$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: 3ILSJaOQh/lFiamLYYvMoXBmyQu6Y29izmQFgmlqUiw= Subject key identifier: 6C:BA:50:85:16:B3:48:22:6A:06:3F:C3:5E:44:C2:BC:6D:BD:C3:FE Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 068F Signing time: Fri 30 May 2025 23:25:28 +0000 Manifest this update: Fri 30 May 2025 23:25:28 +0000 Manifest next update: Fri 06 Jun 2025 23:25:28 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: 71fCNFWOAQsFNY8MNjs84oKR/9qZV3MmkZe/CSTtZnw=) 2: A37112BA16ED11F0B635C562C4F9AE02.roa (hash: rZFiavbY0PAbr2H7+gTs3U67Eq+r4u4v2zqFhLKgsN8=) 3: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: QGMsCxHtn5F+EfUp5uawCMMpfTHEMExN77Hj2Muh93w=) 4: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: +qzxrrbDAbjm5oGRWL2M9bgOfHEjl4iskK+N/J81qak=) 5: 7145DE8C69CE11EF9C04450AC4F9AE02.roa (hash: hSCKbETyEcrfwdR62qLCMoskeNw2yhn+vArByqXZY/4=) 6: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: JtKKxCXridSwy6SJ7Mx9WW/156HamhanSTK24tMN9c0=) 7: 9CDF55D87D6A11EEA59E8C3FC4F9AE02.roa (hash: mDnMAOX1D7nrgDR/qLwtv3995W8fLU9iXorAjw/Tyy8=) 8: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 5LHlWW/HIHhEuVs7lyfpyvCjCxzDLd5MFI+tQXgroXY=) 9: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: i9lNfJhnnW8QvG2a+A3cDgHR8+veJShI1zYY4cZGLCQ=) 10: 1C850CAA35DF11F0B03A3E81C4F9AE02.roa (hash: CdtEKajPiCOmh5RzzjuGY0y/THTRfIUl3tSRLZyVCcI=) 11: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: jbI9nyIyGvuuwD7R5pJI5zo/f8yqDWKnyeAgYYtwurY=) 12: 2294C59616EE11F09E906E12C4F9AE02.roa (hash: TAFLRnpDkPX0/1thH6OXxUqfDFzb/4YZ/ueijGni7sU=) 13: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: /zYRYz7hw59PN1H99rZM8/IUYjLUkVgpuVofdR3Vzlc=) 14: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: 3uteNlhKYK6907KykR8gAU+oHBxNf/k9LdbZlDl3X5w=) 15: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: VNTbmafGr2Ck68du6AOcxR3XdT37BiEBd7yF9e6N088=) 16: 2C928134155711F099BFE331C4F9AE02.roa (hash: 47lhJb8uhRs8ieTedrS6V4SnBxu8DNcKDZI2uXa5ZQU=) 17: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: S4VX1CO0OF3+Ep6xnyvx/Uv1NHR9lS+F0nBxbNUE0l8=) 18: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 4PiyophquWuYIG0+K5ceNOm7ogfnJHTsjtfCsP+bCrw=) 19: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: wzpW0H2xl9IMiS2MU8LoO/Pkm6/TTCP+V9WTTRyG49s=) 20: DC5ECE1816EE11F097A64F85C4F9AE02.roa (hash: 3I5NuV8UPYvfsF04ShxS5VeyRR5Sv1yc4MFcSv253Dw=) 21: 9EB8A27A675C11EE81835581C4F9AE02.roa (hash: OEqTkDyc1rPh8C5CXLgkDLbM+SU7rHYFTB3EDRvvg8I=) 22: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: WvwQUH+4dWCkhf9AYHECGHhhbwO1gaxV2Z7Th1HDWV0=) 23: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4=) 24: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: B3UEiEYw2WKPOdrQO2wqkgon16D3Efz81MuIIEKCBB8=) 25: 222E2FAC16EE11F09E906E12C4F9AE02.roa (hash: DoFm6RaZkUNcJGWZuZ/N3Vw0x/Ki25o4uY7ZTpQ6Svw=) 26: 3DC39FDAE82D11EF86C76B75C4F9AE02.roa (hash: CB42rPIllKFi14OnASR8kG8ELcV0c2sBojJ+pQ7hSCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: May 30 23:25:28 2025 GMT Not After : Jun 6 23:25:28 2025 GMT Subject: CN=683a3e68-aea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:8d:ef:e6:bf:8f:fc:8e:7e:42:cd:c7:aa: 81:2e:0d:d9:8d:d4:0c:de:da:47:43:46:2f:5a:77: cf:9c:e6:7b:e5:36:56:2f:a4:85:71:1f:99:4b:d4: ba:86:cb:9b:ef:70:a0:22:fa:c8:87:4b:be:65:1a: e0:77:9d:40:62:9a:09:57:7e:60:e5:a1:8d:31:a1: e8:d8:2d:20:39:09:c4:7b:d6:3f:10:01:25:e0:49: 61:69:4e:1d:e2:1c:29:a3:0d:26:51:95:21:aa:ac: 40:51:d6:d5:4f:48:a5:e6:07:a4:c0:7b:8e:33:20: e3:28:ea:a5:93:cc:42:d9:30:ad:5f:d4:76:ef:fb: 4b:fa:ad:07:8d:42:13:7a:51:ff:a1:96:52:fe:b4: c2:ba:45:9b:69:7f:3d:4f:89:96:86:cc:0a:d8:57: 5b:46:60:51:3a:71:c5:95:62:7d:ff:75:75:08:41: fd:71:b3:9e:36:fb:2c:69:5c:aa:86:31:f6:57:c3: a2:ec:45:f6:59:50:6e:1e:60:40:b2:46:4d:15:71: 6c:a0:ce:4a:55:13:11:e5:b9:a7:5b:9e:ee:c0:9a: 89:07:04:59:48:52:62:c8:85:18:5e:a1:6b:0a:a7: 3e:08:9b:c9:26:04:6d:e1:56:25:92:48:ea:6f:d3: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:50:85:16:B3:48:22:6A:06:3F:C3:5E:44:C2:BC:6D:BD:C3:FE X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a1:bc:57:5e:a1:2c:9c:50:5e:3e:39:75:0e:02:36:a9:49: d9:9d:56:93:d3:81:38:0b:6d:6b:10:71:e7:d9:ab:83:f9:e9: 3e:79:51:94:0d:6b:64:18:fb:2f:f1:a8:ff:ed:3c:a7:7c:68: 48:01:8d:46:b6:f8:e6:6b:ab:71:df:a3:fe:2c:62:6d:16:17: 36:59:cd:b0:17:7f:89:1c:d3:11:84:c8:a6:67:67:30:08:fe: d5:6a:51:cd:1e:76:0e:3f:65:83:85:50:75:80:2e:33:90:f7: e4:99:82:20:3c:a4:6e:26:6d:f8:b3:43:b8:a8:bf:ac:42:77: 15:51:89:e8:15:35:0d:8c:c7:f6:e6:18:80:17:cb:6e:7f:b1: 7b:ad:49:32:03:a7:b9:8f:08:79:cf:ff:01:b9:40:cd:7c:c3: 4f:bb:73:50:7a:f2:80:ab:17:bf:95:77:b5:94:24:66:3c:39: a0:8f:75:df:93:cf:ed:2e:bf:50:ea:da:5c:03:64:11:14:57: b3:d1:9a:4d:a6:bd:8d:25:42:00:a7:ff:57:d1:42:cf:2d:1d: ea:a5:9c:3e:55:fa:c7:6d:c4:33:95:08:91:4c:53:8f:79:7b: 34:ba:3d:ed:c0:be:0f:16:90:3c:99:29:0e:c9:01:1b:a6:bf: 92:96:57:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNTMwMjMyNTI4WhcNMjUwNjA2MjMyNTI4WjAYMRYwFAYD VQQDEw02ODNhM2U2OC1hZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJCN7+a/j/yOfkLNx6qBLg3ZjdQM3tpHQ0YvWnfPnOZ75TZWL6SFcR+ZS9S6 hsub73CgIvrIh0u+ZRrgd51AYpoJV35g5aGNMaHo2C0gOQnEe9Y/EAEl4ElhaU4d 4hwpow0mUZUhqqxAUdbVT0il5gekwHuOMyDjKOqlk8xC2TCtX9R27/tL+q0HjUIT elH/oZZS/rTCukWbaX89T4mWhswK2FdbRmBROnHFlWJ9/3V1CEH9cbOeNvssaVyq hjH2V8Oi7EX2WVBuHmBAskZNFXFsoM5KVRMR5bmnW57uwJqJBwRZSFJiyIUYXqFr Cqc+CJvJJgRt4VYlkkjqb9MrhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy6UIUW s0giagY/w15EwrxtvcP+MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyobxXXqEsnFBePjl1DgI2qUnZnVaT04E4C21rEHHn2auD+ek+eVGU DWtkGPsv8aj/7TynfGhIAY1Gtvjma6tx36P+LGJtFhc2Wc2wF3+JHNMRhMimZ2cw CP7ValHNHnYOP2WDhVB1gC4zkPfkmYIgPKRuJm34s0O4qL+sQncVUYnoFTUNjMf2 5hiAF8tuf7F7rUkyA6e5jwh5z/8BuUDNfMNPu3NQevKAqxe/lXe1lCRmPDmgj3Xf k8/tLr9Q6tpcA2QRFFez0ZpNpr2NJUIAp/9X0ULPLR3qpZw+VfrHbcQzlQiRTFOP eXs0uj3twL4PFpA8mSkOyQEbpr+Sllec -----END CERTIFICATE-----Generated at Sat May 31 17:53:06 2025 by rpki-client