$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: WnQXwJc4UELItfMKB2DTZ31ZnkTTc5tUEld7ZL8Dma4= Subject key identifier: EA:35:31:D0:0D:0A:E5:02:8C:BB:6C:52:2E:F9:E1:4A:07:C4:AC:11 Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: AD Signing time: Tue 01 Jul 2025 06:45:24 +0000 Manifest this update: Tue 01 Jul 2025 06:45:23 +0000 Manifest next update: Tue 08 Jul 2025 06:45:23 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: 9PrlpqR04Pd3E4Qgvr9u/Ar/DnogyRpUs2Kx847TQbM=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Jul 1 06:45:23 2025 GMT Not After : Jul 8 06:45:23 2025 GMT Subject: CN=68638403-647c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:8d:53:a8:f6:96:e0:5b:77:f9:f3:b2:24: 03:27:eb:ce:79:f3:b1:07:61:1f:55:ed:a3:36:2c: 1a:a5:6a:db:fe:2b:4c:61:38:57:1b:c4:0b:ee:02: b8:21:00:22:ea:a9:05:67:54:6e:3b:0a:06:ff:06: 22:b0:3a:bf:f7:a1:c5:12:aa:4b:fe:06:1a:8a:9d: 83:9f:eb:ac:7b:82:32:0f:7e:4b:d3:5d:25:22:eb: 69:93:d4:66:2e:63:5e:4b:48:df:ad:a6:e2:30:b8: 04:2d:c6:82:61:af:3a:ef:b6:98:a9:e7:95:a8:0e: 5c:35:7d:3e:e1:db:f8:07:77:59:06:91:51:37:73: 45:a7:9f:39:d0:26:45:35:46:ae:fa:c2:12:01:1f: 23:b6:4d:05:1d:a4:7e:0e:92:50:49:bc:46:35:56: 17:a3:20:fc:2b:e1:bd:29:78:57:c7:0b:87:5d:bd: a9:b9:12:44:4d:5c:bf:48:71:14:c3:9c:d5:ac:34: db:b4:c5:3b:11:07:9c:4a:56:c4:e6:e1:24:1d:b1: 52:e3:b3:c0:ac:6b:2e:90:fa:56:02:60:cd:cd:97: d0:d4:bf:db:d8:43:d4:ad:c5:55:e3:aa:dc:d9:9c: fc:93:3a:f8:4a:6e:6a:c1:23:51:2a:df:8d:dd:84: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:35:31:D0:0D:0A:E5:02:8C:BB:6C:52:2E:F9:E1:4A:07:C4:AC:11 X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:73:57:ed:4a:2f:47:b2:8d:b1:75:a3:fd:43:21:29:9d:89: 60:a6:2d:e3:c0:d6:8a:48:b4:96:8e:d8:fb:25:2c:03:93:b1: 38:22:3e:d9:10:d0:cb:8a:68:73:ba:b1:99:4c:33:0e:bb:5f: 5e:d9:9a:e7:3b:03:91:ad:aa:df:a7:ce:9f:ef:b5:c1:ed:74: 83:a5:f6:b6:bc:50:69:fa:83:3e:f2:5d:d8:1b:8e:83:aa:93: 58:69:11:30:5a:cd:a1:36:7f:98:ab:47:34:7f:7f:a5:b9:72: c7:8d:2e:93:5f:05:67:3f:56:5d:d3:22:98:db:ca:46:13:e9: 1a:60:01:5f:59:74:a4:65:ac:62:68:16:e0:48:75:a5:44:13: d8:7b:45:c4:90:93:9e:de:86:34:85:e7:dd:ba:98:51:9e:18: 67:1c:5b:7a:78:3e:1c:5d:20:eb:37:f1:61:f8:3b:22:52:83: a9:ae:b2:f3:97:35:c4:f5:d7:86:68:d9:f3:8c:da:f2:3a:c5: 95:bd:05:19:f5:0c:fd:58:bb:ea:e7:99:1f:ea:e6:8c:c8:14: a8:b4:03:65:ce:99:a2:72:d4:68:94:78:69:e6:ae:19:14:22: 24:3c:d5:ae:e1:44:db:48:86:47:d2:62:a3:7d:fc:a2:ed:8e: e9:99:da:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjUwNzAxMDY0NTIzWhcNMjUwNzA4MDY0NTIzWjAYMRYwFAYD VQQDEw02ODYzODQwMy02NDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx42NU6j2luBbd/nzsiQDJ+vOefOxB2EfVe2jNiwapWrb/itMYThXG8QL7gK4 IQAi6qkFZ1RuOwoG/wYisDq/96HFEqpL/gYaip2Dn+use4IyD35L010lIutpk9Rm LmNeS0jfrabiMLgELcaCYa8677aYqeeVqA5cNX0+4dv4B3dZBpFRN3NFp5850CZF NUau+sISAR8jtk0FHaR+DpJQSbxGNVYXoyD8K+G9KXhXxwuHXb2puRJETVy/SHEU w5zVrDTbtMU7EQecSlbE5uEkHbFS47PArGsukPpWAmDNzZfQ1L/b2EPUrcVV46rc 2Zz8kzr4Sm5qwSNRKt+N3YSSbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOo1MdAN CuUCjLtsUi754UoHxKwRMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhc1ftSi9Hso2xdaP9QyEpnYlgpi3jwNaKSLSWjtj7JSwDk7E4Ij7Z ENDLimhzurGZTDMOu19e2ZrnOwORrarfp86f77XB7XSDpfa2vFBp+oM+8l3YG46D qpNYaREwWs2hNn+Yq0c0f3+luXLHjS6TXwVnP1Zd0yKY28pGE+kaYAFfWXSkZaxi aBbgSHWlRBPYe0XEkJOe3oY0hefduphRnhhnHFt6eD4cXSDrN/Fh+DsiUoOprrLz lzXE9deGaNnzjNryOsWVvQUZ9Qz9WLvq55kf6uaMyBSotANlzpmictRolHhp5q4Z FCIkPNWu4UTbSIZH0mKjffyi7Y7pmdrs -----END CERTIFICATE-----Generated at Thu Jul 3 01:08:02 2025 by rpki-client