$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: jyNaC/24YwdEiu4T1JqDwPKCdSq1yxb/qX4A3Yw/b7E= Subject key identifier: 71:5A:93:6B:A9:7A:C7:CD:99:57:23:2B:06:87:4F:14:63:BD:58:41 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0FCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0FB5 Signing time: Wed 02 Jul 2025 17:44:22 +0000 Manifest this update: Wed 02 Jul 2025 17:44:22 +0000 Manifest next update: Wed 09 Jul 2025 17:44:22 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: vmzrZ1NiEzDV0Nw0FYHY12rQTY4Pxn8N4sOLbaXu7tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4042 (0xfca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Jul 2 17:44:22 2025 GMT Not After : Jul 9 17:44:22 2025 GMT Subject: CN=68656ff6-0283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:cd:fe:1b:33:3b:0a:e7:9c:dd:b5:d6:bb: bd:94:7e:58:41:71:ab:98:66:70:3c:59:3d:71:ae: e5:86:bf:6a:e7:cb:a3:2d:8a:5d:88:40:b0:78:3d: d3:3d:75:93:4d:f1:1a:af:b6:b7:c0:a9:31:05:67: 60:28:2e:de:b1:2e:2c:9e:37:b7:f7:3f:dd:f1:32: d2:b5:0d:97:58:ea:33:53:87:9c:49:6e:7e:d1:ba: 3c:dc:59:7d:6a:2a:6a:ff:e1:0f:67:80:a3:b0:03: 21:37:28:3b:9d:bc:72:40:2c:9c:a9:4c:80:4e:53: ce:dc:3d:a1:9b:01:e3:08:0c:1f:f8:43:a9:64:ce: e8:81:60:fb:f6:ad:0f:93:55:4b:79:ea:f7:ef:67: 2a:79:61:79:e1:0c:19:8e:b4:89:9a:5d:c6:80:ef: 7a:f1:d3:d5:f0:46:a2:a5:af:29:7d:3b:55:b7:85: 9c:8b:b8:95:6d:3f:2e:e5:70:85:b4:9d:39:09:61: 5a:2a:73:31:eb:d5:b0:62:59:4f:f9:91:51:98:5f: e0:7f:8e:fd:aa:24:94:27:58:b2:50:c5:51:13:ad: 49:4f:28:39:a1:66:17:46:7c:a1:46:22:cb:e0:a4: df:52:20:32:83:39:d7:e9:d9:ee:56:fe:1a:61:87: c1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:93:6B:A9:7A:C7:CD:99:57:23:2B:06:87:4F:14:63:BD:58:41 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e7:5d:fd:79:25:da:ca:12:53:d7:06:6c:4f:aa:6a:e1:77: 0b:a3:8f:55:9b:97:20:55:b6:80:ac:bc:9d:c6:df:f2:b3:ec: 55:72:4d:e6:d4:6b:47:ea:df:bb:59:c8:cb:19:1e:10:a0:b2: d0:4a:0b:a1:2e:1c:cd:16:ea:c2:29:d1:ce:c5:4a:c7:e1:30: 15:06:bc:02:65:75:5c:b5:cd:63:95:a1:8e:6a:08:a1:37:dd: 8f:94:c6:bf:19:80:9c:5f:d4:83:82:f4:df:9c:3a:1e:2e:af: 4e:73:e1:91:5a:01:a9:04:42:ef:cc:5b:33:48:bc:64:3f:93: 82:53:11:91:d7:f3:2f:c0:0c:d6:b2:78:92:a9:e5:ab:27:f6: 7d:e6:3c:91:60:04:71:b0:33:55:dd:e5:ff:6c:90:05:c9:20: 03:76:df:c0:35:dc:66:c5:34:2d:e2:04:2b:67:05:3f:be:ef: cb:30:88:f4:99:96:ef:7b:a2:d4:69:ab:04:48:94:71:58:0a: 27:a9:8b:e7:29:91:8a:11:7c:7b:7a:c1:77:e9:8e:d2:f5:c4: 1f:65:0f:58:08:67:29:f8:3a:97:29:65:fd:d1:8e:4a:d8:9b: 16:c8:bc:86:20:98:f6:13:4e:3a:b2:2f:0f:42:ea:05:61:65: 10:69:e2:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUwNzAyMTc0NDIyWhcNMjUwNzA5MTc0NDIyWjAYMRYwFAYD VQQDEw02ODY1NmZmNi0wMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi7N/hszOwrnnN211ru9lH5YQXGrmGZwPFk9ca7lhr9q58ujLYpdiECweD3T PXWTTfEar7a3wKkxBWdgKC7esS4snje39z/d8TLStQ2XWOozU4ecSW5+0bo83Fl9 aipq/+EPZ4CjsAMhNyg7nbxyQCycqUyATlPO3D2hmwHjCAwf+EOpZM7ogWD79q0P k1VLeer372cqeWF54QwZjrSJml3GgO968dPV8Eaipa8pfTtVt4Wci7iVbT8u5XCF tJ05CWFaKnMx69WwYllP+ZFRmF/gf479qiSUJ1iyUMVRE61JTyg5oWYXRnyhRiLL 4KTfUiAygznX6dnuVv4aYYfBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFak2up esfNmVcjKwaHTxRjvVhBMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI5139eSXayhJT1wZsT6pq4XcLo49Vm5cgVbaArLydxt/ys+xVck3m 1GtH6t+7WcjLGR4QoLLQSguhLhzNFurCKdHOxUrH4TAVBrwCZXVctc1jlaGOagih N92PlMa/GYCcX9SDgvTfnDoeLq9Oc+GRWgGpBELvzFszSLxkP5OCUxGR1/MvwAzW sniSqeWrJ/Z95jyRYARxsDNV3eX/bJAFySADdt/ANdxmxTQt4gQrZwU/vu/LMIj0 mZbve6LUaasESJRxWAonqYvnKZGKEXx7esF36Y7S9cQfZQ9YCGcp+DqXKWX90Y5K 2JsWyLyGIJj2E046si8PQuoFYWUQaeIN -----END CERTIFICATE-----Generated at Thu Jul 3 16:46:52 2025 by rpki-client