$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json) Hash identifier: eRSZa7bCXCezbFGDYX+9AhXaAgGGyT6Hhr9VdfaGVBU= Subject key identifier: B6:81:39:0E:47:C9:05:B4:20:D4:C7:FE:FF:59:D4:46:E7:8E:9C:BF Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3 Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3 Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft Manifest number: 0786 Signing time: Wed 02 Jul 2025 21:44:07 +0000 Manifest this update: Wed 02 Jul 2025 21:44:06 +0000 Manifest next update: Wed 09 Jul 2025 21:44:06 +0000 Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: 5/920TjOT8nLqkt+mdXlVInnjQse3bI8faz8vjnAWzA=) 2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: wBzKpGMt55FaGaSx04uSE6kMe0UA6A3OvBAA2044T84=) 3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: TqzDGovwhtTAPmIXBsAGxjfJ3nw0cxE3m4Rbi1VLpSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3 Validity Not Before: Jul 2 21:44:06 2025 GMT Not After : Jul 9 21:44:06 2025 GMT Subject: CN=6865a826-b58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:08:8e:08:a2:bf:0f:ef:70:3e:9e:fc:35: 5a:dc:76:7b:1f:a5:f1:01:8e:a6:39:bb:9d:f0:6f: bb:9e:1b:8c:c6:1a:a1:76:85:bf:72:d6:be:fa:d1: 5c:55:e3:df:99:71:00:59:3d:36:d8:ed:cf:65:2a: 90:30:14:1f:0e:db:a4:9b:b3:b8:b9:7a:f7:29:62: 11:c9:f8:72:6e:d0:1b:d3:8b:17:8d:d4:7d:ec:b3: 42:f0:1d:e8:84:bd:c2:16:dd:60:78:94:4d:0a:08: 45:74:fa:4c:7e:89:04:06:68:7a:1c:c8:73:e7:74: 37:41:5f:a8:84:d9:32:6b:dc:42:a5:da:55:8b:f3: 0f:c6:25:8c:95:c3:9d:90:0d:a9:e9:22:20:eb:c3: 46:1b:9a:62:84:c8:f8:e0:ab:30:fd:ea:83:2b:f9: 3e:98:62:50:06:6f:0a:fc:d0:d3:77:48:f0:13:84: e4:c6:9f:47:e6:82:23:ae:9d:73:08:9d:c0:4c:ee: 37:9b:66:7a:2c:17:e2:26:4b:55:fe:39:c6:84:56: 26:4a:37:2e:92:2d:34:b9:92:4e:93:c1:2d:9b:e5: 1d:63:7a:a8:03:26:e4:d8:a3:95:18:9a:2b:da:4a: 3d:c5:fb:d1:7a:40:fb:d6:15:a4:1f:43:84:0d:a8: 0f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:81:39:0E:47:C9:05:B4:20:D4:C7:FE:FF:59:D4:46:E7:8E:9C:BF X509v3 Authority Key Identifier: keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a8:38:64:8f:96:3f:54:41:9f:21:7e:d2:38:57:72:6b:66: 7f:b6:dd:21:13:a7:a1:ea:ec:80:32:b0:1f:44:fc:e9:a1:c3: 45:4c:2f:0f:d8:83:9c:71:10:66:79:dc:9c:4f:c6:53:8d:75: 4e:9a:56:ea:45:37:d2:67:e4:ad:cd:a9:37:7f:d8:9e:0c:d9: 9a:5b:01:2d:74:00:f9:55:f5:94:7f:50:5d:02:12:ea:36:88: e5:9c:43:96:ee:bf:b1:a8:66:1d:0a:0d:ee:08:ab:a5:a8:92: 94:ed:c5:7e:c7:aa:dd:e8:65:05:58:da:d9:65:c2:32:51:79: 00:d6:06:54:98:e4:75:ea:38:c9:86:ce:a7:c4:0c:a6:7c:5a: f3:a7:ec:05:fe:ad:13:af:9c:e4:bd:b3:54:72:b8:ac:28:6f: b9:f7:4a:f7:93:10:b2:c7:9d:56:5a:b9:31:10:65:11:d7:cc: 27:35:32:fc:57:bf:03:67:5d:c1:fe:48:b9:67:52:67:c4:00: 13:20:54:dc:7c:82:72:93:41:00:95:72:f4:3e:f9:dc:43:9f: c2:20:69:6a:9f:c6:32:d8:1b:dd:d1:44:4d:c7:3c:11:b6:b0: 24:51:48:21:45:6c:c0:c4:9c:28:ae:3e:ab:b1:fe:f5:6d:f2: 19:3e:5a:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVENTcxMTAvBgNVBAUTKDY2ODg3MkU4Nzk5N0I3M0I5NzVGRTNEQUQ0REFDQThF QkVDOEVCQTMwHhcNMjUwNzAyMjE0NDA2WhcNMjUwNzA5MjE0NDA2WjAYMRYwFAYD VQQDEw02ODY1YTgyNi1iNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsUIjgiivw/vcD6e/DVa3HZ7H6XxAY6mObud8G+7nhuMxhqhdoW/cta++tFc VePfmXEAWT022O3PZSqQMBQfDtukm7O4uXr3KWIRyfhybtAb04sXjdR97LNC8B3o hL3CFt1geJRNCghFdPpMfokEBmh6HMhz53Q3QV+ohNkya9xCpdpVi/MPxiWMlcOd kA2p6SIg68NGG5pihMj44Ksw/eqDK/k+mGJQBm8K/NDTd0jwE4Tkxp9H5oIjrp1z CJ3ATO43m2Z6LBfiJktV/jnGhFYmSjcuki00uZJOk8Etm+UdY3qoAybk2KOVGJor 2ko9xfvRekD71hWkH0OEDagP+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaBOQ5H yQW0INTH/v9Z1Ebnjpy/MB8GA1UdIwQYMBaAFGaIcuh5l7c7l1/j2tTayo6+yOuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUQ1Ny81Q0Q4MjQ0MjE3 QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6dVhYLVBhMU5yS2pyN0k2 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvaHk2SG1YdHp1WFgtUGExTnJLanI3STY2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUQ1Ny81Q0Q4MjQ0MjE3QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6 dVhYLVBhMU5yS2pyN0k2Nk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbqDhkj5Y/VEGfIX7SOFdya2Z/tt0hE6eh6uyAMrAfRPzpocNFTC8P 2IOccRBmedycT8ZTjXVOmlbqRTfSZ+Stzak3f9ieDNmaWwEtdAD5VfWUf1BdAhLq NojlnEOW7r+xqGYdCg3uCKulqJKU7cV+x6rd6GUFWNrZZcIyUXkA1gZUmOR16jjJ hs6nxAymfFrzp+wF/q0Tr5zkvbNUcrisKG+590r3kxCyx51WWrkxEGUR18wnNTL8 V78DZ13B/ki5Z1JnxAATIFTcfIJyk0EAlXL0PvncQ5/CIGlqn8Yy2Bvd0URNxzwR trAkUUghRWzAxJworj6rsf71bfIZPlqW -----END CERTIFICATE-----Generated at Fri Jul 4 14:47:13 2025 by rpki-client