$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: BapA9GE3ZLaX/ZR6yRTpUwTN97poChcXCeLTQ/9ZISc= Subject key identifier: 05:0D:02:B9:A6:07:42:12:CF:75:20:F3:B2:86:5D:0D:0E:FD:AC:55 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 36 Signing time: Sat 31 May 2025 07:11:06 +0000 Manifest this update: Sat 31 May 2025 07:11:06 +0000 Manifest next update: Sat 07 Jun 2025 07:11:06 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: rH2cvWNwBAY5UNLg3jl19osSFFlwMiNahI5LaqEWeEw=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: May 31 07:11:06 2025 GMT Not After : Jun 7 07:11:06 2025 GMT Subject: CN=683aab8a-0c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:ba:e9:cf:08:97:9a:de:52:26:3e:f8:49: a3:29:b5:f6:a4:40:b0:97:8d:bb:88:09:6c:e6:54: f1:93:9b:1a:85:94:d2:b2:e8:4b:f7:ff:fd:ad:71: e0:72:95:80:ca:90:c6:2f:34:9f:7f:79:07:df:f0: e9:19:2c:52:94:93:39:fa:1f:db:44:c6:ed:d7:5d: d0:d8:f0:29:4f:b4:4c:d8:fd:7f:f1:97:eb:2f:2d: 97:56:bd:24:8f:a6:fd:fd:90:9e:6d:82:47:79:ed: e6:ab:de:05:37:3d:36:17:93:8d:36:e0:84:22:3f: e3:4a:ec:10:7d:7b:cc:99:45:10:1c:91:0d:2a:74: e3:cc:de:9e:c0:5d:86:d4:bf:d2:51:3b:25:09:27: bf:c0:b8:00:59:dc:be:a8:2e:7e:a3:fa:f8:41:7c: 20:b3:d1:03:4c:8d:02:fd:bd:c9:72:33:02:f7:d3: aa:f9:2f:55:7c:40:4e:8c:d3:eb:9f:27:c6:7b:4a: 47:55:27:6e:b6:31:12:15:b9:8b:61:00:8e:06:e5: 03:aa:76:fd:99:59:d8:fc:5e:f9:69:40:9d:e4:86: ad:a2:65:af:ac:b2:cc:4c:5b:de:e9:02:03:b6:45: 6f:46:32:96:e8:bd:42:42:ff:8e:ea:2c:2c:46:95: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0D:02:B9:A6:07:42:12:CF:75:20:F3:B2:86:5D:0D:0E:FD:AC:55 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:8d:d8:bd:45:ca:70:de:d7:8e:54:bb:12:9e:45:70:6c:f3: dc:00:da:a0:e7:83:e1:4c:ca:96:b0:df:37:09:9e:c6:dd:cb: ea:f3:4e:3f:74:9a:63:98:4a:75:37:30:2e:e5:34:c0:ca:f0: 7f:5d:0c:53:52:1f:d9:11:95:59:17:2d:d5:a8:84:33:17:6b: ca:8f:5f:a0:d9:a5:7d:a2:c2:17:fa:b0:5e:8d:b7:72:9f:20: 89:32:b9:a0:d2:20:a9:6c:ef:bc:01:38:f3:77:7a:5d:fd:d0: 22:1b:cd:56:04:97:d2:8f:e3:f9:7a:f0:ae:88:1f:3e:bb:f7: dc:b3:b5:93:80:e7:25:82:84:d6:0d:45:87:77:7b:bf:78:80: 02:d7:35:73:27:75:9c:36:c6:8a:fc:6c:f8:49:28:16:84:37: 86:46:93:2e:16:2c:9f:94:b2:f8:a0:8a:d4:70:0f:90:83:ca: 85:4d:f7:3c:6d:dd:9f:71:36:06:de:df:92:3f:f3:7b:e5:4b: 83:83:79:2e:1b:c7:6e:0c:21:12:13:73:98:b3:d4:3b:b4:e2: 09:6f:dd:88:8c:78:17:1f:c0:83:c4:04:75:83:96:ed:bd:66: 71:51:db:09:97:84:f7:3a:30:2b:e5:a3:ea:23:04:b6:10:0c: d7:c5:84:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA1MzEwNzExMDZaFw0yNTA2MDcwNzExMDZaMBgxFjAUBgNV BAMTDTY4M2FhYjhhLTBjN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTdbrpzwiXmt5SJj74SaMptfakQLCXjbuICWzmVPGTmxqFlNKy6Ev3//2tceBy lYDKkMYvNJ9/eQff8OkZLFKUkzn6H9tExu3XXdDY8ClPtEzY/X/xl+svLZdWvSSP pv39kJ5tgkd57ear3gU3PTYXk4024IQiP+NK7BB9e8yZRRAckQ0qdOPM3p7AXYbU v9JROyUJJ7/AuABZ3L6oLn6j+vhBfCCz0QNMjQL9vclyMwL306r5L1V8QE6M0+uf J8Z7SkdVJ262MRIVuYthAI4G5QOqdv2ZWdj8XvlpQJ3khq2iZa+sssxMW97pAgO2 RW9GMpbovUJC/47qLCxGlebjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBQ0CuaYH QhLPdSDzsoZdDQ79rFUwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSN2L1FynDe145UuxKeRXBs89wA2qDng+FMypaw3zcJnsbdy+rzTj90 mmOYSnU3MC7lNMDK8H9dDFNSH9kRlVkXLdWohDMXa8qPX6DZpX2iwhf6sF6Nt3Kf IIkyuaDSIKls77wBOPN3el390CIbzVYEl9KP4/l68K6IHz6799yztZOA5yWChNYN RYd3e794gALXNXMndZw2xor8bPhJKBaEN4ZGky4WLJ+UsvigitRwD5CDyoVN9zxt 3Z9xNgbe35I/83vlS4ODeS4bx24MIRITc5iz1Du04glv3YiMeBcfwIPEBHWDlu29 ZnFR2wmXhPc6MCvlo+ojBLYQDNfFhLU= -----END CERTIFICATE-----Generated at Sat May 31 16:52:18 2025 by rpki-client