$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: zeNNR9j/KB5HVbAXmXmjnqsRxSnn4qLgs7mjMjxil18= Subject key identifier: 7A:38:63:D7:55:74:3F:8D:F6:E8:C7:F1:D0:99:0B:ED:A0:54:E7:B7 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 14B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1499 Signing time: Fri 30 May 2025 17:03:46 +0000 Manifest this update: Fri 30 May 2025 17:03:46 +0000 Manifest next update: Fri 06 Jun 2025 17:03:46 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: umTBSJ8OoK0uyzT2Q9qlk0g/FJT6zTIrANjVF2zEVns=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: KlBzZE2KV7lzBc+tNUy/mqi1akgFY3Eb2SwhsYFxcBI=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: uMpXCjBvKkjgsvqgftGEXm10xWManwhepg98lroRmbE=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 6D0gW6FWFI2VeP1xT9SYxSMf8UjausKvml76wHWoNrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5303 (0x14b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: May 30 17:03:46 2025 GMT Not After : Jun 6 17:03:46 2025 GMT Subject: CN=6839e4f2-9163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:a9:ee:6a:e7:6f:5f:75:f9:4e:aa:d3:ac: aa:84:fa:45:b0:3e:aa:c4:6e:27:86:1a:e0:a6:8f: 49:cd:82:32:6b:84:cf:e1:c1:eb:89:68:8a:d3:d0: 7d:79:10:39:99:ef:06:96:a7:36:ba:80:6b:80:c5: 94:87:1e:3b:0b:50:b2:91:3d:d7:d3:e6:52:0a:82: e4:0f:38:00:a0:66:d6:9c:a9:0a:d8:b6:43:11:60: 3e:44:e6:bc:60:d8:27:23:fa:83:3b:0c:40:5d:14: af:d9:9e:35:4c:69:ec:97:82:35:74:cc:58:3e:d3: 87:3a:a4:3d:a2:fd:4e:12:ce:f5:c5:e0:69:4b:24: 00:81:08:25:b7:6d:19:2b:6c:bc:95:cb:8c:80:04: 7b:8e:79:38:db:f2:a2:44:c8:43:7a:b9:24:52:9d: 0c:7d:8e:0a:41:89:51:ac:89:d6:14:6e:74:1b:07: 20:cb:da:af:8e:81:c7:b5:88:49:ce:cf:94:1f:af: 5e:91:e3:d1:48:74:02:80:e8:5c:5f:16:e8:60:d5: 63:fe:28:1f:b1:87:db:ce:f0:3c:e6:9d:91:71:92: fa:59:fb:45:3d:60:25:9e:b9:cf:85:a7:6c:2f:48: b8:00:04:c8:9d:29:75:63:cb:30:cd:b5:a3:b7:05: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:63:D7:55:74:3F:8D:F6:E8:C7:F1:D0:99:0B:ED:A0:54:E7:B7 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0d:1b:89:aa:ef:96:5d:d2:95:3e:0d:40:9d:01:26:71:43: 57:36:7d:d3:8f:70:6a:06:14:19:68:5d:ad:d8:45:e6:10:03: d2:e0:90:3b:81:15:3c:46:3a:7a:17:f4:66:b4:05:cf:eb:48: e1:13:e7:f5:4e:77:fc:fe:a0:a4:f2:06:81:13:28:b6:14:9f: 5d:26:0c:a2:10:33:8e:2b:50:58:a3:36:39:6e:6a:dd:c5:b2: 13:b2:d6:55:af:f3:7d:f8:74:4d:6b:3b:42:fa:de:5d:26:a5: 0d:f5:e8:d7:48:2e:76:15:d8:2b:f2:a1:3e:21:36:ba:e9:97: 96:df:96:57:29:e5:e4:1a:28:8c:48:77:66:24:48:09:cf:63: f0:3e:1b:24:1b:0c:36:a5:df:98:4d:6e:c9:a3:aa:6b:ef:4e: fd:17:81:c3:69:7c:ed:34:1c:34:c5:ef:22:74:ef:a3:93:fd: de:9e:9e:dd:21:6f:39:2e:56:7b:a3:5a:c4:8b:9d:e5:2e:03: d2:70:8a:dc:c5:2f:f1:85:40:b6:62:23:9f:6f:91:af:31:9f: 27:ce:00:d7:41:ca:0a:06:15:77:1d:4c:7f:4f:61:ed:ff:10: 85:4d:26:50:aa:7c:ac:d9:6b:59:3e:05:98:2d:e0:53:85:b9: 5b:ad:88:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUwNTMwMTcwMzQ2WhcNMjUwNjA2MTcwMzQ2WjAYMRYwFAYD VQQDEw02ODM5ZTRmMi05MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx+p7mrnb191+U6q06yqhPpFsD6qxG4nhhrgpo9JzYIya4TP4cHriWiK09B9 eRA5me8Glqc2uoBrgMWUhx47C1CykT3X0+ZSCoLkDzgAoGbWnKkK2LZDEWA+ROa8 YNgnI/qDOwxAXRSv2Z41TGnsl4I1dMxYPtOHOqQ9ov1OEs71xeBpSyQAgQglt20Z K2y8lcuMgAR7jnk42/KiRMhDerkkUp0MfY4KQYlRrInWFG50Gwcgy9qvjoHHtYhJ zs+UH69ekePRSHQCgOhcXxboYNVj/igfsYfbzvA85p2RcZL6WftFPWAlnrnPhads L0i4AATInSl1Y8swzbWjtwVzzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo4Y9dV dD+N9ujH8dCZC+2gVOe3MB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7DRuJqu+WXdKVPg1AnQEmcUNXNn3Tj3BqBhQZaF2t2EXmEAPS4JA7 gRU8Rjp6F/RmtAXP60jhE+f1Tnf8/qCk8gaBEyi2FJ9dJgyiEDOOK1BYozY5bmrd xbITstZVr/N9+HRNaztC+t5dJqUN9ejXSC52Fdgr8qE+ITa66ZeW35ZXKeXkGiiM SHdmJEgJz2PwPhskGww2pd+YTW7Jo6pr7079F4HDaXztNBw0xe8idO+jk/3enp7d IW85LlZ7o1rEi53lLgPScIrcxS/xhUC2YiOfb5GvMZ8nzgDXQcoKBhV3HUx/T2Ht /xCFTSZQqnys2WtZPgWYLeBThblbrYjE -----END CERTIFICATE-----Generated at Sat May 31 15:56:46 2025 by rpki-client