$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: R1TrLWZGL0K7ewCUAetlka2j2pD+w8dMHtrW9gDZbso= Subject key identifier: A9:C5:D5:8D:F2:1B:2F:63:48:D0:BA:D6:87:7C:B8:32:25:AF:0D:DC Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: 0102 Signing time: Thu 03 Jul 2025 05:30:54 +0000 Manifest this update: Thu 03 Jul 2025 05:30:54 +0000 Manifest next update: Thu 10 Jul 2025 05:30:54 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: wPdESu4xTj2MtbpTgZ6reSGWWUajVUSI6eHcWoK4RzE=) 2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: ej1Z6/vJKdXFXCjwXb83ZJtZZrkbIfDZkFd1eoC4aOQ=) 3: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=) 4: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=) 5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=) 6: CBDDFCB8566711F097EEEB3BC4F9AE02.roa (hash: 2KmIbtJ7UaF2MDiuvTLXH++DfEFeA4IP4Tmg0ICkLkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Jul 3 05:30:54 2025 GMT Not After : Jul 10 05:30:54 2025 GMT Subject: CN=6866158e-3cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:a1:dc:38:f7:4d:45:b7:2b:b0:12:01:5d: 13:7d:35:7f:22:6e:b6:fc:52:92:c8:64:8b:74:93: 01:ea:14:40:65:56:44:30:61:35:0c:6f:4f:14:1f: dd:00:58:9d:f1:e6:bc:59:5e:8b:56:6d:11:e0:85: 77:8c:9a:79:48:a8:ba:79:27:cf:75:a5:dc:50:6f: 78:31:2b:be:7d:38:17:35:d6:ea:c3:17:af:b9:60: fb:e1:e3:ad:7b:a5:45:3c:07:18:7b:54:7b:a4:3a: 66:2d:57:b7:fe:b6:27:ab:13:e5:e1:ab:7e:90:1b: 48:b7:3a:04:31:7c:76:50:7f:c2:e2:5b:1d:49:42: d2:90:08:26:51:28:1d:5b:2b:3d:94:98:75:41:c0: 2e:84:1f:65:e5:ae:04:95:81:46:88:c5:64:04:85: 05:c0:6f:10:85:b3:de:60:8f:5b:d6:70:63:2a:e2: 05:69:ce:8e:bf:e4:7b:26:f4:95:e6:74:72:69:3d: 59:b1:da:f0:09:8e:e1:94:c4:31:ad:ea:9b:1a:42: 94:d8:14:56:8c:37:3a:e9:84:32:b5:f5:25:cb:57: 95:d9:2a:47:d4:f6:cf:d7:78:9a:76:32:3e:2e:e7: bc:28:4a:b0:5f:ea:b8:64:3e:3d:52:4d:61:49:db: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C5:D5:8D:F2:1B:2F:63:48:D0:BA:D6:87:7C:B8:32:25:AF:0D:DC X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a0:0d:65:57:2f:c8:5f:6d:85:58:97:3d:f0:1d:10:f0:b2: 7b:fe:ad:bf:09:19:ca:ca:01:cf:b2:0b:7b:89:3e:43:f6:ba: 2c:6e:62:15:46:02:81:40:6d:a3:7b:3c:76:05:08:f1:a6:c5: 6d:13:f9:25:48:66:5f:94:59:0f:60:60:87:a0:dc:1f:88:d2: 99:39:38:9c:df:ee:c8:d2:59:bb:56:64:93:54:11:f8:e9:3b: 91:8e:91:fc:53:82:1f:98:45:30:18:90:a3:9c:56:50:4b:55: 35:0d:4a:d9:93:e8:07:1d:a5:2b:58:ce:f8:b8:fe:31:9b:81: 62:07:62:c8:18:8f:9a:50:fe:ae:96:8b:cc:03:04:e1:95:93: 89:aa:5b:98:e6:2c:85:62:90:ee:c7:4f:6b:f3:50:3f:6e:ed: 55:ab:1b:36:53:b2:79:1c:a1:6b:ad:26:5f:53:f2:13:f1:58: df:68:52:39:42:24:70:11:e8:a5:d8:fa:bb:17:49:80:8b:7f: fe:d2:53:7c:22:3f:2d:d4:ab:a1:64:be:b9:50:ce:0b:ff:5b: c2:ce:15:5a:23:20:81:6d:2e:74:7d:18:61:93:b4:11:f8:d9: fd:18:75:96:31:b4:81:63:2d:97:b9:1c:be:6e:68:c3:36:4a: 8d:af:22:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUwNzAzMDUzMDU0WhcNMjUwNzEwMDUzMDU0WjAYMRYwFAYD VQQDEw02ODY2MTU4ZS0zY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ6h3Dj3TUW3K7ASAV0TfTV/Im62/FKSyGSLdJMB6hRAZVZEMGE1DG9PFB/d AFid8ea8WV6LVm0R4IV3jJp5SKi6eSfPdaXcUG94MSu+fTgXNdbqwxevuWD74eOt e6VFPAcYe1R7pDpmLVe3/rYnqxPl4at+kBtItzoEMXx2UH/C4lsdSULSkAgmUSgd Wys9lJh1QcAuhB9l5a4ElYFGiMVkBIUFwG8QhbPeYI9b1nBjKuIFac6Ov+R7JvSV 5nRyaT1ZsdrwCY7hlMQxreqbGkKU2BRWjDc66YQytfUly1eV2SpH1PbP13iadjI+ Lue8KEqwX+q4ZD49Uk1hSdvmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnF1Y3y Gy9jSNC61od8uDIlrw3cMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQoA1lVy/IX22FWJc98B0Q8LJ7/q2/CRnKygHPsgt7iT5D9rosbmIV RgKBQG2jezx2BQjxpsVtE/klSGZflFkPYGCHoNwfiNKZOTic3+7I0lm7VmSTVBH4 6TuRjpH8U4IfmEUwGJCjnFZQS1U1DUrZk+gHHaUrWM74uP4xm4FiB2LIGI+aUP6u lovMAwThlZOJqluY5iyFYpDux09r81A/bu1Vqxs2U7J5HKFrrSZfU/IT8VjfaFI5 QiRwEeil2Pq7F0mAi3/+0lN8Ij8t1KuhZL65UM4L/1vCzhVaIyCBbS50fRhhk7QR +Nn9GHWWMbSBYy2XuRy+bmjDNkqNryKS -----END CERTIFICATE-----Generated at Thu Jul 3 11:04:53 2025 by rpki-client