$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: HSbfJvNTRXxST7+C/hTjr6pGkJUJdAh1pdPS+u3PTxM= Subject key identifier: E6:98:1F:E8:B6:7C:BC:0E:AA:2C:AE:22:56:88:4A:F0:AF:23:7E:C8 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 2A Signing time: Sun 29 Jun 2025 06:45:40 +0000 Manifest this update: Sun 29 Jun 2025 06:45:40 +0000 Manifest next update: Sun 06 Jul 2025 06:45:40 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: dKdoI0AfTRYF8T8OFhZ1yZMwNeSCx0QlQpgcyDPGqXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Jun 29 06:45:40 2025 GMT Not After : Jul 6 06:45:40 2025 GMT Subject: CN=6860e114-b8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:77:5a:ca:3a:c6:77:a0:63:28:6b:9c:ee: ec:38:4a:c9:92:9c:85:e6:4d:a1:4e:75:37:f9:4c: 46:62:14:ae:41:5b:11:cf:00:7e:07:af:91:e8:ea: c2:ff:f9:52:e9:7f:32:0d:3f:25:ae:ec:2c:e4:54: 93:98:16:70:d3:93:72:ca:8c:e3:c2:b8:2d:b9:91: 62:0e:27:80:7b:98:6e:3f:a0:09:d1:c6:ab:46:34: e5:03:ff:3b:8f:5a:a0:6f:ec:9f:e5:b0:72:5e:09: 95:0b:1e:16:de:4f:57:76:03:56:35:2e:89:36:ff: 21:8b:d5:dc:4d:43:a7:b1:32:40:05:61:41:5d:aa: 49:07:e7:39:58:ba:5f:75:82:6d:8a:fa:14:c4:20: 7d:bb:0a:25:93:d1:3e:36:be:c4:15:45:cc:cd:34: 5e:9c:17:f2:c8:4c:ca:bd:de:ce:45:a2:94:b5:04: 69:6c:de:91:2e:59:7c:07:34:9f:07:93:4e:58:b9: 73:d9:24:9a:1e:ca:fc:20:fc:e1:f6:63:30:20:6f: af:3e:bd:13:23:0e:d0:f7:84:b2:83:fd:a7:84:d3: a0:61:08:86:15:2a:d5:05:cc:9b:97:08:58:4d:f0: d1:41:b5:0e:fd:5e:f4:d2:67:4e:64:3d:a3:55:0d: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:98:1F:E8:B6:7C:BC:0E:AA:2C:AE:22:56:88:4A:F0:AF:23:7E:C8 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f6:7a:7f:a1:fd:82:b1:f8:0b:37:5d:42:1c:97:8a:fd:2b: 64:07:18:80:a2:b3:4b:4a:60:e3:8b:4e:7e:52:50:58:21:f1: 98:4f:f1:87:9e:5e:0d:c8:9d:14:a9:97:b6:00:3b:41:84:60: 3f:0a:40:af:f9:18:6c:1e:1f:a8:11:29:cc:4b:4f:79:ca:33: 20:b2:eb:d9:d0:de:13:2f:d5:4b:5c:04:2c:2f:79:ca:84:06: c3:4a:6c:b6:34:b2:d5:70:03:65:27:be:da:ac:3f:bd:12:90: 3b:cf:cb:3b:f8:96:08:1c:bd:d2:d8:39:95:44:a5:96:66:2f: 3f:51:da:bd:47:28:6d:de:ff:ae:4e:64:cf:03:43:59:1e:d0: 39:57:ab:66:b7:22:31:98:f8:12:41:93:99:80:ea:09:c7:6f: d4:a7:e2:18:99:15:ec:5f:cd:68:2b:37:00:b2:40:77:b5:4e: f6:47:a1:8e:54:d2:fd:07:06:d2:d1:3f:70:2e:59:8a:d7:9d: 61:3c:89:73:a6:e7:42:0a:33:f5:21:1a:dc:8e:64:66:f6:d6: 92:3c:cf:e7:c8:72:34:c5:96:dd:3f:73:2d:3d:0a:d3:e6:72: 77:88:b1:9c:9b:44:93:2b:74:94:a5:12:4a:c2:1e:69:1f:3e: f7:98:e5:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTA2MjkwNjQ1NDBaFw0yNTA3MDYwNjQ1NDBaMBgxFjAUBgNV BAMTDTY4NjBlMTE0LWI4ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9n3dayjrGd6BjKGuc7uw4SsmSnIXmTaFOdTf5TEZiFK5BWxHPAH4Hr5Ho6sL/ +VLpfzINPyWu7CzkVJOYFnDTk3LKjOPCuC25kWIOJ4B7mG4/oAnRxqtGNOUD/zuP WqBv7J/lsHJeCZULHhbeT1d2A1Y1Lok2/yGL1dxNQ6exMkAFYUFdqkkH5zlYul91 gm2K+hTEIH27CiWT0T42vsQVRczNNF6cF/LITMq93s5FopS1BGls3pEuWXwHNJ8H k05YuXPZJJoeyvwg/OH2YzAgb68+vRMjDtD3hLKD/aeE06BhCIYVKtUFzJuXCFhN 8NFBtQ79XvTSZ05kPaNVDaNfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5pgf6LZ8 vA6qLK4iVohK8K8jfsgwHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA72en+h/YKx+As3XUIcl4r9K2QHGICis0tKYOOLTn5SUFgh8ZhP8Yee Xg3InRSpl7YAO0GEYD8KQK/5GGweH6gRKcxLT3nKMyCy69nQ3hMv1UtcBCwvecqE BsNKbLY0stVwA2UnvtqsP70SkDvPyzv4lggcvdLYOZVEpZZmLz9R2r1HKG3e/65O ZM8DQ1ke0DlXq2a3IjGY+BJBk5mA6gnHb9Sn4hiZFexfzWgrNwCyQHe1TvZHoY5U 0v0HBtLRP3AuWYrXnWE8iXOm50IKM/UhGtyOZGb21pI8z+fIcjTFlt0/cy09CtPm cneIsZybRJMrdJSlEkrCHmkfPveY5V0= -----END CERTIFICATE-----Generated at Sun Jun 29 16:11:15 2025 by rpki-client