$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json) Hash identifier: y86z2SLrZtfK/l7eUN10OSg6m3zHSR/gbg4lsGAiI8o= Subject key identifier: A2:8A:01:4A:D0:78:1E:4E:24:7C:26:76:33:E6:AD:4A:7B:53:36:53 Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft Manifest number: 03A5 Signing time: Thu 03 Jul 2025 01:07:44 +0000 Manifest this update: Thu 03 Jul 2025 01:07:44 +0000 Manifest next update: Thu 10 Jul 2025 01:07:44 +0000 Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: cgPcjcnXyio95ZkcGxEUZfr1ndybG7klWn+utJXQcV0=) 2: 1E2EB8D09F3811ECBB84BD76C4F9AE02.roa (hash: 1WpEdRwcGN3vtWhbe0YafVKHoyPb3PH+roug1Q45T04=) 3: 1F26C9129F3811ECBB84BD76C4F9AE02.roa (hash: MGQuIf7b8pEJs0FKmZr0E0D/ZU/TElOpmNPZAx/GWO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Validity Not Before: Jul 3 01:07:44 2025 GMT Not After : Jul 10 01:07:44 2025 GMT Subject: CN=6865d7e0-9145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:2c:0b:a7:69:1a:03:da:b8:24:ea:00:39: 1f:9f:a7:98:97:31:00:9e:2f:39:aa:fd:9c:5c:72: f5:08:d0:73:d9:b5:be:da:d2:36:38:4d:43:3f:d5: 3c:0b:cd:63:aa:61:ed:50:2c:d6:f0:26:c6:95:58: 0e:1e:bf:8a:f8:c5:2a:65:a6:7a:5e:5b:ff:b0:95: b6:a5:c2:41:fa:c6:64:fd:73:93:47:1b:e7:a5:59: 8c:92:fe:83:a9:a5:55:d3:f4:1f:7c:cd:5b:a1:86: e9:e5:0e:79:cf:cd:ca:b9:76:d9:57:ee:57:58:cc: 32:d1:f6:f6:c3:10:c4:92:99:a7:b8:4b:13:fd:7e: a2:1b:0e:59:98:ad:bb:6b:7e:2a:5c:45:be:d8:2f: 0b:ec:ce:94:f9:05:d9:de:0e:99:d6:05:fb:fa:ca: 6e:cb:49:c2:d9:a7:51:4e:aa:db:b8:3e:36:86:1f: 8d:55:db:8e:12:83:1c:a6:60:5e:66:cf:04:59:22: 8c:5f:67:6c:c6:8c:bc:9c:7d:b1:ae:28:db:45:31: 5e:db:e1:01:4d:2e:12:27:17:35:aa:5a:65:1c:07: 5c:28:14:85:6e:69:70:95:8c:17:a3:4b:59:39:3b: 96:64:c4:d0:3b:62:41:05:e3:aa:62:2a:0a:40:95: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8A:01:4A:D0:78:1E:4E:24:7C:26:76:33:E6:AD:4A:7B:53:36:53 X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:be:5a:e7:5d:71:7e:cc:ad:80:f4:bf:41:88:07:ce:ac:7d: c7:61:21:d7:1f:29:b7:7f:ef:aa:56:13:53:17:4e:e3:d4:8c: ff:a1:c2:21:f2:af:7f:3a:86:42:52:61:0d:49:82:17:22:0a: d2:79:0d:82:a5:d2:8b:c0:8e:f3:07:be:52:c3:76:29:af:77: 22:2e:70:ff:86:31:b9:e8:5c:9d:cd:c5:41:c2:64:5f:b6:37: a9:39:16:b3:d8:b3:a7:ae:72:63:8b:a9:33:f0:02:8a:be:13: 3d:15:df:12:f7:ae:de:da:02:cb:56:99:3d:40:d8:f7:7e:00: 9b:9f:70:79:3b:4b:d0:2e:c6:59:22:e2:fa:90:74:9e:6c:3f: 0d:b2:1a:2a:08:20:8a:26:e1:74:07:73:58:d2:4b:2e:db:62: 39:9c:b7:cf:84:70:6f:4e:d6:94:b6:2d:d6:35:ac:8c:88:e8: 21:ef:8b:a8:61:b6:6d:99:82:b5:cb:c5:24:04:4f:63:86:93: f0:26:81:1d:d1:e4:5a:10:70:71:ef:3e:78:60:f9:4f:38:2b: 6c:30:86:c6:c6:a2:38:42:d5:bf:7a:9c:84:1d:5c:61:cb:d4: 18:1b:11:ca:c1:00:6d:c8:a5:f7:c0:dd:07:53:58:cc:10:b3: 17:26:2e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjUwNzAzMDEwNzQ0WhcNMjUwNzEwMDEwNzQ0WjAYMRYwFAYD VQQDEw02ODY1ZDdlMC05MTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuy4sC6dpGgPauCTqADkfn6eYlzEAni85qv2cXHL1CNBz2bW+2tI2OE1DP9U8 C81jqmHtUCzW8CbGlVgOHr+K+MUqZaZ6Xlv/sJW2pcJB+sZk/XOTRxvnpVmMkv6D qaVV0/QffM1boYbp5Q55z83KuXbZV+5XWMwy0fb2wxDEkpmnuEsT/X6iGw5ZmK27 a34qXEW+2C8L7M6U+QXZ3g6Z1gX7+spuy0nC2adRTqrbuD42hh+NVduOEoMcpmBe Zs8EWSKMX2dsxoy8nH2xrijbRTFe2+EBTS4SJxc1qlplHAdcKBSFbmlwlYwXo0tZ OTuWZMTQO2JBBeOqYioKQJWbowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKKAUrQ eB5OJHwmdjPmrUp7UzZTMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzA0NS9CRkFEQzYxMDlGMjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtr bU50VmNEWkdNRnlqZm5UN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzvlrnXXF+zK2A9L9BiAfOrH3HYSHXHym3f++qVhNTF07j1Iz/ocIh 8q9/OoZCUmENSYIXIgrSeQ2CpdKLwI7zB75Sw3Ypr3ciLnD/hjG56FydzcVBwmRf tjepORaz2LOnrnJji6kz8AKKvhM9Fd8S967e2gLLVpk9QNj3fgCbn3B5O0vQLsZZ IuL6kHSebD8NshoqCCCKJuF0B3NY0ksu22I5nLfPhHBvTtaUti3WNayMiOgh74uo YbZtmYK1y8UkBE9jhpPwJoEd0eRaEHBx7z54YPlPOCtsMIbGxqI4QtW/epyEHVxh y9QYGxHKwQBtyKX3wN0HU1jMELMXJi4P -----END CERTIFICATE-----Generated at Thu Jul 3 07:09:41 2025 by rpki-client