$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: qHKWb6jTpI+RXQg9riQLUgc4CEbpj5figRZBKrmXHig= Subject key identifier: 5B:AC:FF:A5:CD:85:8B:84:B6:AB:D8:8C:3C:A5:86:B1:E4:C4:46:3F Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 018C Signing time: Sat 31 May 2025 03:21:54 +0000 Manifest this update: Sat 31 May 2025 03:21:54 +0000 Manifest next update: Sat 07 Jun 2025 03:21:54 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: bX5SIbo4quieiapSsNcfVrjXnNFoXhbc5q+lArx1Lvs=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: wIfWv8k11m2nJjvD9OZyvuvwJHOiHTaCFNkOK+76jZw=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 8Baf5eHeRnNrGmSSDb+55e+ExZ2m5tnzgHIxbW3wB58=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: /e5dKdsxY7i/S5RsJcqyRRAjOevxOXqA06J4ijaW9S8=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: 1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: May 31 03:21:54 2025 GMT Not After : Jun 7 03:21:54 2025 GMT Subject: CN=683a75d2-bf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:06:ad:cb:90:65:7e:fb:db:a7:a5:67:ed:8b: f5:5d:a0:32:9d:d9:67:cd:2b:6d:a0:ae:8d:9b:e9: fe:7f:db:a9:f8:cd:9a:4e:2d:57:a4:33:30:e3:3b: 85:2e:3f:9b:39:0e:47:aa:c4:1e:ec:2a:b7:1e:1b: 93:35:61:d4:fb:27:6d:af:0a:9f:ca:06:85:94:5c: 74:b9:9d:19:fb:49:aa:0d:23:d4:a2:28:bf:ff:8f: ba:e7:c5:b0:40:5f:8d:ab:a6:5b:e8:14:7f:a6:db: bb:11:89:83:cf:4e:d1:ac:74:5d:6a:df:fe:c8:da: 91:fc:c7:ae:23:f2:e3:e8:27:c0:85:7e:c8:6e:ce: 75:0d:44:c1:9b:84:9d:ca:cf:f0:3e:ce:ba:84:a7: eb:b7:db:64:d2:89:38:ec:7e:ad:f7:90:4a:ef:d0: 0e:a1:83:e2:f7:bd:44:83:67:91:09:15:cb:97:75: 48:2c:9e:d9:74:88:91:93:aa:51:ce:0d:76:f1:b2: 22:5b:43:df:b8:39:a0:49:de:71:d4:a7:9a:b7:04: 50:36:b6:d5:00:bd:f9:44:60:5a:da:eb:ce:67:49: e6:3d:d3:1e:c5:b0:b7:c7:1d:83:c3:82:b7:3d:ba: 04:50:6d:16:70:68:45:b9:ef:12:be:26:f2:9a:2a: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AC:FF:A5:CD:85:8B:84:B6:AB:D8:8C:3C:A5:86:B1:E4:C4:46:3F X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:82:dc:ec:08:3c:41:00:c3:a9:e6:df:d3:e9:f3:90:93:f1: b9:86:10:98:cd:7d:d7:a1:c5:c2:3c:48:b1:92:f6:34:07:8d: 5b:43:3f:1b:32:84:6e:ed:67:ca:71:9e:de:92:2d:2c:43:2a: 5d:58:f3:68:a7:67:03:0f:29:df:21:04:1c:70:a9:0f:5d:19: 1d:ce:42:6f:c1:67:65:a3:95:b6:61:0c:de:0e:bf:85:c8:32: c6:e3:96:7f:fc:eb:2d:bb:e3:62:a3:7d:68:23:c7:53:a3:d7: 16:91:b6:c0:0a:8f:a9:ea:55:a2:20:27:46:e7:fe:14:81:f3: 32:7b:bd:50:d7:6d:fe:41:b5:c6:fa:6c:51:d8:f0:ba:fe:ae: 49:62:41:8d:c9:af:57:51:b5:be:47:cb:73:b2:df:c6:c4:2d: 21:23:88:b9:67:a7:2b:e9:4f:a7:d7:14:ed:51:9c:dd:7f:5b: 26:e9:a7:79:20:77:20:ef:aa:86:a2:36:93:88:5c:ab:cd:66: a1:55:a8:b7:d8:f0:3e:36:d9:cd:23:11:84:de:0b:d2:23:bf: f6:84:01:76:c1:d2:6c:21:9f:83:c1:fa:81:76:e2:35:63:3c: 18:d2:6c:7d:60:8f:f6:de:0a:c5:2c:d2:ad:3d:c5:f7:92:a6: a1:f5:2d:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUwNTMxMDMyMTU0WhcNMjUwNjA3MDMyMTU0WjAYMRYwFAYD VQQDEw02ODNhNzVkMi1iZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Qaty5Blfvvbp6Vn7Yv1XaAyndlnzSttoK6Nm+n+f9up+M2aTi1XpDMw4zuF Lj+bOQ5HqsQe7Cq3HhuTNWHU+ydtrwqfygaFlFx0uZ0Z+0mqDSPUoii//4+658Ww QF+Nq6Zb6BR/ptu7EYmDz07RrHRdat/+yNqR/MeuI/Lj6CfAhX7Ibs51DUTBm4Sd ys/wPs66hKfrt9tk0ok47H6t95BK79AOoYPi971Eg2eRCRXLl3VILJ7ZdIiRk6pR zg128bIiW0PfuDmgSd5x1KeatwRQNrbVAL35RGBa2uvOZ0nmPdMexbC3xx2Dw4K3 PboEUG0WcGhFue8SvibymipZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFus/6XN hYuEtqvYjDylhrHkxEY/MB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDgtzsCDxBAMOp5t/T6fOQk/G5hhCYzX3XocXCPEixkvY0B41bQz8b MoRu7WfKcZ7eki0sQypdWPNop2cDDynfIQQccKkPXRkdzkJvwWdlo5W2YQzeDr+F yDLG45Z//Ostu+Nio31oI8dTo9cWkbbACo+p6lWiICdG5/4UgfMye71Q123+QbXG +mxR2PC6/q5JYkGNya9XUbW+R8tzst/GxC0hI4i5Z6cr6U+n1xTtUZzdf1sm6ad5 IHcg76qGojaTiFyrzWahVai32PA+NtnNIxGE3gvSI7/2hAF2wdJsIZ+DwfqBduI1 YzwY0mx9YI/23grFLNKtPcX3kqah9S0K -----END CERTIFICATE-----Generated at Sat May 31 17:18:52 2025 by rpki-client