$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: jDadRBv6FTV4dTtYdoHjJP9JSXVN/Z0xn4vlqhufvOc= Subject key identifier: 9A:7B:0E:2F:8C:B3:5C:37:B2:37:1D:E9:2E:A8:8D:72:2B:66:E8:06 Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0C51 Signing time: Fri 18 Jul 2025 18:43:46 +0000 Manifest this update: Fri 18 Jul 2025 18:43:46 +0000 Manifest next update: Fri 25 Jul 2025 18:43:46 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: 2a38N+lpwpo9a7HHDbvfk0TkCEd2EzMdJNdgUwV6PYs=) 2: 7136F65A37A811EE94E32169C4F9AE02.roa (hash: MIgp6SPzmtBLaTAJ8Ko+cWBy6IjOqEZ3q2z4VBixHmI=) 3: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: GsJaSUcatISwdkkhFSUQBWiCBZOPMZtERdw74sbshGA=) 4: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: pvvlftNep3JGBrkiJAisunxpzryLA3gGytWzHa5BKMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Jul 18 18:43:46 2025 GMT Not After : Jul 25 18:43:46 2025 GMT Subject: CN=687a95e2-ce8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:1f:68:f4:ba:ca:4e:67:4a:a0:ce:00:d5: 61:8c:a2:3d:8e:95:18:ed:70:6a:8c:a2:f3:e8:e3: bc:c2:f1:9c:16:1c:40:1c:56:85:50:fc:3e:68:80: bf:29:f8:2f:1b:24:7b:aa:c6:9e:51:6b:20:09:08: 00:4b:a7:30:1d:97:b5:ca:36:45:de:82:50:de:7d: 82:5a:96:8d:7f:07:61:5c:83:2b:a0:55:41:39:97: 44:8c:5f:b5:2f:44:61:ec:c3:7a:fe:83:ff:02:12: 3a:8f:ec:ea:90:6b:15:df:20:3e:ec:48:be:ad:fd: 80:da:aa:4b:52:a3:bb:06:1a:eb:2f:cf:ef:68:fc: a9:60:ad:e1:01:3f:dd:92:c6:c6:c8:65:78:68:e2: c0:f6:e6:71:00:55:51:2c:32:4d:8c:a9:6e:98:b3: 57:0f:e4:6e:d1:ce:4f:54:ef:79:8d:26:1f:27:83: c0:53:8e:5c:48:38:a2:51:89:f6:24:04:13:90:df: 37:f9:27:2a:5e:9a:96:28:59:ff:e6:0d:83:e3:4f: b7:45:a7:bf:83:79:2c:c3:5a:ea:26:4d:80:ea:df: c2:2a:5b:63:fc:4f:0d:fe:2b:28:9e:37:e7:90:f7: 6a:73:b8:5d:1f:6d:c7:f2:b7:cf:48:66:cd:cf:a8: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:0E:2F:8C:B3:5C:37:B2:37:1D:E9:2E:A8:8D:72:2B:66:E8:06 X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c9:bb:82:2b:88:31:bb:23:5a:9b:9e:d3:22:17:54:b5:4a: 9e:9c:ab:43:6b:ca:fe:de:60:65:d6:4f:bd:65:9a:3d:f8:24: 98:ef:77:06:af:17:b9:c9:36:83:1b:18:a3:56:f4:9f:05:ac: a6:54:ad:a2:69:9b:1d:7f:24:78:77:b9:dd:b4:5a:34:be:70: be:f4:35:63:d6:fb:86:be:0a:45:8d:2a:b4:50:32:02:e4:30: 93:33:27:63:52:9b:24:20:45:7e:19:bb:3c:fb:23:43:8a:75: 55:51:5a:32:01:73:4c:8e:45:7d:a5:a9:ae:bb:cb:77:b9:f0: 27:63:72:8b:ab:f8:6e:66:98:ee:36:f8:43:e0:89:7b:b8:06: 36:a4:62:a8:01:cb:7c:d1:c2:7d:be:43:06:3e:25:dd:41:cd: bd:2f:4c:52:31:46:28:31:b4:90:71:9d:dc:c9:7c:ea:7e:ac: c2:ce:5f:20:13:ff:dd:60:0d:de:d6:25:aa:ff:a9:04:4f:84: 39:32:6c:84:7c:18:69:9f:e8:a0:ea:05:98:3e:5f:21:f6:a5: d4:2e:91:53:f7:79:53:1f:0a:89:f3:73:de:13:d6:d4:0e:17: fb:b1:82:a9:4e:be:52:ef:5a:59:44:da:fa:77:d7:26:09:e5: 33:ec:b5:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjUwNzE4MTg0MzQ2WhcNMjUwNzI1MTg0MzQ2WjAYMRYwFAYD VQQDEw02ODdhOTVlMi1jZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurAfaPS6yk5nSqDOANVhjKI9jpUY7XBqjKLz6OO8wvGcFhxAHFaFUPw+aIC/ KfgvGyR7qsaeUWsgCQgAS6cwHZe1yjZF3oJQ3n2CWpaNfwdhXIMroFVBOZdEjF+1 L0Rh7MN6/oP/AhI6j+zqkGsV3yA+7Ei+rf2A2qpLUqO7BhrrL8/vaPypYK3hAT/d ksbGyGV4aOLA9uZxAFVRLDJNjKlumLNXD+Ru0c5PVO95jSYfJ4PAU45cSDiiUYn2 JAQTkN83+ScqXpqWKFn/5g2D40+3Rae/g3ksw1rqJk2A6t/CKltj/E8N/isonjfn kPdqc7hdH23H8rfPSGbNz6j0kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp7Di+M s1w3sjcd6S6ojXIrZugGMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArybuCK4gxuyNam57TIhdUtUqenKtDa8r+3mBl1k+9ZZo9+CSY73cG rxe5yTaDGxijVvSfBaymVK2iaZsdfyR4d7ndtFo0vnC+9DVj1vuGvgpFjSq0UDIC 5DCTMydjUpskIEV+Gbs8+yNDinVVUVoyAXNMjkV9pamuu8t3ufAnY3KLq/huZpju NvhD4Il7uAY2pGKoAct80cJ9vkMGPiXdQc29L0xSMUYoMbSQcZ3cyXzqfqzCzl8g E//dYA3e1iWq/6kET4Q5MmyEfBhpn+ig6gWYPl8h9qXULpFT93lTHwqJ83PeE9bU Dhf7sYKpTr5S71pZRNr6d9cmCeUz7LXh -----END CERTIFICATE-----Generated at Sun Jul 20 07:40:46 2025 by rpki-client