$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: NKSc0LCRpwbXu1KT2aSHnEKAwcxDLWdLomwJtvSe1Vk= Subject key identifier: 41:CB:AB:AA:D7:7F:29:AC:3E:DB:AD:E2:89:05:66:46:C6:67:4E:23 Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 011C Signing time: Thu 03 Jul 2025 04:58:47 +0000 Manifest this update: Thu 03 Jul 2025 04:58:47 +0000 Manifest next update: Thu 10 Jul 2025 04:58:47 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: lF6wZrjDP8I2859M8+5UUMs20d3YqsBd7gjCEThj4Fo=) 2: 725ED2DC3C3E11EF8E9ED658C4F9AE02.roa (hash: b8Nk35gI73n6vPSPeGhcdp8/EnX7d3C+aJhz3JSGsbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: Jul 3 04:58:47 2025 GMT Not After : Jul 10 04:58:47 2025 GMT Subject: CN=68660e07-4cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:eb:d7:1a:31:8e:0f:dc:e6:44:e5:84:25: 0c:55:56:18:32:79:a4:fa:85:bc:84:d7:cd:90:70: 05:f4:a8:de:79:45:b7:fa:77:c8:da:67:23:08:0d: d8:5d:71:be:54:59:78:87:f1:c7:a1:49:1c:c0:01: e2:74:d2:2e:e9:da:06:ae:e4:d4:39:bd:79:00:84: c2:dc:07:01:5c:34:c6:f9:80:d4:60:ff:30:de:4a: 9b:21:8d:2a:c1:0c:cb:a1:5d:ee:2b:d9:1a:78:cb: f0:2d:94:e0:25:38:b7:8d:a2:58:07:ce:1d:95:ac: 0b:78:cb:f0:7e:66:da:e7:97:06:c5:5f:ab:a1:d2: eb:5f:ab:4a:f5:2b:7f:56:21:4f:4c:6b:80:f0:0f: b1:c8:2b:79:9d:29:1c:41:d5:49:e3:52:42:c4:04: cf:f7:dd:d2:14:b0:9d:83:b8:c0:5f:89:27:d4:d9: 3c:1b:7e:e2:9d:ea:52:f4:c2:34:6e:a1:fc:cd:98: 36:8e:8f:62:e3:65:8d:77:c3:81:8c:d7:f9:dc:cc: 1e:2c:88:e4:5d:f1:bb:64:be:e2:90:b3:76:44:52: 49:f5:54:32:74:c8:e6:a2:15:3e:8e:1a:95:2c:02: d6:0b:22:db:e9:d0:0b:a3:53:73:2f:f1:7f:1a:a9: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CB:AB:AA:D7:7F:29:AC:3E:DB:AD:E2:89:05:66:46:C6:67:4E:23 X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e4:da:70:a9:58:36:d2:2c:4d:50:a6:e1:e0:84:73:fc:85: fc:ce:db:62:fd:1c:3e:c1:01:6d:32:b4:2f:33:1b:01:47:f2: 66:c8:06:2d:2d:e5:53:88:53:f5:39:bb:b8:8f:68:9b:e4:1c: 54:70:b5:a5:3e:aa:ee:f3:69:19:86:bd:58:48:40:dd:87:94: 3c:05:9f:6b:de:45:44:21:b8:ab:1e:0a:16:03:1e:b0:21:ba: da:e5:03:46:68:04:36:1d:85:29:ea:54:e8:e3:c6:d4:12:d7: 1c:77:e2:04:94:b1:fc:ab:46:78:46:2d:ee:85:b5:33:3a:85: c7:72:a1:2a:6b:8b:a1:f9:dd:3a:93:90:19:a8:50:d1:16:f2: 0e:a4:88:d8:21:80:ad:63:af:eb:5f:e2:13:68:92:9d:9a:c4: 23:46:cd:b5:09:ca:cd:67:ce:86:08:0e:d3:4d:91:27:7d:3d: 27:fd:ed:5a:48:80:ad:2f:89:6b:2c:a7:37:50:99:85:df:b7: ff:94:39:16:ee:36:c0:f1:15:d2:89:03:cf:82:47:80:fe:b4: 10:fb:d7:17:3b:2c:9f:4f:b3:d4:6a:cd:07:f4:66:d3:5a:4d: 85:d6:fc:58:b1:38:6d:d7:68:d7:3e:c4:f5:18:ec:97:c9:77: ce:0f:20:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjUwNzAzMDQ1ODQ3WhcNMjUwNzEwMDQ1ODQ3WjAYMRYwFAYD VQQDEw02ODY2MGUwNy00Y2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssrr1xoxjg/c5kTlhCUMVVYYMnmk+oW8hNfNkHAF9KjeeUW3+nfI2mcjCA3Y XXG+VFl4h/HHoUkcwAHidNIu6doGruTUOb15AITC3AcBXDTG+YDUYP8w3kqbIY0q wQzLoV3uK9kaeMvwLZTgJTi3jaJYB84dlawLeMvwfmba55cGxV+rodLrX6tK9St/ ViFPTGuA8A+xyCt5nSkcQdVJ41JCxATP993SFLCdg7jAX4kn1Nk8G37inepS9MI0 bqH8zZg2jo9i42WNd8OBjNf53MweLIjkXfG7ZL7ikLN2RFJJ9VQydMjmohU+jhqV LALWCyLb6dALo1NzL/F/GqkH9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHLq6rX fymsPtut4okFZkbGZ04jMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ5NpwqVg20ixNUKbh4IRz/IX8ztti/Rw+wQFtMrQvMxsBR/JmyAYt LeVTiFP1Obu4j2ib5BxUcLWlPqru82kZhr1YSEDdh5Q8BZ9r3kVEIbirHgoWAx6w Ibra5QNGaAQ2HYUp6lTo48bUEtccd+IElLH8q0Z4Ri3uhbUzOoXHcqEqa4uh+d06 k5AZqFDRFvIOpIjYIYCtY6/rX+ITaJKdmsQjRs21CcrNZ86GCA7TTZEnfT0n/e1a SICtL4lrLKc3UJmF37f/lDkW7jbA8RXSiQPPgkeA/rQQ+9cXOyyfT7PUas0H9GbT Wk2F1vxYsTht12jXPsT1GOyXyXfODyAP -----END CERTIFICATE-----Generated at Sat Jul 5 05:12:18 2025 by rpki-client