$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: cdrTzNZr1LX/DyVY03I0UG1O6wmQuJfrOGAZ8KLlw5w= Subject key identifier: F0:8F:4A:E9:0D:43:A8:C8:E4:3A:29:2D:83:5A:FE:50:7F:C4:68:DB Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 0647 Signing time: Fri 30 May 2025 22:50:13 +0000 Manifest this update: Fri 30 May 2025 22:50:12 +0000 Manifest next update: Fri 06 Jun 2025 22:50:12 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: bTbKzhiXNtd27s0kS3cFXeR8a3ooFJvvBDxYNkEDi9c=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: Ccp5i/dm7+8eXzkZNFr+8Fkp38efiWixun6YhIXlQUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: May 30 22:50:12 2025 GMT Not After : Jun 6 22:50:12 2025 GMT Subject: CN=683a3624-df96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:29:44:96:14:53:51:f4:97:02:15:ec:26: 93:d5:9b:31:61:ce:8c:51:4d:46:44:09:ad:45:b8: fe:a6:a4:e2:51:ba:08:0c:89:93:ee:b3:6c:77:ea: d3:59:0c:32:97:e8:9d:b4:56:7e:5d:85:95:cc:a4: 66:00:b9:00:24:c9:97:1d:94:e1:e8:dc:d2:16:a8: ca:78:93:42:67:92:bb:b2:f4:53:5b:1f:78:5d:ed: 94:68:3f:14:c3:10:86:a3:6b:ef:1d:14:01:03:3a: 80:57:7c:e8:5d:99:ce:8c:3a:17:4f:26:36:bf:27: c0:21:fc:f2:84:db:fc:14:bd:cc:72:49:60:2c:1b: bd:47:0f:7c:0e:1a:9c:07:0e:b1:d9:fa:9d:62:54: 9c:b4:0d:5f:2d:77:cc:49:9f:58:63:5a:69:fc:8a: 8f:b6:2a:97:fd:94:c0:ea:26:6b:60:0f:8d:76:73: 68:27:79:03:e4:8d:18:c5:c7:43:a3:4a:5d:2d:9a: c6:2d:76:46:42:0d:e8:a6:2c:f4:34:c7:09:40:e2: 38:2a:bc:49:09:47:ee:86:ea:47:4c:66:3a:05:e6: a7:ae:44:d2:7d:a5:62:c2:19:47:3a:f7:1f:d8:0a: ab:b0:fb:9d:9a:6c:6d:67:99:9b:50:8a:aa:77:d7: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8F:4A:E9:0D:43:A8:C8:E4:3A:29:2D:83:5A:FE:50:7F:C4:68:DB X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:d6:a5:29:a6:7b:b8:31:ea:4f:1e:90:0c:d6:cf:ac:08:c6: fa:6f:6c:83:a4:a8:78:04:a3:77:f5:ae:57:81:a9:64:ca:86: 2e:b7:fc:85:d6:86:98:9d:8d:61:62:ad:e7:22:ce:4d:5a:2a: 6c:b8:af:76:85:3f:29:e6:86:d5:7a:20:9b:dc:5b:ea:64:dd: dc:73:90:a8:ae:68:62:6f:4c:6f:6b:21:f4:91:eb:34:70:04: 62:c7:30:bd:2b:e1:ca:06:98:43:86:e9:77:4d:50:26:f8:ee: 2e:42:55:1e:7f:fb:3d:1f:90:0c:f1:5e:b8:14:49:1f:de:f2: 49:68:1e:6a:6f:43:6d:1e:2e:3b:dc:39:d0:30:aa:d8:65:28: a5:2a:3e:54:1d:cb:4c:b4:3d:6f:61:86:bc:ae:76:41:a8:33: e1:fe:ef:22:3d:c3:44:9e:49:07:ec:6d:c3:23:c7:4d:a0:3e: 61:71:26:54:fe:8a:1e:77:7c:96:be:ba:7d:24:7f:9d:3b:c3: b9:2d:c7:0e:74:94:e8:ef:97:ef:02:0d:42:ba:96:9f:67:e5: f7:c3:73:9c:5f:15:9b:79:7b:01:c1:5b:43:30:5a:94:81:a3: 1c:82:02:22:ac:43:bd:1a:d3:de:af:67:4d:2a:47:96:f9:86: 55:e3:e3:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjUwNTMwMjI1MDEyWhcNMjUwNjA2MjI1MDEyWjAYMRYwFAYD VQQDEw02ODNhMzYyNC1kZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArP0pRJYUU1H0lwIV7CaT1ZsxYc6MUU1GRAmtRbj+pqTiUboIDImT7rNsd+rT WQwyl+idtFZ+XYWVzKRmALkAJMmXHZTh6NzSFqjKeJNCZ5K7svRTWx94Xe2UaD8U wxCGo2vvHRQBAzqAV3zoXZnOjDoXTyY2vyfAIfzyhNv8FL3McklgLBu9Rw98Dhqc Bw6x2fqdYlSctA1fLXfMSZ9YY1pp/IqPtiqX/ZTA6iZrYA+NdnNoJ3kD5I0YxcdD o0pdLZrGLXZGQg3opiz0NMcJQOI4KrxJCUfuhupHTGY6BeanrkTSfaViwhlHOvcf 2AqrsPudmmxtZ5mbUIqqd9cOxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCPSukN Q6jI5DopLYNa/lB/xGjbMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP1qUppnu4MepPHpAM1s+sCMb6b2yDpKh4BKN39a5XgalkyoYut/yF 1oaYnY1hYq3nIs5NWipsuK92hT8p5obVeiCb3FvqZN3cc5Cormhib0xvayH0kes0 cARixzC9K+HKBphDhul3TVAm+O4uQlUef/s9H5AM8V64FEkf3vJJaB5qb0NtHi47 3DnQMKrYZSilKj5UHctMtD1vYYa8rnZBqDPh/u8iPcNEnkkH7G3DI8dNoD5hcSZU /ooed3yWvrp9JH+dO8O5LccOdJTo75fvAg1CupafZ+X3w3OcXxWbeXsBwVtDMFqU gaMcggIirEO9GtPer2dNKkeW+YZV4+O6 -----END CERTIFICATE-----Generated at Sat May 31 14:35:09 2025 by rpki-client