$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: k28tPiCiqH/riuhQlCNPGTLU9P8BfT63IgEQe4K1evU= Subject key identifier: 4A:CA:D5:A7:72:8C:7A:0E:22:F2:50:FF:A6:D1:05:51:8E:48:D9:A7 Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 028E Signing time: Tue 01 Jul 2025 02:17:10 +0000 Manifest this update: Tue 01 Jul 2025 02:17:09 +0000 Manifest next update: Tue 08 Jul 2025 02:17:09 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: FkPdOFklvgrZPgaKVN0ORyCfkiDSmc8iF4V3R6ezKJU=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: WqjZAsQr/HLYxK8PcAumByn22k0e0D3wGPxVIBEBQ6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Jul 1 02:17:09 2025 GMT Not After : Jul 8 02:17:09 2025 GMT Subject: CN=68634526-cf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:5a:c0:37:31:7b:3b:66:a2:ad:3d:4b:5c: e2:20:d4:8d:ea:54:72:ba:6d:2d:c2:2d:51:11:c2: bc:b1:51:cc:9e:86:29:23:b4:0c:5e:55:85:64:10: 3a:8c:31:f6:5e:ff:8d:8d:8c:7b:ad:29:0a:17:d8: 9d:68:83:ff:a1:c4:40:9e:f5:28:a7:40:74:6f:25: 0f:c4:65:b5:cc:8c:af:05:3f:cc:43:45:b9:8e:40: 27:a1:cc:d3:16:e5:a6:a2:37:c1:08:fc:87:e4:f3: 22:23:9a:c8:88:16:75:3c:be:b5:82:79:49:0f:d2: 91:50:cf:6e:8d:8c:63:a0:ba:ed:6a:6d:51:fd:8f: 2c:8f:c4:b2:f0:a8:2b:48:e2:95:5f:03:a3:8e:e5: 42:66:db:ee:cf:6b:22:52:3f:ad:99:24:38:2c:08: 8a:17:e5:8d:c0:d1:17:df:74:18:a1:09:be:08:00: 6a:15:1e:f5:23:41:4d:12:e6:63:69:8f:c5:ab:77: 26:7a:87:63:86:1d:d9:d7:7b:f7:d6:88:65:29:a1: 6d:56:3f:96:29:03:c9:e8:c3:2e:18:03:9f:e5:57: 8d:19:e0:ee:4d:e2:00:0f:59:03:16:8d:89:ae:11: 4d:85:09:e3:c4:01:7e:71:f7:08:03:20:6e:71:77: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CA:D5:A7:72:8C:7A:0E:22:F2:50:FF:A6:D1:05:51:8E:48:D9:A7 X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:38:5c:76:3c:b6:ee:66:7a:4b:38:be:ff:8c:07:94:03:bf: 5c:c8:c5:c2:0c:cf:52:26:71:82:9f:c3:6f:b0:1b:b7:46:79: 73:21:09:10:9f:c9:84:8a:9e:78:a5:7d:bb:7e:6b:03:59:5a: 79:f5:de:74:fc:e2:1e:08:72:bd:0f:d8:ea:00:2c:86:36:3e: 5c:61:9d:7e:9a:13:1c:c2:2f:d4:75:00:71:86:df:30:22:2a: 81:db:98:3c:aa:99:33:db:d4:0b:61:99:5a:5d:2f:0e:ab:2e: 8e:57:82:18:d8:66:c3:47:51:c2:ae:d4:27:b5:a9:fe:d4:b8: fa:e7:07:30:7e:a6:42:84:9f:bb:c7:d4:ab:bf:a7:66:e7:e9: fa:7f:1a:77:ba:06:a9:7c:67:44:ce:71:43:c9:2b:13:20:6d: 55:59:b1:4d:a0:07:48:e0:9f:ca:80:c0:25:0e:02:11:24:f9: ad:36:02:45:5d:6b:ed:9b:f2:39:54:af:a2:f9:f0:89:eb:0d: 54:75:25:4d:e4:fb:cb:86:b8:2d:fd:b4:9c:21:8a:12:96:c7: a6:c0:fb:b2:6a:f0:e5:60:3b:70:5a:a8:ee:4a:b2:47:c9:27: b1:a9:14:03:c5:93:ce:24:2d:ae:03:d3:b9:36:e8:e2:48:2c: 85:d5:0d:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUwNzAxMDIxNzA5WhcNMjUwNzA4MDIxNzA5WjAYMRYwFAYD VQQDEw02ODYzNDUyNi1jZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSFawDcxeztmoq09S1ziINSN6lRyum0twi1REcK8sVHMnoYpI7QMXlWFZBA6 jDH2Xv+NjYx7rSkKF9idaIP/ocRAnvUop0B0byUPxGW1zIyvBT/MQ0W5jkAnoczT FuWmojfBCPyH5PMiI5rIiBZ1PL61gnlJD9KRUM9ujYxjoLrtam1R/Y8sj8Sy8Kgr SOKVXwOjjuVCZtvuz2siUj+tmSQ4LAiKF+WNwNEX33QYoQm+CABqFR71I0FNEuZj aY/Fq3cmeodjhh3Z13v31ohlKaFtVj+WKQPJ6MMuGAOf5VeNGeDuTeIAD1kDFo2J rhFNhQnjxAF+cfcIAyBucXchIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErK1ady jHoOIvJQ/6bRBVGOSNmnMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3OFx2PLbuZnpLOL7/jAeUA79cyMXCDM9SJnGCn8NvsBu3RnlzIQkQ n8mEip54pX27fmsDWVp59d50/OIeCHK9D9jqACyGNj5cYZ1+mhMcwi/UdQBxht8w IiqB25g8qpkz29QLYZlaXS8Oqy6OV4IY2GbDR1HCrtQntan+1Lj65wcwfqZChJ+7 x9Srv6dm5+n6fxp3ugapfGdEznFDySsTIG1VWbFNoAdI4J/KgMAlDgIRJPmtNgJF XWvtm/I5VK+i+fCJ6w1UdSVN5PvLhrgt/bScIYoSlsemwPuyavDlYDtwWqjuSrJH ySexqRQDxZPOJC2uA9O5NujiSCyF1Q3A -----END CERTIFICATE-----Generated at Wed Jul 2 19:18:43 2025 by rpki-client