$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: EII2DtPs047nc9vIzXRuA5p+/i7yrl4C0myByLxkKNs= Subject key identifier: 76:7B:92:5B:C4:04:F1:03:63:54:23:63:70:48:0C:12:85:22:67:F5 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 3C Signing time: Thu 03 Jul 2025 07:47:57 +0000 Manifest this update: Thu 03 Jul 2025 07:47:56 +0000 Manifest next update: Thu 10 Jul 2025 07:47:56 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: rVdNtVV3NCkb6zW6Lnt/EK//qQG5a9qRDSRS/hPDdlY=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Jul 3 07:47:56 2025 GMT Not After : Jul 10 07:47:56 2025 GMT Subject: CN=686635ac-7a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:e7:48:45:95:7b:a3:bf:69:dd:18:db:ad: 93:cb:91:35:b4:7e:21:11:38:6b:6f:95:ec:ad:8e: 92:4d:19:6e:fd:f3:f3:2c:41:b4:58:f9:8d:dc:96: 0a:55:08:d4:7a:b3:17:b6:48:c5:59:00:22:01:28: db:e5:24:34:c9:32:b1:b3:b5:4f:fd:de:cb:10:10: 78:7e:4b:7b:92:d4:91:9f:71:c4:48:ea:ca:bd:dc: 5a:82:bd:81:aa:91:95:9a:e6:dc:8c:50:5c:be:7b: 82:c0:c2:ce:98:ee:35:8d:d5:aa:42:d1:f8:d5:92: ee:cb:33:a4:7a:87:ae:07:66:79:cd:36:56:56:53: 89:5f:77:0e:49:97:b4:3f:e2:15:c7:46:37:d2:93: 19:da:67:f5:db:e2:94:e3:4c:32:cb:81:e5:d9:b2: 01:2d:ee:0a:93:8d:5a:5f:38:85:1c:13:c4:65:e6: bd:d3:f1:01:ef:3d:bb:1e:37:d2:39:8d:58:a5:c7: ca:85:23:91:71:d1:0e:7b:56:db:33:8f:6e:61:5e: 6d:e1:47:ed:23:99:fa:d1:53:34:59:f9:eb:f3:fe: 0b:75:7b:93:6c:2e:0d:0f:f5:21:d7:b2:c6:58:9a: c1:e3:34:b1:83:58:d7:13:6a:d2:e4:25:4a:86:e9: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7B:92:5B:C4:04:F1:03:63:54:23:63:70:48:0C:12:85:22:67:F5 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:15:06:a5:63:88:d8:f8:12:e9:e6:6c:c2:b8:07:ef:84:ce: 95:4f:55:14:e9:f3:6f:4b:99:cc:af:69:3c:1a:34:fa:a4:c6: 92:e3:85:ac:4a:ad:27:0f:50:26:4f:fc:7c:aa:33:8a:f3:da: fc:7e:40:6a:b9:f9:3e:bc:76:b3:4f:be:ee:c8:1b:c4:27:db: 89:36:94:6d:eb:58:36:17:d6:d3:d9:ab:3d:46:8a:02:9e:fc: 55:d0:92:49:b5:5d:c0:ec:e8:fd:a0:1d:56:41:6d:68:1f:58: 67:dc:56:e4:f1:ad:ee:be:a0:b1:82:23:57:3f:88:fb:1f:79: 1a:2b:42:fc:c5:dd:34:78:c7:f5:04:76:d6:34:7c:2e:e8:16: c2:32:f7:23:3c:c4:ef:2d:8d:9d:19:45:3e:1c:f3:e0:8b:d2: f1:af:67:0b:1a:34:0b:91:4e:ff:3a:01:72:f4:09:5b:f8:b6: 25:83:a3:8b:1a:ea:33:f7:ee:6b:a0:95:49:4f:de:87:87:2b: 2e:0a:89:41:6f:55:cb:9b:98:3b:a3:2e:3f:aa:70:41:7f:2c: 7f:e1:27:07:16:9f:12:bd:9a:07:26:ed:04:db:8a:8e:f4:32: 73:f3:0b:8e:e4:41:72:88:95:f4:3d:25:58:9d:e4:f0:49:b2: 44:74:fd:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTA3MDMwNzQ3NTZaFw0yNTA3MTAwNzQ3NTZaMBgxFjAUBgNV BAMTDTY4NjYzNWFjLTdhMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBo+dIRZV7o79p3RjbrZPLkTW0fiEROGtvleytjpJNGW798/MsQbRY+Y3clgpV CNR6sxe2SMVZACIBKNvlJDTJMrGztU/93ssQEHh+S3uS1JGfccRI6sq93FqCvYGq kZWa5tyMUFy+e4LAws6Y7jWN1apC0fjVku7LM6R6h64HZnnNNlZWU4lfdw5Jl7Q/ 4hXHRjfSkxnaZ/Xb4pTjTDLLgeXZsgEt7gqTjVpfOIUcE8Rl5r3T8QHvPbseN9I5 jVilx8qFI5Fx0Q57Vtszj25hXm3hR+0jmfrRUzRZ+evz/gt1e5NsLg0P9SHXssZY msHjNLGDWNcTatLkJUqG6Xa5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdnuSW8QE 8QNjVCNjcEgMEoUiZ/UwHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYVBqVjiNj4EunmbMK4B++EzpVPVRTp829LmcyvaTwaNPqkxpLjhaxK rScPUCZP/HyqM4rz2vx+QGq5+T68drNPvu7IG8Qn24k2lG3rWDYX1tPZqz1GigKe /FXQkkm1XcDs6P2gHVZBbWgfWGfcVuTxre6+oLGCI1c/iPsfeRorQvzF3TR4x/UE dtY0fC7oFsIy9yM8xO8tjZ0ZRT4c8+CL0vGvZwsaNAuRTv86AXL0CVv4tiWDo4sa 6jP37muglUlP3oeHKy4KiUFvVcubmDujLj+qcEF/LH/hJwcWnxK9mgcm7QTbio70 MnPzC47kQXKIlfQ9JVid5PBJskR0/YY= -----END CERTIFICATE-----Generated at Sat Jul 5 02:47:19 2025 by rpki-client