$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: Ekd4VPOP13egFiKPqvuciJ4ASt0lhe5mG6093wbVORM= Subject key identifier: 32:A3:CB:0B:0E:FA:9C:2A:64:00:63:D1:C6:7C:43:43:FA:9C:82:01 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 02FE Signing time: Thu 03 Jul 2025 01:39:29 +0000 Manifest this update: Thu 03 Jul 2025 01:39:29 +0000 Manifest next update: Thu 10 Jul 2025 01:39:29 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: Wgnlw9181oj4vN9rs9O/55wcV5Cx7RZqVdVIjMseKZM=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: RnbjFxdhVYxbEY3yp6uidgVt3+flm27oqhA1+XpnuB4=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: 3npwV8/+wiUK9JBAZyO0+8UedY3k/f+O7Td/WLjNjlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Jul 3 01:39:29 2025 GMT Not After : Jul 10 01:39:29 2025 GMT Subject: CN=6865df51-46ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:44:61:82:f2:b3:b3:57:71:3a:68:2d:57: 0a:6a:71:03:c3:8c:b3:2f:60:cb:e7:34:30:29:b2: 82:80:c3:44:40:ef:06:69:38:8b:1b:ac:73:93:78: 8d:86:a3:da:5c:1e:7f:0c:9d:a8:d6:d9:ea:23:d9: 26:68:26:bc:35:8b:47:86:63:fb:cf:0b:e9:f5:e6: 43:92:c8:82:8b:a3:43:f2:b7:ab:ab:cc:78:e3:65: 0d:c8:a4:6f:f9:56:3d:31:b8:ea:4c:85:57:9b:2c: 4a:7d:dd:ff:89:f9:64:d3:ee:81:ce:8f:0c:b1:4a: 00:38:3b:02:fd:93:a0:bc:f0:2d:fb:67:ff:6b:35: 95:89:d2:15:29:f3:c5:33:3e:65:10:ac:c4:65:ac: d7:39:45:4e:50:05:c7:13:9b:7e:9e:ca:2d:5b:67: a2:32:2b:95:b1:f5:c8:83:c8:7b:ee:8c:3b:a0:71: 89:e3:2b:5c:7c:21:98:c4:01:c6:79:21:bf:23:5a: a6:4f:5d:e1:07:3a:a2:3d:df:33:ac:b3:98:23:07: 05:c7:6e:1e:b6:2c:35:0a:c8:58:7f:c1:ba:e4:dc: 14:f7:0f:d0:9a:21:c7:0a:dd:01:62:17:c7:3c:3a: 86:e9:9f:e3:f8:96:6e:35:69:10:78:dd:7e:e9:f5: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A3:CB:0B:0E:FA:9C:2A:64:00:63:D1:C6:7C:43:43:FA:9C:82:01 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ec:77:55:b2:4e:6a:b1:6b:ea:1f:c6:e7:82:f2:3c:c4:b0: 9a:70:f4:3d:41:71:69:05:e6:6b:0e:40:c0:71:28:e3:0e:30: 75:10:c6:45:98:97:f9:fd:f5:37:8b:bb:3e:09:0b:cc:20:99: bb:f2:c5:8d:03:25:f9:69:04:4a:68:35:27:a2:9e:6c:b3:1e: 31:22:f9:eb:fa:c1:f7:43:f4:31:03:11:04:8b:38:30:7a:d2: ff:64:79:4a:d9:56:79:6f:ed:5f:e5:c7:a9:a2:ef:9d:33:2e: 0a:d4:f8:e3:18:19:86:d2:7e:d6:2b:cd:df:38:e6:9a:1b:2a: 42:59:16:f5:c8:3f:ea:a4:a4:a5:04:66:0e:8c:c6:63:53:1e: b7:bf:38:b3:19:86:45:04:dc:8c:53:73:fd:43:0b:af:41:a3: 3e:2d:65:ce:bc:e7:e5:8c:07:8d:3e:34:e8:f0:29:40:c1:49: ba:f7:5c:17:a2:7a:94:6d:fb:bc:ae:6a:1d:51:b0:4b:c3:fc: e5:46:68:37:6f:8b:86:dc:33:c9:03:ea:8d:5e:5b:2f:87:e9: eb:36:93:f5:c1:50:12:af:a3:fd:6c:a2:e7:32:1c:f5:2e:1f: 8f:52:6a:2f:8f:e9:99:8d:26:69:1b:f6:de:d3:cf:d8:ee:ac: 08:ad:79:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwNzAzMDEzOTI5WhcNMjUwNzEwMDEzOTI5WjAYMRYwFAYD VQQDEw02ODY1ZGY1MS00NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP9EYYLys7NXcTpoLVcKanEDw4yzL2DL5zQwKbKCgMNEQO8GaTiLG6xzk3iN hqPaXB5/DJ2o1tnqI9kmaCa8NYtHhmP7zwvp9eZDksiCi6ND8rerq8x442UNyKRv +VY9MbjqTIVXmyxKfd3/iflk0+6Bzo8MsUoAODsC/ZOgvPAt+2f/azWVidIVKfPF Mz5lEKzEZazXOUVOUAXHE5t+nsotW2eiMiuVsfXIg8h77ow7oHGJ4ytcfCGYxAHG eSG/I1qmT13hBzqiPd8zrLOYIwcFx24etiw1CshYf8G65NwU9w/QmiHHCt0BYhfH PDqG6Z/j+JZuNWkQeN1+6fV6JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKjywsO +pwqZABj0cZ8Q0P6nIIBMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn7HdVsk5qsWvqH8bngvI8xLCacPQ9QXFpBeZrDkDAcSjjDjB1EMZF mJf5/fU3i7s+CQvMIJm78sWNAyX5aQRKaDUnop5ssx4xIvnr+sH3Q/QxAxEEizgw etL/ZHlK2VZ5b+1f5cepou+dMy4K1PjjGBmG0n7WK83fOOaaGypCWRb1yD/qpKSl BGYOjMZjUx63vzizGYZFBNyMU3P9QwuvQaM+LWXOvOfljAeNPjTo8ClAwUm691wX onqUbfu8rmodUbBLw/zlRmg3b4uG3DPJA+qNXlsvh+nrNpP1wVASr6P9bKLnMhz1 Lh+PUmovj+mZjSZpG/be08/Y7qwIrXlj -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:18 2025 by rpki-client