$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: APd4ii9bTObDaOcsQi4yGwkD4K+VmIgWi8MbO3Nwkr8= Subject key identifier: 7A:A6:F7:72:5B:50:4A:9E:05:41:AE:66:F9:E2:F7:01:58:CE:B2:61 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 0276 Signing time: Sat 07 Jun 2025 01:44:15 +0000 Manifest this update: Sat 07 Jun 2025 01:44:15 +0000 Manifest next update: Sat 14 Jun 2025 01:44:15 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: HhevuQtAnlArMSCz4XncqpB9dpQ4YZ2FdTj7lQokqBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Jun 7 01:44:15 2025 GMT Not After : Jun 14 01:44:15 2025 GMT Subject: CN=6843996f-c806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:e2:d2:85:c7:ea:74:64:64:18:79:d7:f1: 82:04:ce:2e:22:e4:e7:87:b4:aa:5f:0c:92:5b:ba: f6:7b:0d:42:52:c9:85:0b:4d:73:cb:a1:59:dd:91: 8f:3e:e3:e5:c6:5e:c4:1a:3c:24:b0:67:d0:d5:34: b9:27:d5:03:40:31:e1:4c:2c:90:65:b8:2c:40:07: 1d:01:b7:72:f1:d0:5f:2c:26:75:4c:34:fb:2f:99: ad:3f:87:2b:ee:18:8d:47:8e:8c:b5:88:23:54:4e: 37:d6:25:35:21:5c:d4:68:79:b2:5d:39:ec:92:49: 73:25:71:cc:c0:b6:4c:38:80:cb:6e:ef:12:31:4d: 3b:b0:9a:b5:c7:a1:13:09:45:f7:8c:2c:b0:58:b9: 9e:3b:f6:a4:ad:eb:76:83:ea:5c:75:c1:24:22:fc: 7c:61:57:a1:4c:3d:a0:56:8e:f6:78:ee:d8:1a:c6: 07:f7:51:de:00:0b:99:51:88:da:d0:23:67:58:89: 3a:34:45:e8:a6:d2:d7:88:9f:12:f4:6e:72:84:35: 25:26:0c:f6:25:bb:91:80:dd:1a:49:4c:af:87:b0: c3:76:cd:ad:25:ae:c6:2c:83:7a:da:7f:ff:12:7f: 93:cb:73:b6:45:3e:35:28:3d:cb:7b:85:c9:cb:76: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A6:F7:72:5B:50:4A:9E:05:41:AE:66:F9:E2:F7:01:58:CE:B2:61 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ee:d6:1b:40:c1:b5:e7:20:fb:b2:7c:a3:b0:d8:88:6c:f8: 36:8c:d9:72:71:20:d1:7e:ec:45:8f:db:33:c2:f4:70:f8:fe: ba:40:ed:39:82:83:88:5e:49:dc:67:0f:8a:28:8e:7c:6b:53: 8a:c7:55:ad:75:5f:ba:0d:a7:67:d9:58:5b:58:89:04:88:a4: 8c:f5:5d:4b:a7:1b:60:45:12:b2:75:96:31:6c:e1:73:da:7e: f0:ab:1f:52:de:fe:8b:80:42:f6:bc:c8:13:e9:75:3d:56:c7: ac:01:d1:a4:3e:d3:27:39:aa:4e:91:46:fe:b9:57:de:d6:4c: 89:06:aa:4b:ca:a2:cf:90:98:be:4a:d0:58:61:c5:52:db:ca: ab:a7:6c:f6:f3:20:35:28:54:87:c6:0c:a0:de:82:e9:62:32: a5:9d:e8:e7:eb:45:22:83:1e:fe:2e:a7:43:c8:93:d7:96:b0: 75:b9:72:35:a2:13:9f:c7:ac:fc:03:56:c6:46:be:2a:08:10: 68:66:b3:91:9b:40:61:ef:da:ed:7a:72:e7:8b:c6:fa:81:93: e4:b0:8a:20:26:82:75:db:a0:98:75:b5:60:e4:6b:8a:4d:6f: 91:fa:56:98:2c:fd:d1:64:12:1b:02:7a:e6:2d:c5:c9:f5:ae: 06:31:47:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUwNjA3MDE0NDE1WhcNMjUwNjE0MDE0NDE1WjAYMRYwFAYD VQQDEw02ODQzOTk2Zi1jODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1fi0oXH6nRkZBh51/GCBM4uIuTnh7SqXwySW7r2ew1CUsmFC01zy6FZ3ZGP PuPlxl7EGjwksGfQ1TS5J9UDQDHhTCyQZbgsQAcdAbdy8dBfLCZ1TDT7L5mtP4cr 7hiNR46MtYgjVE431iU1IVzUaHmyXTnskklzJXHMwLZMOIDLbu8SMU07sJq1x6ET CUX3jCywWLmeO/akret2g+pcdcEkIvx8YVehTD2gVo72eO7YGsYH91HeAAuZUYja 0CNnWIk6NEXoptLXiJ8S9G5yhDUlJgz2JbuRgN0aSUyvh7DDds2tJa7GLIN62n// En+Ty3O2RT41KD3Le4XJy3brAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqm93Jb UEqeBUGuZvni9wFYzrJhMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB37tYbQMG15yD7snyjsNiIbPg2jNlycSDRfuxFj9szwvRw+P66QO05 goOIXkncZw+KKI58a1OKx1WtdV+6Dadn2VhbWIkEiKSM9V1LpxtgRRKydZYxbOFz 2n7wqx9S3v6LgEL2vMgT6XU9VsesAdGkPtMnOapOkUb+uVfe1kyJBqpLyqLPkJi+ StBYYcVS28qrp2z28yA1KFSHxgyg3oLpYjKlnejn60Uigx7+LqdDyJPXlrB1uXI1 ohOfx6z8A1bGRr4qCBBoZrORm0Bh79rtenLni8b6gZPksIogJoJ126CYdbVg5GuK TW+R+laYLP3RZBIbAnrmLcXJ9a4GMUdS -----END CERTIFICATE-----Generated at Sat Jun 7 13:08:41 2025 by rpki-client