$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: +3C0vCwAjDOATx/oSoJdfw8ZtRHjSGL+IK5qJitKF0Y= Subject key identifier: 36:8C:F1:DA:0B:E6:F0:9E:6B:85:9A:CD:75:2C:48:E3:56:80:52:0D Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0D4B Signing time: Fri 18 Jul 2025 18:10:46 +0000 Manifest this update: Fri 18 Jul 2025 18:10:45 +0000 Manifest next update: Fri 25 Jul 2025 18:10:45 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: Bi8JBvULm9HpiLfKIxuzREv+8xup+QGYtmD6Wcsas38=) 2: 73E16BB27C4711EFACFB1228C4F9AE02.roa (hash: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3436 (0xd6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1, serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: Jul 18 18:10:45 2025 GMT Not After : Jul 25 18:10:45 2025 GMT Subject: CN=687a8e25-9f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:96:ac:97:5e:e0:88:17:1a:86:6d:e4:42: 0b:da:c2:3c:26:80:4d:f2:9a:03:7c:79:66:d5:a1: 70:49:58:84:be:36:73:bf:dd:d0:36:da:b0:fb:f6: 1a:ec:ff:84:10:15:11:31:e5:84:38:61:e3:df:d1: 9a:ec:a6:96:76:fb:41:7d:44:31:a0:a0:97:90:10: 54:fa:a1:33:d4:5e:b4:2b:9d:5d:2a:25:79:75:90: bc:46:11:13:ec:a9:aa:8b:ad:df:b0:c0:53:89:19: 27:89:db:a9:a1:69:76:3c:db:88:1e:86:18:d4:44: 3b:6b:02:14:7f:56:4a:18:65:63:27:fa:46:16:62: e8:a3:87:fd:00:84:2e:60:8d:29:c2:b4:8a:97:90: f1:47:f6:d7:f0:06:eb:26:99:1e:c9:9c:11:29:3f: 58:9e:ac:34:3a:74:c1:f8:6d:cd:73:b9:b3:ef:aa: 40:70:d0:85:b3:7d:5a:0d:af:37:a0:cf:d0:9e:c2: 65:84:9e:27:14:11:17:bd:17:b4:19:f1:10:b6:e8: 5d:f8:98:20:d4:dd:1b:62:75:79:f1:96:9a:25:2d: b6:5c:dd:dc:95:ac:c5:96:b5:01:66:5d:d3:d1:50: 93:0c:5e:f4:4b:79:34:d6:53:0e:28:e6:1f:1e:71: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8C:F1:DA:0B:E6:F0:9E:6B:85:9A:CD:75:2C:48:E3:56:80:52:0D X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:92:b2:0b:be:f9:a0:83:fd:4f:6a:2a:67:c6:8c:c5:94:da: cd:41:d1:69:47:4b:df:b0:71:8c:32:18:7b:ac:6f:e7:57:d7: ad:54:16:01:3b:df:64:85:3c:14:7e:3a:d6:8f:2f:34:8b:ca: 66:1a:9d:93:e2:f0:bd:e7:94:e1:e9:7f:1c:67:37:7b:56:d3: 2c:19:80:d8:8e:f3:00:f5:aa:57:de:ed:9b:b4:77:f6:5c:62: e7:84:05:be:b8:69:c4:47:42:3f:96:85:f3:b0:59:35:99:1d: 23:be:03:b2:30:6e:63:a7:1b:79:e3:4c:0f:b0:79:c8:d8:9e: 59:ca:34:3d:e3:63:8b:93:d5:85:3f:af:cd:14:4c:63:8d:07: c7:7e:88:fa:80:28:61:91:a1:9b:60:42:fc:0a:17:d5:8d:d5: e6:d4:53:94:76:c7:33:4c:cb:d4:44:45:d4:36:35:64:4e:7f: 77:04:83:3d:61:02:bd:62:6d:d8:11:f4:b4:ba:ae:29:fb:37: e1:7c:b5:f0:94:c9:5f:a3:2b:f6:eb:7a:77:63:72:2b:80:22: a8:f4:fd:43:ec:61:e1:43:07:85:7f:87:33:36:b7:6b:3c:d3: 5d:6b:6a:fe:e6:c7:0c:5c:cb:d2:88:19:b3:8a:0f:5d:3a:78: 97:e0:84:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjUwNzE4MTgxMDQ1WhcNMjUwNzI1MTgxMDQ1WjAYMRYwFAYD VQQDEw02ODdhOGUyNS05ZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOuWrJde4IgXGoZt5EIL2sI8JoBN8poDfHlm1aFwSViEvjZzv93QNtqw+/Ya 7P+EEBURMeWEOGHj39Ga7KaWdvtBfUQxoKCXkBBU+qEz1F60K51dKiV5dZC8RhET 7Kmqi63fsMBTiRknidupoWl2PNuIHoYY1EQ7awIUf1ZKGGVjJ/pGFmLoo4f9AIQu YI0pwrSKl5DxR/bX8AbrJpkeyZwRKT9Ynqw0OnTB+G3Nc7mz76pAcNCFs31aDa83 oM/QnsJlhJ4nFBEXvRe0GfEQtuhd+Jgg1N0bYnV58ZaaJS22XN3clazFlrUBZl3T 0VCTDF70S3k01lMOKOYfHnHcjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaM8doL 5vCea4WazXUsSONWgFINMB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANkrILvvmgg/1PaipnxozFlNrNQdFpR0vfsHGMMhh7rG/nV9etVBYB O99khTwUfjrWjy80i8pmGp2T4vC955Th6X8cZzd7VtMsGYDYjvMA9apX3u2btHf2 XGLnhAW+uGnER0I/loXzsFk1mR0jvgOyMG5jpxt540wPsHnI2J5ZyjQ942OLk9WF P6/NFExjjQfHfoj6gChhkaGbYEL8ChfVjdXm1FOUdsczTMvUREXUNjVkTn93BIM9 YQK9Ym3YEfS0uq4p+zfhfLXwlMlfoyv263p3Y3IrgCKo9P1D7GHhQweFf4czNrdr PNNda2r+5scMXMvSiBmzig9dOniX4IQg -----END CERTIFICATE-----Generated at Sun Jul 20 10:34:28 2025 by rpki-client