$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: zrsseSKsh5iKPRyUloXQBLIOrJRvEuN0H9BCcT75i2o= Subject key identifier: CF:DC:03:EB:D3:C3:8A:53:51:ED:2D:7C:94:99:55:B8:24:57:1F:10 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1AED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1ABE Signing time: Fri 04 Jul 2025 16:34:31 +0000 Manifest this update: Fri 04 Jul 2025 16:34:31 +0000 Manifest next update: Fri 11 Jul 2025 16:34:31 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: cFeTUtN8u19qXUlWhdkcJuEklr/I/b40Dst3d2D90X0=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: PJLYIwbBusasK2nlobSNFy5Zbha6AGvSyhn1nTE3clI=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6893 (0x1aed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Jul 4 16:34:31 2025 GMT Not After : Jul 11 16:34:31 2025 GMT Subject: CN=68680297-c93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:70:b9:d4:76:09:9c:50:29:1e:93:1b:24: 24:3e:0f:bc:35:25:39:54:a1:eb:78:c0:24:12:76: 94:4e:b3:42:93:f2:4f:ee:02:c5:74:c5:5c:0b:37: b7:6f:b9:15:d9:56:d4:4e:77:a3:db:f2:a4:fa:39: 10:40:26:63:a7:e7:78:b8:58:03:5e:87:a7:1f:63: 21:c4:e9:46:c1:29:c9:32:59:18:00:02:13:7e:2b: 5f:f5:38:77:b7:78:ac:7c:62:d0:ac:ff:7e:a0:51: 07:00:f6:00:ec:4d:80:f1:18:39:ec:90:16:bb:82: 2d:bf:23:83:8a:3e:97:0d:26:59:0d:0b:45:55:f3: 40:50:f3:b5:b2:f2:18:24:59:e7:7a:c7:a6:42:5c: f5:52:f0:29:9c:a9:1d:ce:9e:5b:e8:bb:eb:ed:7c: 57:72:5e:4e:9d:d1:31:f9:32:60:30:d9:36:aa:e9: 0f:e0:a6:06:4b:ef:1f:f2:53:4e:ff:18:80:81:b8: 1f:53:49:d3:08:04:5b:6e:38:b9:e2:a2:46:22:d5: 26:22:f3:97:19:58:ac:ee:72:89:22:96:d3:29:80: ad:68:7f:ce:52:de:c9:83:99:a9:6b:84:7c:8b:2a: 11:ac:78:f1:2d:97:6b:1e:bd:3a:86:2a:38:25:73: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DC:03:EB:D3:C3:8A:53:51:ED:2D:7C:94:99:55:B8:24:57:1F:10 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:06:12:36:93:7b:14:ef:39:49:86:8d:57:cf:91:1b:f1:e0: 36:5e:84:3a:55:89:62:32:36:1f:ae:b7:60:44:6b:24:32:51: af:d9:22:dd:16:bd:4c:aa:f0:ce:fe:53:0a:2f:44:48:4a:ee: d4:08:d1:87:9c:e9:dd:26:2f:6d:a9:19:1c:93:27:fc:2a:38: f2:8c:03:89:18:56:41:e8:4b:8b:b3:39:7d:7d:99:0b:d7:85: 44:f4:0a:a8:aa:de:1c:9f:f7:64:95:f2:64:80:c4:a4:f0:0c: 9b:7d:d7:6c:15:5d:30:9f:7f:73:82:52:f2:52:2e:06:ec:71: c8:f9:cb:84:8f:72:c6:80:51:5d:69:23:27:8a:f4:5d:5d:92: 8c:f5:94:e4:48:f6:81:ef:f8:78:67:a4:b7:6a:87:bc:e3:57: e3:e1:a8:ff:f0:33:74:75:90:65:e4:30:2f:b8:2c:c1:42:a2: ca:23:e8:28:40:60:7b:7d:22:37:79:11:ee:65:69:24:2c:44: e0:5f:2b:95:11:4b:d6:a4:f5:33:1b:e2:ce:ac:83:38:ed:a9: 8b:f6:1a:2d:86:4e:03:35:80:b9:d8:bc:9a:e5:5a:64:01:fa: 77:1e:d9:77:4e:b3:fd:2c:96:8c:a5:6b:79:4c:bf:bb:7b:d3: 72:0c:36:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUwNzA0MTYzNDMxWhcNMjUwNzExMTYzNDMxWjAYMRYwFAYD VQQDEw02ODY4MDI5Ny1jOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy9wudR2CZxQKR6TGyQkPg+8NSU5VKHreMAkEnaUTrNCk/JP7gLFdMVcCze3 b7kV2VbUTnej2/Kk+jkQQCZjp+d4uFgDXoenH2MhxOlGwSnJMlkYAAITfitf9Th3 t3isfGLQrP9+oFEHAPYA7E2A8Rg57JAWu4ItvyODij6XDSZZDQtFVfNAUPO1svIY JFnnesemQlz1UvApnKkdzp5b6Lvr7XxXcl5OndEx+TJgMNk2qukP4KYGS+8f8lNO /xiAgbgfU0nTCARbbji54qJGItUmIvOXGVis7nKJIpbTKYCtaH/OUt7Jg5mpa4R8 iyoRrHjxLZdrHr06hio4JXMPCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/cA+vT w4pTUe0tfJSZVbgkVx8QMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSBhI2k3sU7zlJho1Xz5Eb8eA2XoQ6VYliMjYfrrdgRGskMlGv2SLd Fr1MqvDO/lMKL0RISu7UCNGHnOndJi9tqRkckyf8KjjyjAOJGFZB6EuLszl9fZkL 14VE9Aqoqt4cn/dklfJkgMSk8AybfddsFV0wn39zglLyUi4G7HHI+cuEj3LGgFFd aSMnivRdXZKM9ZTkSPaB7/h4Z6S3aoe841fj4aj/8DN0dZBl5DAvuCzBQqLKI+go QGB7fSI3eRHuZWkkLETgXyuVEUvWpPUzG+LOrIM47amL9hothk4DNYC52Lya5Vpk Afp3Htl3TrP9LJaMpWt5TL+7e9NyDDY3 -----END CERTIFICATE-----Generated at Sat Jul 5 08:10:08 2025 by rpki-client