$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft File: z0dmQoBPz_nXCSiWNYNV1awA6nM.mft (raw, json) Hash identifier: lkWIo/v1/V51esTWu8+0qVYYd264tL68QbZpwmsy2cQ= Subject key identifier: 39:C7:E2:BC:F7:90:36:58:E6:9C:E7:35:9D:3D:28:27:E5:BF:67:E5 Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 Certificate issuer: /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft Manifest number: 014F Signing time: Tue 01 Jul 2025 04:36:52 +0000 Manifest this update: Tue 01 Jul 2025 04:36:51 +0000 Manifest next update: Tue 08 Jul 2025 04:36:51 +0000 Files and hashes: 1: z0dmQoBPz_nXCSiWNYNV1awA6nM.crl (hash: ActEXHHum7W4Uidiv4X9mPnhWSiErVKzJ2V9hrB0bzU=) 2: 49467E2251BB11EEA3C7487DC4F9AE02.roa (hash: 1BeURRtwvSUrpkIj6xn/5BXwfH6TF/4NRVSxl/lQeog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAD4, serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Validity Not Before: Jul 1 04:36:51 2025 GMT Not After : Jul 8 04:36:51 2025 GMT Subject: CN=686365e3-c05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:83:3b:60:c9:73:19:e0:6f:f0:97:a8:58: db:b8:22:7f:9c:b7:d9:54:c0:ad:95:64:97:ff:d0: f0:9a:7e:59:17:e8:39:6d:54:81:fa:b9:02:47:fd: f9:b8:a8:e3:14:6e:27:80:df:91:f9:c2:b2:75:20: 53:c1:63:da:e4:6b:d8:4e:5b:f6:8c:db:77:72:0a: 21:09:ad:53:d5:80:37:ff:3c:0b:16:d5:a0:5e:c9: 56:dd:5e:63:5d:59:16:98:fa:0e:aa:9d:9d:d6:f3: 80:28:c8:41:1c:43:33:68:03:d8:3f:d3:ec:80:73: 90:8d:4b:a8:0d:22:6b:d6:ce:78:12:89:f9:b4:51: 44:68:72:2c:d7:9d:8f:75:96:c3:12:6d:dc:a3:0f: e4:a5:50:d1:c9:f0:cb:c0:76:11:87:e4:17:11:6a: 84:1c:15:68:02:75:3e:44:80:b7:79:9e:d6:c3:cc: b4:d7:05:cb:66:76:5c:f4:c2:dd:61:dc:38:54:4a: f3:5e:7c:0b:ea:2e:73:61:fd:e8:c9:9c:62:a4:ee: 6d:21:c6:93:6e:67:7c:a6:f3:d4:fc:a8:80:42:67: 88:e6:dd:29:2e:36:f3:04:0d:a1:24:df:51:d9:24: 4c:e7:ed:d4:75:1a:ce:fb:99:1e:75:13:4f:3f:36: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C7:E2:BC:F7:90:36:58:E6:9C:E7:35:9D:3D:28:27:E5:BF:67:E5 X509v3 Authority Key Identifier: keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:66:f0:06:b4:23:33:91:9b:e6:68:cc:a0:ae:c7:2e:0b:b8: 9d:49:a1:e6:33:d2:ff:12:55:f2:b5:3e:6e:08:f8:53:b3:7c: ec:75:33:f7:07:21:f2:e5:6d:16:88:0d:e4:98:6c:67:eb:b2: 14:63:1d:c4:28:12:93:0a:51:b5:6a:a2:17:02:0c:cf:ec:fa: 68:f3:93:fe:05:45:1c:b2:0a:db:a4:6e:20:09:c5:fa:89:9f: dd:b7:d1:32:35:93:f4:39:0d:6e:9e:4e:75:76:69:c6:c3:90: 61:45:a6:a6:94:5a:1c:02:ff:75:2a:58:a1:ca:79:64:37:86: aa:a1:78:a8:c4:c7:b8:ca:ac:91:27:e0:00:0b:3b:15:cb:60: c3:5b:50:8d:50:e8:bc:92:12:5e:45:53:7a:7a:59:be:78:90: de:fe:86:a3:13:91:c3:5b:1a:20:05:d7:35:95:c6:c6:fd:8a: 05:0a:a6:86:b0:94:00:7c:8a:13:aa:d2:64:da:f5:81:c8:bf: e7:a8:23:9a:d5:55:43:a5:a0:ca:d5:db:7d:84:03:63:5a:6c: ab:61:22:de:a3:c1:5e:f2:7f:f4:05:1e:84:03:d8:8a:f7:17: 3f:fc:7b:c1:1f:33:80:5a:d2:50:b2:55:3f:03:04:43:ba:cb: dc:3a:cb:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBRDQxMTAvBgNVBAUTKENGNDc2NjQyODA0RkNGRjlENzA5Mjg5NjM1ODM1NUQ1 QUMwMEVBNzMwHhcNMjUwNzAxMDQzNjUxWhcNMjUwNzA4MDQzNjUxWjAYMRYwFAYD VQQDEw02ODYzNjVlMy1jMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSKDO2DJcxngb/CXqFjbuCJ/nLfZVMCtlWSX/9Dwmn5ZF+g5bVSB+rkCR/35 uKjjFG4ngN+R+cKydSBTwWPa5GvYTlv2jNt3cgohCa1T1YA3/zwLFtWgXslW3V5j XVkWmPoOqp2d1vOAKMhBHEMzaAPYP9PsgHOQjUuoDSJr1s54Eon5tFFEaHIs152P dZbDEm3cow/kpVDRyfDLwHYRh+QXEWqEHBVoAnU+RIC3eZ7Ww8y01wXLZnZc9MLd Ydw4VErzXnwL6i5zYf3oyZxipO5tIcaTbmd8pvPU/KiAQmeI5t0pLjbzBA2hJN9R 2SRM5+3UdRrO+5kedRNPPzb00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnH4rz3 kDZY5pznNZ09KCflv2flMB8GA1UdIwQYMBaAFM9HZkKAT8/51wkoljWDVdWsAOpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFENC8wREQ4Rjc5RTUx QkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpfblhDU2lXTllOVjFhd0E2 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owZG1Rb0JQel9uWENTaVdOWU5WMWF3QTZuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFENC8wREQ4Rjc5RTUxQkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpf blhDU2lXTllOVjFhd0E2bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWZvAGtCMzkZvmaMygrscuC7idSaHmM9L/ElXytT5uCPhTs3zsdTP3 ByHy5W0WiA3kmGxn67IUYx3EKBKTClG1aqIXAgzP7Ppo85P+BUUcsgrbpG4gCcX6 iZ/dt9EyNZP0OQ1unk51dmnGw5BhRaamlFocAv91KlihynlkN4aqoXioxMe4yqyR J+AACzsVy2DDW1CNUOi8khJeRVN6elm+eJDe/oajE5HDWxogBdc1lcbG/YoFCqaG sJQAfIoTqtJk2vWByL/nqCOa1VVDpaDK1dt9hANjWmyrYSLeo8Fe8n/0BR6EA9iK 9xc//HvBHzOAWtJQslU/AwRDusvcOsuM -----END CERTIFICATE-----Generated at Thu Jul 3 00:49:50 2025 by rpki-client