$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft File: ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft (raw, json) Hash identifier: QMZnRRH2RxWOsZjdr96MZO+t2JRZGwnx32M3nIxieVw= Subject key identifier: 12:A9:86:00:E1:94:F8:C0:9C:6C:B2:19:33:DE:BC:65:F8:9A:DF:67 Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft Manifest number: 0320 Signing time: Mon 09 Jun 2025 00:43:36 +0000 Manifest this update: Mon 09 Jun 2025 00:43:36 +0000 Manifest next update: Mon 16 Jun 2025 00:43:36 +0000 Files and hashes: 1: ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl (hash: r+f00xWAZiLnnwjZ/EBzFR8hsD7F8r9xv3WasJVlPxs=) 2: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (hash: LnATtYItJoGzNqDT/OfESDCcildtpDcQj0Gi0SQtIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913791D, serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Validity Not Before: Jun 9 00:43:36 2025 GMT Not After : Jun 16 00:43:36 2025 GMT Subject: CN=68462e38-17ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:b8:ee:1d:82:d1:b2:5a:28:83:ac:76:1f: ce:a2:55:54:1f:f6:2a:4b:59:39:ed:2f:94:81:0c: 7e:ef:8f:2b:78:41:cb:08:99:48:ea:35:50:c8:ad: 72:3b:37:13:b2:75:f1:c4:9c:bd:8d:ba:fd:da:c5: 64:51:12:e0:a6:d0:17:4e:27:6c:d6:9e:1d:92:d3: a4:5a:87:63:9e:0d:4f:7f:f7:ac:2f:8b:5e:6f:5e: 30:d8:35:6e:09:8a:1f:2c:a9:4a:fc:bc:69:35:b8: 87:0f:ea:c7:56:5b:32:c5:6e:e1:b3:8e:c1:c9:f0: c0:83:71:14:fa:d4:61:f3:36:93:0a:7a:00:4c:34: 5e:65:28:0d:e4:e1:ee:0f:6d:e4:d1:c5:d0:47:00: 06:60:5c:aa:69:05:90:15:72:05:82:49:8a:18:ea: d7:7c:4e:11:26:b9:a0:57:aa:01:84:bc:60:df:f2: bf:dc:9a:ac:a5:2a:58:44:8e:0b:cc:0c:de:d2:b1: aa:d8:77:65:f9:5b:fd:16:64:3c:fc:88:95:71:6c: ea:b6:f6:53:57:ec:68:67:5a:a1:f0:55:8d:a2:fb: 46:53:98:61:8d:d6:46:8c:1e:fe:6e:c0:d6:60:8f: ee:9f:c1:ac:f3:15:20:8d:37:30:e4:be:52:0c:3b: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A9:86:00:E1:94:F8:C0:9C:6C:B2:19:33:DE:BC:65:F8:9A:DF:67 X509v3 Authority Key Identifier: keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:48:dd:b1:72:d0:4e:7c:14:8c:ad:df:22:74:48:b3:0e:12: 49:76:26:e4:a4:95:51:2e:70:36:4e:20:fa:ec:1c:81:b1:bb: c2:51:52:f7:14:a4:46:9c:7d:43:1c:ac:61:dd:b0:d5:63:0e: fb:54:bb:64:af:a6:b8:5f:b3:6c:a0:8c:84:aa:dc:b4:03:b5: 6a:b6:a0:0b:64:0a:c3:eb:80:aa:9c:40:5a:bd:16:b6:ca:74: d2:5c:1b:8a:b4:63:07:1c:1f:30:aa:58:8f:b7:06:d6:7c:55: 93:58:ce:3c:4f:42:08:84:19:a9:85:57:55:00:3f:82:ae:7a: 1f:00:b1:49:f7:a2:5f:54:f8:42:a4:33:cd:72:c2:dd:4a:b3: 44:fd:9f:79:fa:ea:d3:de:3b:7e:86:65:48:ff:6b:2c:7d:d9: b0:08:ae:f9:da:c8:b9:56:af:38:bc:0f:ea:51:e5:a6:45:04: 53:4b:c1:33:41:8d:15:b0:9d:01:6a:d5:02:d9:f7:71:1d:4f: 26:b8:a7:f8:be:69:62:e0:c1:44:82:c2:a7:4e:1d:2b:f5:57: cf:49:af:24:cb:27:d1:76:79:d7:d2:ed:64:ac:ed:d2:56:02: 24:08:66:34:66:20:43:d9:8c:6b:28:17:31:b9:5a:b4:59:40: 06:9d:d1:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5MUQxMTAvBgNVBAUTKDY1NUI2NTYyNDYzNkM4MDAzNDE1MzczMzUzNUI0QUE4 QjNBMDAxQjcwHhcNMjUwNjA5MDA0MzM2WhcNMjUwNjE2MDA0MzM2WjAYMRYwFAYD VQQDEw02ODQ2MmUzOC0xN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLm47h2C0bJaKIOsdh/OolVUH/YqS1k57S+UgQx+748reEHLCJlI6jVQyK1y OzcTsnXxxJy9jbr92sVkURLgptAXTids1p4dktOkWodjng1Pf/esL4teb14w2DVu CYofLKlK/LxpNbiHD+rHVlsyxW7hs47ByfDAg3EU+tRh8zaTCnoATDReZSgN5OHu D23k0cXQRwAGYFyqaQWQFXIFgkmKGOrXfE4RJrmgV6oBhLxg3/K/3JqspSpYRI4L zAze0rGq2Hdl+Vv9FmQ8/IiVcWzqtvZTV+xoZ1qh8FWNovtGU5hhjdZGjB7+bsDW YI/un8Gs8xUgjTcw5L5SDDtEuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKphgDh lPjAnGyyGTPevGX4mt9nMB8GA1UdIwQYMBaAFGVbZWJGNsgANBU3M1NbSqizoAG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxRC9DNkI2MTJCMkNE MDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlBQTBGVGN6VTF0S3FMT2dB YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWdGxZa1kyeUFBMEZUY3pVMXRLcUxPZ0FiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzkxRC9DNkI2MTJCMkNEMDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlB QTBGVGN6VTF0S3FMT2dBYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKSN2xctBOfBSMrd8idEizDhJJdibkpJVRLnA2TiD67ByBsbvCUVL3 FKRGnH1DHKxh3bDVYw77VLtkr6a4X7NsoIyEqty0A7VqtqALZArD64CqnEBavRa2 ynTSXBuKtGMHHB8wqliPtwbWfFWTWM48T0IIhBmphVdVAD+CrnofALFJ96JfVPhC pDPNcsLdSrNE/Z95+urT3jt+hmVI/2ssfdmwCK752si5Vq84vA/qUeWmRQRTS8Ez QY0VsJ0BatUC2fdxHU8muKf4vmli4MFEgsKnTh0r9VfPSa8kyyfRdnnX0u1krO3S VgIkCGY0ZiBD2YxrKBcxuVq0WUAGndHJ -----END CERTIFICATE-----Generated at Mon Jun 9 11:55:35 2025 by rpki-client