$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: V+r1cgOK4vGM2c01sSrDmfzypILqtdcauuLSR2xlc78= Subject key identifier: 2E:9C:54:58:DB:BD:61:E2:74:0B:5E:9F:90:16:44:7D:F8:76:3A:A7 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 51 Signing time: Tue 03 Jun 2025 07:05:24 +0000 Manifest this update: Tue 03 Jun 2025 07:05:24 +0000 Manifest next update: Tue 10 Jun 2025 07:05:24 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: HZl4uinUm3y2EKeZWnRi3lCCIcAyPP4uCI5y5RTrYIs=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Jun 3 07:05:24 2025 GMT Not After : Jun 10 07:05:24 2025 GMT Subject: CN=683e9eb4-3933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:a2:b3:b4:de:8c:cc:20:65:34:ba:be:8e: a4:75:47:1d:8c:86:04:65:36:cc:09:6d:14:05:41: f5:65:18:d9:44:ba:8a:e0:d8:f0:6a:71:60:19:61: 2b:07:ad:33:d4:b1:7d:4a:68:65:32:7e:37:03:05: 2f:6e:2c:ce:96:4a:fc:65:d0:87:39:fd:19:cd:da: 00:22:45:ec:5b:ea:d5:25:63:31:c4:05:cc:94:e7: 42:37:2a:ad:c7:e1:e8:2d:52:4a:b7:6b:36:4e:d8: 66:dc:1f:37:88:a0:bf:5d:c8:6e:4b:44:1f:93:ef: 26:7d:4d:8f:48:cc:07:79:d3:68:c9:64:6d:5c:43: 3c:b0:07:49:7d:ef:ed:7e:4d:a1:f0:d1:41:5c:41: c5:4a:ff:c5:f2:1f:ed:34:e1:aa:61:5b:03:ac:94: a5:a5:da:77:8b:d8:45:1f:00:fb:98:d9:b4:31:ec: 7e:8f:ad:a0:7b:9d:2d:96:e1:04:34:26:a5:1f:8e: 2a:04:09:29:4d:05:d2:e0:9e:ed:bd:9d:2d:e0:2c: ce:95:bf:7d:87:eb:b3:5a:7c:70:8d:90:2c:2d:1f: 57:13:b3:fe:68:76:b1:6d:11:1b:a9:97:d0:82:58: 1b:fb:c4:65:d4:0d:0a:c0:3e:68:68:bc:2e:49:06: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:54:58:DB:BD:61:E2:74:0B:5E:9F:90:16:44:7D:F8:76:3A:A7 X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:a1:83:5e:8c:9f:a3:be:ef:ec:cf:8b:fc:33:7d:b6:e1: fe:e1:82:45:ba:81:b1:56:73:74:08:1e:eb:fc:7d:5f:2c:c7: 27:5f:e5:18:27:9c:f1:a5:79:93:8d:02:03:af:83:a8:b1:5c: b8:79:37:18:30:04:ed:bf:66:0a:78:df:db:22:e5:9b:b3:37: 23:a3:e6:d8:a4:24:d3:22:4a:f1:4c:b8:10:f3:97:d0:9c:02: 3b:8e:bd:e0:2c:b1:52:74:73:8d:1e:e3:60:1d:92:80:98:a8: 74:32:97:c9:19:bd:8b:39:c8:58:81:98:05:28:52:6d:49:ac: df:fd:9b:e7:d3:f3:16:17:96:ef:52:03:65:31:4c:3b:43:45: c7:cc:8a:c3:86:85:62:73:a0:34:12:5f:97:5f:9c:62:13:a0: 27:22:bc:01:d7:0e:59:f4:65:a7:dd:96:64:ac:42:50:b0:7d: 8f:ae:ac:04:46:19:ba:a0:09:fc:86:d8:0b:a9:67:73:2c:ac: 81:27:9f:f2:c3:56:e5:b2:71:04:f6:89:96:df:d0:fb:98:f6: ba:f8:d8:99:ec:83:bb:a2:fc:12:22:f9:c6:01:65:d5:5c:41: f6:37:68:79:f0:96:d0:45:bc:88:9b:05:ba:1a:66:58:06:3a: 9a:9a:c2:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoNjVBOEQwOEIyRUM4RjQyRDQzQjlBQTdBNDIzNTE3MkJC N0VEMTY2NTAeFw0yNTA2MDMwNzA1MjRaFw0yNTA2MTAwNzA1MjRaMBgxFjAUBgNV BAMTDTY4M2U5ZWI0LTM5MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9yKKztN6MzCBlNLq+jqR1Rx2MhgRlNswJbRQFQfVlGNlEuorg2PBqcWAZYSsH rTPUsX1KaGUyfjcDBS9uLM6WSvxl0Ic5/RnN2gAiRexb6tUlYzHEBcyU50I3Kq3H 4egtUkq3azZO2GbcHzeIoL9dyG5LRB+T7yZ9TY9IzAd502jJZG1cQzywB0l97+1+ TaHw0UFcQcVK/8XyH+004aphWwOslKWl2neL2EUfAPuY2bQx7H6PraB7nS2W4QQ0 JqUfjioECSlNBdLgnu29nS3gLM6Vv32H67NafHCNkCwtH1cTs/5odrFtERupl9CC WBv7xGXUDQrAPmhovC5JBp0DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULpxUWNu9 YeJ0C16fkBZEffh2OqcwHwYDVR0jBBgwFoAUZajQiy7I9C1Duap6QjUXK7ftFmUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzY0QkE0QkE4QzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFqUWl5N0k5QzFEdWFwNlFqVVhLN2Z0Rm1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzY0QkE0QkE4QzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMx RHVhcDZRalVYSzdmdEZtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIdVoYNejJ+jvu/sz4v8M3224f7hgkW6gbFWc3QIHuv8fV8sxydf5Rgn nPGleZONAgOvg6ixXLh5NxgwBO2/Zgp439si5ZuzNyOj5tikJNMiSvFMuBDzl9Cc AjuOveAssVJ0c40e42AdkoCYqHQyl8kZvYs5yFiBmAUoUm1JrN/9m+fT8xYXlu9S A2UxTDtDRcfMisOGhWJzoDQSX5dfnGIToCcivAHXDln0ZafdlmSsQlCwfY+urARG GbqgCfyG2AupZ3MsrIEnn/LDVuWycQT2iZbf0PuY9rr42Jnsg7ui/BIi+cYBZdVc QfY3aHnwltBFvIibBboaZlgGOpqawno= -----END CERTIFICATE-----Generated at Tue Jun 3 23:49:25 2025 by rpki-client