$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: k2pxK44DDo/hBxBsh3sZR5fKyNtrtxv8H44K0nmij5Y= Subject key identifier: 2F:CE:34:68:DA:7C:16:41:3B:81:29:06:ED:A6:D1:16:1B:02:65:B0 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D1B Signing time: Wed 02 Jul 2025 16:16:20 +0000 Manifest this update: Wed 02 Jul 2025 16:16:20 +0000 Manifest next update: Wed 09 Jul 2025 16:16:20 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: o//6gTA1RjG37N1xU3HI/cc2GIz/TK/swpLOmZenWDM=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7464 (0x1d28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Jul 2 16:16:20 2025 GMT Not After : Jul 9 16:16:20 2025 GMT Subject: CN=68655b54-7469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:48:f7:8a:aa:11:a2:c9:f7:13:8b:b7:b2: 3e:51:5e:ff:72:85:6e:c8:dd:a0:97:74:96:24:25: 72:ed:a2:44:5e:a5:8a:08:90:2b:cc:67:6f:c1:c5: 97:43:72:61:e3:c3:3b:1c:9f:f4:61:7e:c8:c7:5d: 06:77:07:c0:31:95:ae:53:b3:9b:ef:b7:f3:50:37: 3b:91:14:e8:60:91:1f:43:0c:c1:36:e8:e1:a9:7a: 27:e2:e6:ee:ec:45:62:2c:83:f3:2f:a3:b7:6d:5f: 49:20:da:8d:75:c4:46:26:5c:4a:36:6c:ee:9a:e3: f1:95:8f:20:83:2b:7f:2b:33:86:bc:26:40:81:14: ed:02:77:ff:a5:e8:c0:90:46:69:d1:05:5e:aa:b7: f0:4a:5b:ac:35:de:03:03:5f:e1:c3:11:03:6f:23: 13:e1:3a:d1:50:09:17:c6:46:98:75:a2:78:58:24: 43:79:e6:8b:a2:96:29:4e:cb:32:e6:77:44:dc:17: 90:6c:6e:5e:5e:2d:f1:69:ad:92:d1:61:04:a0:31: ae:8c:11:67:0d:5f:ce:92:20:53:48:71:b1:62:56: d7:ad:60:10:d5:85:d2:1d:62:0e:7e:ba:2e:2a:89: d0:30:6b:06:21:2a:3e:3e:ab:dc:cc:d4:ed:7b:e9: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CE:34:68:DA:7C:16:41:3B:81:29:06:ED:A6:D1:16:1B:02:65:B0 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:e5:ac:b7:da:f3:4c:52:5c:07:92:ee:24:05:f5:be:43:b2: 86:e6:56:8a:be:df:33:0f:6b:fa:e0:37:34:24:3d:fd:7d:b0: a5:1c:da:fa:f9:2a:46:e3:77:09:cc:7e:09:c3:48:38:3f:85: c0:50:e6:5d:40:ed:d6:65:eb:a9:35:34:23:9b:70:2a:ec:28: 90:3f:7c:32:9e:03:24:f2:ee:be:f2:be:45:d1:f5:53:98:ef: c5:13:ab:fd:7f:06:d9:da:b4:fa:33:21:43:f4:12:81:6f:53: ad:72:a1:7e:7d:3e:31:14:4f:09:45:19:b3:2a:2f:0e:59:6e: 0f:97:5a:3f:ee:4f:56:bb:c2:14:c6:54:6d:8a:88:70:41:d6: c2:d3:5f:5d:69:53:7e:44:cc:a0:2b:ce:d3:95:0b:a8:23:02: 5d:3c:17:4f:1b:85:27:0a:6e:f5:e5:a8:51:a6:d5:65:8f:3a: 96:cd:e3:fc:3e:00:b3:38:8c:90:0b:c4:7d:88:de:24:ba:12: 63:37:22:90:6a:d6:4c:2f:b7:71:52:4b:06:1c:e9:fa:8c:a2: 67:39:98:11:a3:71:97:dd:cc:3c:ef:40:0b:0b:ab:98:14:b5: 7e:fc:18:45:4b:9d:4e:1e:38:97:7c:bb:6f:4c:9c:8f:d9:00: 4f:5a:46:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwNzAyMTYxNjIwWhcNMjUwNzA5MTYxNjIwWjAYMRYwFAYD VQQDEw02ODY1NWI1NC03NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2VI94qqEaLJ9xOLt7I+UV7/coVuyN2gl3SWJCVy7aJEXqWKCJArzGdvwcWX Q3Jh48M7HJ/0YX7Ix10GdwfAMZWuU7Ob77fzUDc7kRToYJEfQwzBNujhqXon4ubu 7EViLIPzL6O3bV9JINqNdcRGJlxKNmzumuPxlY8ggyt/KzOGvCZAgRTtAnf/pejA kEZp0QVeqrfwSlusNd4DA1/hwxEDbyMT4TrRUAkXxkaYdaJ4WCRDeeaLopYpTssy 5ndE3BeQbG5eXi3xaa2S0WEEoDGujBFnDV/OkiBTSHGxYlbXrWAQ1YXSHWIOfrou KonQMGsGISo+PqvczNTte+mV7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/ONGja fBZBO4EpBu2m0RYbAmWwMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC85ay32vNMUlwHku4kBfW+Q7KG5laKvt8zD2v64Dc0JD39fbClHNr6 +SpG43cJzH4Jw0g4P4XAUOZdQO3WZeupNTQjm3Aq7CiQP3wyngMk8u6+8r5F0fVT mO/FE6v9fwbZ2rT6MyFD9BKBb1OtcqF+fT4xFE8JRRmzKi8OWW4Pl1o/7k9Wu8IU xlRtiohwQdbC019daVN+RMygK87TlQuoIwJdPBdPG4UnCm715ahRptVljzqWzeP8 PgCzOIyQC8R9iN4kuhJjNyKQatZML7dxUksGHOn6jKJnOZgRo3GX3cw870ALC6uY FLV+/BhFS51OHjiXfLtvTJyP2QBPWkYq -----END CERTIFICATE-----Generated at Thu Jul 3 12:26:44 2025 by rpki-client