$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: aDJAuFgZzBE1LZ4TOaY2cp50j17qgQpBw2gN/to3t7M= Subject key identifier: E1:1C:32:85:4A:DC:6F:3B:47:28:C4:47:75:1A:95:58:13:2A:7A:61 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 14D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 14B2 Signing time: Fri 18 Jul 2025 16:59:51 +0000 Manifest this update: Fri 18 Jul 2025 16:59:50 +0000 Manifest next update: Fri 25 Jul 2025 16:59:50 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: 1h8TltLYBYGofkG12Q3+uXToRfQLDzSVnUmyVqWHKG4=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: KlBzZE2KV7lzBc+tNUy/mqi1akgFY3Eb2SwhsYFxcBI=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: uMpXCjBvKkjgsvqgftGEXm10xWManwhepg98lroRmbE=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 6D0gW6FWFI2VeP1xT9SYxSMf8UjausKvml76wHWoNrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5328 (0x14d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Jul 18 16:59:50 2025 GMT Not After : Jul 25 16:59:50 2025 GMT Subject: CN=687a7d86-f30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:be:31:fe:f1:aa:4e:66:85:58:05:5b:29: 9e:d8:83:18:f2:3d:83:e1:6c:f8:b2:8b:48:2c:2b: 5d:7e:85:27:6f:09:a7:8a:61:50:46:76:86:d8:fd: ec:89:0d:86:69:34:0c:23:95:a6:6f:43:cc:68:05: 87:93:be:9a:29:c4:fd:d6:47:02:0a:c9:5b:a7:44: 35:34:28:d8:fe:fb:d4:c6:7e:f3:b4:fb:5e:b8:37: 1e:38:0a:e7:4d:82:c2:24:b3:0f:93:f0:55:60:4b: 0e:fc:15:26:5e:8a:76:99:86:e2:04:4d:19:e6:91: fc:25:d1:11:58:e3:e2:07:26:5f:4c:8f:2f:c5:12: c9:48:2b:0d:9a:37:a9:17:98:97:10:cd:b3:43:d7: f6:10:92:54:11:4d:78:9b:92:16:7d:af:89:f4:de: 5f:9f:23:72:5c:d1:51:f7:f9:1d:7a:40:b5:bc:cf: 1e:6e:68:13:8b:4b:72:e0:d4:a2:d5:be:1b:9a:a4: 17:00:02:e5:65:7c:36:63:a2:f1:d4:79:86:7e:77: e2:11:ce:af:67:0a:b7:4c:2a:a3:b2:f1:65:df:ee: 8b:81:b2:0f:f0:f4:45:ba:8d:0c:a7:cb:e1:2f:06: cf:4f:e0:15:8b:cf:10:f1:7d:b9:14:03:7c:22:a1: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1C:32:85:4A:DC:6F:3B:47:28:C4:47:75:1A:95:58:13:2A:7A:61 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:02:c9:aa:87:a4:cd:3e:74:51:33:a7:c8:91:9e:36:33:22: 0a:e8:63:34:7c:8e:9b:dc:c6:ad:cf:85:35:61:6b:b8:c9:8a: 61:f3:8d:20:d7:27:7a:b7:e2:f7:ca:04:50:e0:63:d1:b3:77: b6:a1:cd:c1:2a:03:93:3c:f8:6b:2b:d9:fd:33:6e:c4:fe:45: 40:a8:b8:83:8f:2e:ac:1a:4a:e2:53:10:92:21:cb:ed:ce:5b: 8f:d0:67:30:de:a6:62:86:8d:31:79:c1:b2:44:16:9a:73:95: 72:20:d9:ff:58:c4:38:04:48:a4:2d:f4:e4:45:c3:c3:c4:cf: 67:df:45:51:91:b7:45:40:6f:13:97:aa:85:06:b6:57:c5:a5: e0:86:ea:f9:1e:a0:fb:c2:30:29:f7:23:01:8e:36:18:e5:c8: cc:66:b0:90:94:c4:8c:42:72:55:cc:5f:97:66:86:ca:74:35: 2e:06:69:52:16:e8:d1:41:27:65:3d:0f:8f:3b:d5:f5:7d:7b: 44:fa:d1:07:58:18:06:05:ed:f1:4d:21:53:0a:fb:74:ca:02: 9f:45:a7:08:5b:02:19:ee:bd:21:f4:bd:01:6e:e5:48:a6:45: 4a:22:13:f4:7d:f8:49:3f:9a:98:20:e1:e3:96:fe:a1:87:72: 6a:3d:ee:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUwNzE4MTY1OTUwWhcNMjUwNzI1MTY1OTUwWjAYMRYwFAYD VQQDEw02ODdhN2Q4Ni1mMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmS6+Mf7xqk5mhVgFWyme2IMY8j2D4Wz4sotILCtdfoUnbwmnimFQRnaG2P3s iQ2GaTQMI5Wmb0PMaAWHk76aKcT91kcCCslbp0Q1NCjY/vvUxn7ztPteuDceOArn TYLCJLMPk/BVYEsO/BUmXop2mYbiBE0Z5pH8JdERWOPiByZfTI8vxRLJSCsNmjep F5iXEM2zQ9f2EJJUEU14m5IWfa+J9N5fnyNyXNFR9/kdekC1vM8ebmgTi0ty4NSi 1b4bmqQXAALlZXw2Y6Lx1HmGfnfiEc6vZwq3TCqjsvFl3+6LgbIP8PRFuo0Mp8vh LwbPT+AVi88Q8X25FAN8IqFVowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEcMoVK 3G87RyjER3UalVgTKnphMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGAsmqh6TNPnRRM6fIkZ42MyIK6GM0fI6b3Matz4U1YWu4yYph840g 1yd6t+L3ygRQ4GPRs3e2oc3BKgOTPPhrK9n9M27E/kVAqLiDjy6sGkriUxCSIcvt zluP0Gcw3qZiho0xecGyRBaac5VyINn/WMQ4BEikLfTkRcPDxM9n30VRkbdFQG8T l6qFBrZXxaXghur5HqD7wjAp9yMBjjYY5cjMZrCQlMSMQnJVzF+XZobKdDUuBmlS FujRQSdlPQ+PO9X1fXtE+tEHWBgGBe3xTSFTCvt0ygKfRacIWwIZ7r0h9L0BbuVI pkVKIhP0ffhJP5qYIOHjlv6hh3JqPe74 -----END CERTIFICATE-----Generated at Sun Jul 20 16:32:43 2025 by rpki-client