$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: htRzY/kJ5F+qP12TRh3d3BDqJKm9U4eDCHuNDHAOLwg= Subject key identifier: D5:DF:46:F5:8A:B2:37:A2:D9:0D:86:75:EA:FF:12:BE:DE:59:94:4D Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 111A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1112 Signing time: Fri 30 May 2025 17:27:17 +0000 Manifest this update: Fri 30 May 2025 17:27:17 +0000 Manifest next update: Fri 06 Jun 2025 17:27:17 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: TVfOOflkQ/dnDnGydTkB/f6Qh4Et+waumQ1BvnfsEXU=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4378 (0x111a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: May 30 17:27:17 2025 GMT Not After : Jun 6 17:27:17 2025 GMT Subject: CN=6839ea75-90bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:a7:bf:79:e9:4d:8c:4f:b7:12:b9:7e:39: 68:28:8b:32:d6:4c:2d:ee:7b:08:c0:21:8c:b9:ff: ca:54:1c:1a:6b:2e:2e:14:fb:fd:a2:94:7e:8b:c5: e9:c0:22:f9:11:f6:98:ae:02:f9:4d:33:a7:e7:28: ef:f7:03:ab:94:0f:98:8d:66:c4:ea:10:17:38:d6: d9:7c:5d:17:70:d2:1e:bb:fe:e8:4f:77:d7:32:39: 83:aa:72:8a:4a:b2:f5:4e:b8:8e:49:28:2f:eb:a5: 1d:78:77:4b:1f:4f:61:80:97:94:5f:7d:31:78:a0: 90:0c:76:22:56:73:b2:85:ee:bc:88:87:80:11:fb: 29:0d:c2:6f:53:19:3f:d5:9f:49:66:a6:67:be:ca: 72:37:17:21:07:75:9c:7b:00:41:53:37:8f:52:82: 06:08:6a:64:9c:ea:12:d3:19:94:fe:4f:92:90:af: 1c:69:89:b9:16:80:1f:4e:58:27:d6:46:37:65:14: 40:b0:ce:d7:d9:10:35:0c:93:34:56:d7:25:be:e2: b5:a9:28:8b:ee:35:b3:95:91:bc:ba:c4:59:76:50: f5:be:a9:1d:64:cc:ab:e9:7a:83:18:a4:c2:39:60: 39:59:e5:c4:01:dd:06:94:9f:37:27:31:ae:b2:73: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:46:F5:8A:B2:37:A2:D9:0D:86:75:EA:FF:12:BE:DE:59:94:4D X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fb:f5:a9:08:bf:93:38:a9:f1:d7:c2:18:58:45:4c:60:4c: 7d:c5:8e:a2:67:c7:86:2d:77:9c:a4:2f:a1:d6:64:cc:b1:b6: 53:a1:61:94:e9:3d:47:97:0d:45:7c:ed:0c:4c:c9:a3:6c:b6: 8b:7f:35:b0:03:3f:58:15:65:24:ce:e4:8b:7d:23:ee:d1:ad: fc:82:c3:c5:a1:ea:3a:28:25:a9:e6:a9:8f:61:40:ce:0a:65: 6f:4b:88:4c:2a:8f:5e:c4:76:ae:32:98:99:46:98:1c:70:5b: 45:e2:4f:8b:20:dd:c6:2b:23:20:5a:cb:bd:17:1a:f2:74:db: 3f:23:1a:69:cf:36:7d:20:6b:1f:cf:ae:16:3d:e0:5b:15:7b: 0a:59:f4:57:6a:c6:27:73:3d:45:b1:03:24:b7:3d:d7:2b:e2: 6f:9b:b7:a4:08:07:43:43:bf:92:ea:96:2b:cb:46:4b:77:47: 28:ba:73:b8:dd:b0:b1:93:5c:a6:6e:b8:c7:c1:7f:5b:c4:c9: e1:6c:88:b8:a8:af:b8:66:a4:dc:a3:3a:cb:47:ab:c4:5d:a9: b3:2a:b6:05:26:90:f9:d7:36:4d:a2:de:f3:43:0a:41:e9:33: e7:30:31:6a:dc:93:f5:3b:a5:a9:e1:ec:19:d2:f4:de:18:ee: 05:6b:f3:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUwNTMwMTcyNzE3WhcNMjUwNjA2MTcyNzE3WjAYMRYwFAYD VQQDEw02ODM5ZWE3NS05MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw6nv3npTYxPtxK5fjloKIsy1kwt7nsIwCGMuf/KVBwaay4uFPv9opR+i8Xp wCL5EfaYrgL5TTOn5yjv9wOrlA+YjWbE6hAXONbZfF0XcNIeu/7oT3fXMjmDqnKK SrL1TriOSSgv66UdeHdLH09hgJeUX30xeKCQDHYiVnOyhe68iIeAEfspDcJvUxk/ 1Z9JZqZnvspyNxchB3WcewBBUzePUoIGCGpknOoS0xmU/k+SkK8caYm5FoAfTlgn 1kY3ZRRAsM7X2RA1DJM0VtclvuK1qSiL7jWzlZG8usRZdlD1vqkdZMyr6XqDGKTC OWA5WeXEAd0GlJ83JzGusnPiWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXfRvWK sjei2Q2Gder/Er7eWZRNMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB++/WpCL+TOKnx18IYWEVMYEx9xY6iZ8eGLXecpC+h1mTMsbZToWGU 6T1Hlw1FfO0MTMmjbLaLfzWwAz9YFWUkzuSLfSPu0a38gsPFoeo6KCWp5qmPYUDO CmVvS4hMKo9exHauMpiZRpgccFtF4k+LIN3GKyMgWsu9FxrydNs/IxppzzZ9IGsf z64WPeBbFXsKWfRXasYncz1FsQMktz3XK+Jvm7ekCAdDQ7+S6pYry0ZLd0counO4 3bCxk1ymbrjHwX9bxMnhbIi4qK+4ZqTcozrLR6vEXamzKrYFJpD51zZNot7zQwpB 6TPnMDFq3JP1O6Wp4ewZ0vTeGO4Fa/MO -----END CERTIFICATE-----Generated at Sat May 31 16:33:59 2025 by rpki-client