b:4a:73:dd:79:35:80:1d:46: 09:5f:d6:2c:b9:ea:05:f9:e5:9b:c7:c5:b2:76:3c:8d:78:20: 5d:22:ff:28:64:49:84:44:bf:9e:30:cb:91:b7:d7:aa:3b:0b: 35:b6:fc:0f:19:c7:d7:d2:11:99:cd:0b:25:38:3f:a0:9e:68: 26:11:16:50:35:2f:b4:c4:87:0b:c5:09:d5:66:4a:7f:54:75: c1:55:d9:aa:39:77:f5:bb:4a:eb:88:ba:df:41:9a:7a:64:c3: 65:42:f6:eb:5f:44:b7:fd:4e:b9:17:4c:6b:be:a6:20:e4:d6: 1e:8c:34:52:a1:91:66:71:7f:38:c5:25:5e:b8:83:5f:45:23: 3f:bb:32:ef:1b:e5:96:24:2f:d4:5e:6d:b5:62:76:1b:cd:a5: c4:d8:4c:18:eb:fe:05:df:83:d7:b7:c3:ad:07:7b:11:66:e3: 78:ef:5f:46:b1:b8:e6:0d:8a:05:0c:25:fe:1e:d8:d7:53:c0: 87:30:69:d5:24:47:c8:73:75:21:14:43:50:b2:a8:d3:b3:04: 9c:f9:a9:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUwNzAyMTU1NzM0WhcNMjUwNzA5MTU1NzM0WjAYMRYwFAYD VQQDEw02ODY1NTZlZS04YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cXCa+TlLV0dGCOSapRlJDKq/TZCeNUR9bL8fui0e1UdkYRnd+I7C/i7vF6x LKA98yhhNzABjnDVNJad73qVuLYLdLdFYivyBXzAXto1ZRciSA/G6vyTIRnMDDEu eYB0Jum2HebH3A+tS6X9DRFd+67UIF9AVGBDo5SSw3JmHpgZdHKGwAKuKbp97Gi8 Qd25ChL2L9OzUbJaxYGqQ2B55jzZsBTzAcpiP+NZfcmlWmaJ9xmTexRbiXVbmsDf 0yk6RSLYpdBMlLvmhH95NMkoppL26+fmgrPeXpMpbBYRFl1HqjlC8ns5gGBghvkC UXK6Hd2CZreSWEpLWmgl4134pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwZNJj9 jz6GHXN6nXC2iq/9I280MB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAioum1DPSOx9tBG8pZJ/16Q64Da6fDunWVQowjSlzaom5ZPggFS3py +8PIYoFbSnPdeTWAHUYJX9YsueoF+eWbx8WydjyNeCBdIv8oZEmERL+eMMuRt9eq Ows1tvwPGcfX0hGZzQslOD+gnmgmERZQNS+0xIcLxQnVZkp/VHXBVdmqOXf1u0rr iLrfQZp6ZMNlQvbrX0S3/U65F0xrvqYg5NYejDRSoZFmcX84xSVeuINfRSM/uzLv G+WWJC/UXm21YnYbzaXE2EwY6/4F34PXt8OtB3sRZuN4719GsbjmDYoFDCX+HtjX U8CHMGnVJEfIc3UhFENQsqjTswSc+al0 -----END CERTIFICATE-----Generated at Thu Jul 3 09:20:27 2025 by rpki-client