$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json) Hash identifier: ZB8vcp/SJD7DBIMhL4dvwDt4cj57F18510M3eb9JISI= Subject key identifier: 50:FD:A6:E1:46:70:60:82:56:C6:20:69:FC:1E:FE:1B:75:A3:6A:56 Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft Manifest number: 04CC Signing time: Thu 03 Jul 2025 00:16:21 +0000 Manifest this update: Thu 03 Jul 2025 00:16:21 +0000 Manifest next update: Thu 10 Jul 2025 00:16:21 +0000 Files and hashes: 1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: ojMTRkgSMCKW3fI80Ed92rB/lqS1RNhbk7Crl4viypc=) 2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Validity Not Before: Jul 3 00:16:21 2025 GMT Not After : Jul 10 00:16:21 2025 GMT Subject: CN=6865cbd5-28c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:12:54:d8:8d:bc:30:48:5d:75:ff:22:dd: 20:e4:71:1f:82:d0:90:4e:0b:a4:44:e6:1c:82:88: 23:a5:a3:f5:0b:50:ac:7e:c0:e0:1b:36:ca:0c:dc: 7c:e5:20:19:9c:ba:2c:6f:13:0b:a7:49:8e:a5:02: 35:6b:5f:43:b5:47:dd:91:7b:a1:47:37:5c:71:f1: 3a:9a:47:38:a3:68:78:e8:94:95:01:fb:38:8c:86: 3d:3a:88:ce:35:1f:31:9b:f8:79:c6:94:d2:cc:e5: 35:cf:6d:d4:f9:ac:61:87:14:f7:db:d7:f8:19:dd: 22:ae:89:a9:21:59:85:b8:1d:c8:34:57:cf:7e:57: db:a8:09:36:e2:97:85:5a:38:5a:42:55:38:db:df: 07:1a:f9:9c:4c:de:84:14:77:34:6e:7e:dc:ae:21: 08:5b:7b:bc:9f:ff:73:c7:10:de:94:6e:21:94:47: 99:78:4a:b2:a6:e1:3c:74:d3:07:f7:b5:4d:ca:2d: 74:33:aa:93:d4:11:b7:d6:61:29:57:5f:ba:22:0d: f6:5b:46:de:2d:67:96:73:46:c4:32:fe:59:7c:fe: f4:d4:f4:1b:55:a0:da:67:b3:03:52:68:c1:fd:27: 9a:e6:df:15:f6:2f:8b:be:76:3d:6e:ad:fd:57:e3: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FD:A6:E1:46:70:60:82:56:C6:20:69:FC:1E:FE:1B:75:A3:6A:56 X509v3 Authority Key Identifier: keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e6:a2:79:fb:06:f7:52:c0:d2:41:27:2e:4e:fb:c4:3e:e8: 48:c3:11:76:ba:08:9b:09:69:cf:00:87:5c:61:4b:a0:60:59: 0f:b4:ab:55:23:07:b6:2c:35:89:4a:55:ee:ce:25:1e:89:7b: c3:d2:c0:cd:7f:6f:8b:bb:e5:7b:22:00:8e:0a:62:63:06:55: 96:04:f6:9b:73:75:67:26:90:0e:8e:b0:24:3d:8b:df:c4:1e: 1a:ad:94:8f:c5:3b:4c:ac:be:85:15:e7:53:63:79:ae:72:e5: 73:08:57:bc:ad:d9:2e:cb:3f:1a:0c:2c:a6:3d:8e:b2:a9:6c: 70:22:eb:8c:24:41:96:22:d5:0d:a9:31:3a:00:79:7f:8e:6b: 9f:7b:da:1c:b6:2f:8d:90:64:0d:75:4c:39:0b:9f:66:6c:0e: e9:6f:42:3d:88:88:c2:d4:e8:ca:55:05:fb:41:f0:88:f7:13: 8f:29:aa:0b:e5:c7:70:15:9b:84:e9:a4:20:fd:9e:dc:2b:ce: e0:19:bf:c7:81:af:10:fc:8b:26:90:f4:ad:28:51:57:a1:b7: 32:74:df:b3:7a:aa:2b:64:89:64:ad:3e:30:bf:87:e2:18:cc: 5f:66:16:7e:2e:ea:5f:a0:8f:00:a4:3d:d3:af:66:b6:08:94: a0:52:e8:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhEM0FDQ0M2REFB NEM1MThDQjQwHhcNMjUwNzAzMDAxNjIxWhcNMjUwNzEwMDAxNjIxWjAYMRYwFAYD VQQDEw02ODY1Y2JkNS0yOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylkSVNiNvDBIXXX/It0g5HEfgtCQTgukROYcgogjpaP1C1CsfsDgGzbKDNx8 5SAZnLosbxMLp0mOpQI1a19DtUfdkXuhRzdccfE6mkc4o2h46JSVAfs4jIY9OojO NR8xm/h5xpTSzOU1z23U+axhhxT329f4Gd0irompIVmFuB3INFfPflfbqAk24peF WjhaQlU4298HGvmcTN6EFHc0bn7criEIW3u8n/9zxxDelG4hlEeZeEqypuE8dNMH 97VNyi10M6qT1BG31mEpV1+6Ig32W0beLWeWc0bEMv5ZfP701PQbVaDaZ7MDUmjB /Sea5t8V9i+LvnY9bq39V+PTUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFD9puFG cGCCVsYgafwe/ht1o2pWMB8GA1UdIwQYMBaAFGfzfFDKM89PUIV406zMbapMUYy0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE3Ri83NjBFMjI4RTM3 REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venowOVFoWGpUck14dHFreFJq TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfTjhVTW96ejA5UWhYalRyTXh0cWt4UmpMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE3Ri83NjBFMjI4RTM3REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venow OVFoWGpUck14dHFreFJqTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr5qJ5+wb3UsDSQScuTvvEPuhIwxF2ugibCWnPAIdcYUugYFkPtKtV Iwe2LDWJSlXuziUeiXvD0sDNf2+Lu+V7IgCOCmJjBlWWBPabc3VnJpAOjrAkPYvf xB4arZSPxTtMrL6FFedTY3mucuVzCFe8rdkuyz8aDCymPY6yqWxwIuuMJEGWItUN qTE6AHl/jmufe9octi+NkGQNdUw5C59mbA7pb0I9iIjC1OjKVQX7QfCI9xOPKaoL 5cdwFZuE6aQg/Z7cK87gGb/Hga8Q/IsmkPStKFFXobcydN+zeqorZIlkrT4wv4fi GMxfZhZ+LupfoI8ApD3Tr2a2CJSgUuhA -----END CERTIFICATE-----Generated at Thu Jul 3 08:37:44 2025 by rpki-client