$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: 3VOr327FqexJL7c9hL/nAExM01irsYe+AFExbHzE9fA= Subject key identifier: 24:15:65:F1:67:C2:A9:AF:72:41:B0:42:F8:BA:93:58:81:64:23:6D Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 0606 Signing time: Sun 20 Jul 2025 23:03:01 +0000 Manifest this update: Sun 20 Jul 2025 23:03:01 +0000 Manifest next update: Sun 27 Jul 2025 23:03:01 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: cC6sfXpt0QbPaM0G5Az5UEPEkY49iQJ/e/zUzTzOXag=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Jul 20 23:03:01 2025 GMT Not After : Jul 27 23:03:01 2025 GMT Subject: CN=687d75a5-29dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:32:f3:39:ca:2c:aa:fb:8e:ad:53:a1:3e: 03:85:90:9c:45:fa:89:13:be:3c:04:a0:6b:e8:7b: 0c:63:b9:10:08:1f:9f:ee:9c:9d:6f:86:a3:1e:e5: 81:d2:e3:62:d4:14:0b:7b:29:32:a1:7b:af:3a:78: 13:99:e2:35:46:91:7f:7d:f3:a9:45:28:5b:2e:d9: 65:a7:3d:d7:6d:9e:e8:74:d9:b1:4c:04:ce:aa:38: 47:7b:9c:d0:6c:d4:57:72:f4:d9:b4:be:fa:5d:fa: b6:63:ff:3f:2c:72:ff:31:a0:24:8d:fb:69:36:27: ce:0d:4f:a1:7d:8e:d1:22:98:32:64:97:dd:b3:3b: 99:3d:84:95:99:21:ae:a8:2e:36:a3:61:ae:64:40: f9:dc:0f:21:72:0c:07:65:68:da:9b:c2:05:e9:9e: 27:2f:63:07:1a:fe:14:f5:1a:78:42:64:dc:52:e6: e6:d9:37:cc:1c:d3:d7:87:03:db:3c:9a:e7:fa:e8: 74:09:12:e7:f7:6c:45:b7:2d:61:86:85:5c:3f:2e: 25:78:ce:4a:67:2d:5c:07:2f:5b:a3:6d:6f:ab:8f: a2:18:33:54:d0:b8:ce:d4:66:c8:e3:c4:af:d7:ae: e5:4a:11:a2:27:58:8d:08:90:8e:15:b6:44:6b:38: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:15:65:F1:67:C2:A9:AF:72:41:B0:42:F8:BA:93:58:81:64:23:6D X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:80:1d:13:80:44:f5:0c:26:2b:8a:d2:e9:3f:dd:88:db:5e: 52:c5:b8:fa:51:4f:b2:41:bf:2a:a2:af:6e:73:d7:b4:ce:8b: b7:6f:91:bd:d7:d3:ab:9a:64:34:59:4a:38:ef:80:c8:7a:48: 8f:ec:20:e1:b2:26:55:5a:86:25:47:7f:c9:de:eb:f0:f8:ee: 10:13:76:42:ef:90:51:41:ae:8c:c3:6c:6a:d8:71:3f:b5:d2: da:c8:8f:77:03:04:42:ca:31:c7:3b:71:90:c6:05:b3:99:28: 94:6b:e0:d1:01:aa:74:3b:42:f7:b5:81:af:ac:75:ef:7c:71: 43:62:f4:68:24:a5:65:9c:3e:ea:2c:76:92:b3:2d:27:b9:65: b6:77:9e:23:55:17:12:ec:ed:43:bc:6d:09:b5:78:a2:c4:63: 4d:00:11:73:9d:a2:e5:c8:72:53:de:d2:ea:82:06:3c:32:f6: 1f:72:bc:37:a9:f5:e7:55:0b:6b:d4:4b:6e:6d:fd:54:a6:f0: ef:46:de:91:b6:5b:63:64:a0:ec:73:5d:72:fb:e1:d2:44:50: 73:86:b8:c9:6f:ef:d4:a6:b2:7e:fa:e8:e9:f6:72:c9:04:31: 4d:8b:2b:16:00:b4:2e:f4:9b:a8:7e:62:59:f9:7d:7c:7b:f6: 8d:f6:a6:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjUwNzIwMjMwMzAxWhcNMjUwNzI3MjMwMzAxWjAYMRYwFAYD VQQDEw02ODdkNzVhNS0yOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rAy8znKLKr7jq1ToT4DhZCcRfqJE748BKBr6HsMY7kQCB+f7pydb4ajHuWB 0uNi1BQLeykyoXuvOngTmeI1RpF/ffOpRShbLtllpz3XbZ7odNmxTATOqjhHe5zQ bNRXcvTZtL76Xfq2Y/8/LHL/MaAkjftpNifODU+hfY7RIpgyZJfdszuZPYSVmSGu qC42o2GuZED53A8hcgwHZWjam8IF6Z4nL2MHGv4U9Rp4QmTcUubm2TfMHNPXhwPb PJrn+uh0CRLn92xFty1hhoVcPy4leM5KZy1cBy9bo21vq4+iGDNU0LjO1GbI48Sv 167lShGiJ1iNCJCOFbZEazhQWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQVZfFn wqmvckGwQvi6k1iBZCNtMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkgB0TgET1DCYritLpP92I215Sxbj6UU+yQb8qoq9uc9e0zou3b5G9 19OrmmQ0WUo474DIekiP7CDhsiZVWoYlR3/J3uvw+O4QE3ZC75BRQa6Mw2xq2HE/ tdLayI93AwRCyjHHO3GQxgWzmSiUa+DRAap0O0L3tYGvrHXvfHFDYvRoJKVlnD7q LHaSsy0nuWW2d54jVRcS7O1DvG0JtXiixGNNABFznaLlyHJT3tLqggY8MvYfcrw3 qfXnVQtr1Etubf1UpvDvRt6RtltjZKDsc11y++HSRFBzhrjJb+/UprJ++ujp9nLJ BDFNiysWALQu9JuofmJZ+X18e/aN9qbg -----END CERTIFICATE-----Generated at Tue Jul 22 04:52:51 2025 by rpki-client