$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: qlPMq0rd0ucM0w1ccFmwSeuvmhyAM+TjXMsqMgrnu4U= Subject key identifier: 29:A3:7B:CD:AA:04:69:F1:EF:EA:14:9A:22:06:59:E6:E0:47:53:4B Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 2447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 2438 Signing time: Sun 08 Jun 2025 15:44:29 +0000 Manifest this update: Sun 08 Jun 2025 15:44:28 +0000 Manifest next update: Sun 15 Jun 2025 15:44:28 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: BSZ/yGltGlDWg+XYcwsLa+GNhDziTFgIanQHGnTEtlg=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: 1XjlmfVjZ+/g856KRJ7NU7PVXN/iYERguNmyY4VTdYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9287 (0x2447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Jun 8 15:44:28 2025 GMT Not After : Jun 15 15:44:28 2025 GMT Subject: CN=6845afdc-7304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:d5:0d:79:ee:45:20:8f:aa:e5:29:2f:e0: b2:ab:98:6e:b2:1c:a2:28:70:b8:4e:f0:49:05:30: 25:9b:eb:3a:46:f2:e6:9b:69:ba:39:61:11:91:6e: 2a:b7:94:80:b0:b3:b3:6e:66:87:f1:22:81:b2:c7: 7c:af:0f:fe:1d:98:a4:94:2e:b5:6b:b2:1c:eb:87: ab:ab:5e:92:59:37:46:6e:9a:d7:d5:37:9e:5d:2a: a7:c0:1c:26:05:76:5d:88:dc:3a:ce:1a:c1:14:e7: bf:f7:bd:77:3d:33:46:af:da:02:5d:81:86:9d:ec: e3:15:a9:20:98:0f:b2:ec:5e:c2:67:df:22:26:75: 93:8d:61:76:75:4e:2e:33:85:cb:d1:d5:f9:be:ac: 1d:60:cf:c2:4b:7f:81:3f:fb:97:36:d9:08:66:0d: 7d:f6:b0:f0:b7:6c:37:29:d8:70:2c:0b:38:ce:38: 0d:4d:9c:48:bf:4d:ce:35:e3:9a:61:f8:c3:8f:f5: 1c:ae:5c:a3:43:87:1a:67:86:49:79:62:53:69:57: bd:e8:06:72:05:d5:c9:9d:eb:5f:de:9d:94:80:63: 47:5c:ce:6f:63:7a:ed:9f:22:18:04:27:04:4e:64: 20:09:42:54:1e:b0:ab:e5:c3:be:27:3c:4f:67:bb: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A3:7B:CD:AA:04:69:F1:EF:EA:14:9A:22:06:59:E6:E0:47:53:4B X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:0e:da:c7:54:4a:99:a5:b2:83:39:24:3f:17:c4:40:5b:86: b8:be:d5:c2:eb:72:46:5d:dd:12:47:f6:c1:8a:3d:d4:db:5d: fb:f2:91:17:38:08:fa:5a:02:4f:f4:d2:9d:f7:9f:58:d4:95: af:a8:1b:02:83:f4:c4:e9:b3:33:0a:85:0f:b1:a8:bc:eb:72: 82:a2:31:f6:8b:83:da:2f:ec:04:49:b8:bd:c3:da:31:8d:6f: 6a:2f:2c:f0:fe:a9:cd:6c:ab:d0:9d:39:77:d1:63:5b:6a:03: f9:33:76:a7:37:81:2a:e3:73:b4:ff:96:56:40:48:c5:8a:e3: 9f:dc:11:e7:be:6f:55:6f:66:75:aa:73:f7:bb:54:bf:8a:89: e1:20:71:60:ea:7f:4b:26:f0:f7:b6:50:07:0f:c5:fb:cd:8b: bc:75:40:b1:46:7b:bf:7f:59:7d:65:4e:d8:3c:96:0f:bd:75: 5c:62:c8:e0:33:2a:2b:b7:cf:1a:b4:8c:3a:c0:39:19:6f:f0: 34:5a:90:f0:cf:6d:32:ec:e0:35:40:8a:1f:9b:a4:97:3b:fb: 58:f6:3e:22:8d:a9:42:5f:67:31:b7:e1:0c:29:b5:d4:cd:71: bc:cd:52:49:bf:88:ea:23:0b:16:f5:ee:4f:f9:90:48:51:6b: 9c:95:f3:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUwNjA4MTU0NDI4WhcNMjUwNjE1MTU0NDI4WjAYMRYwFAYD VQQDEw02ODQ1YWZkYy03MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr57VDXnuRSCPquUpL+Cyq5hushyiKHC4TvBJBTAlm+s6RvLmm2m6OWERkW4q t5SAsLOzbmaH8SKBssd8rw/+HZiklC61a7Ic64erq16SWTdGbprX1TeeXSqnwBwm BXZdiNw6zhrBFOe/9713PTNGr9oCXYGGnezjFakgmA+y7F7CZ98iJnWTjWF2dU4u M4XL0dX5vqwdYM/CS3+BP/uXNtkIZg199rDwt2w3KdhwLAs4zjgNTZxIv03ONeOa YfjDj/UcrlyjQ4caZ4ZJeWJTaVe96AZyBdXJnetf3p2UgGNHXM5vY3rtnyIYBCcE TmQgCUJUHrCr5cO+JzxPZ7vfJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmje82q BGnx7+oUmiIGWebgR1NLMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6DtrHVEqZpbKDOSQ/F8RAW4a4vtXC63JGXd0SR/bBij3U21378pEX OAj6WgJP9NKd959Y1JWvqBsCg/TE6bMzCoUPsai863KCojH2i4PaL+wESbi9w9ox jW9qLyzw/qnNbKvQnTl30WNbagP5M3anN4Eq43O0/5ZWQEjFiuOf3BHnvm9Vb2Z1 qnP3u1S/ionhIHFg6n9LJvD3tlAHD8X7zYu8dUCxRnu/f1l9ZU7YPJYPvXVcYsjg Myort88atIw6wDkZb/A0WpDwz20y7OA1QIofm6SXO/tY9j4ijalCX2cxt+EMKbXU zXG8zVJJv4jqIwsW9e5P+ZBIUWuclfPM -----END CERTIFICATE-----Generated at Tue Jun 10 02:58:05 2025 by rpki-client