$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft File: i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json) Hash identifier: p4B6LZ0OIyEsH3y5+K/rqy/BPFC5/ycV/oDnQdHdYHI= Subject key identifier: 10:35:48:2C:EF:32:C9:61:57:3B:12:68:59:77:5A:B3:28:DC:0B:6A Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft Manifest number: 01B6 Signing time: Mon 09 Jun 2025 02:16:54 +0000 Manifest this update: Mon 09 Jun 2025 02:16:53 +0000 Manifest next update: Mon 16 Jun 2025 02:16:53 +0000 Files and hashes: 1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: mcZH/opRzMi3HuieVf2e0WYZddbinvLsBAhGgRh4BbE=) 2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: g7Iu0qsIgHA2DsVqzJPZwAHsWDw0BvGfzGeWjQmEdZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 02:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1A8, serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Validity Not Before: Jun 9 02:16:53 2025 GMT Not After : Jun 16 02:16:53 2025 GMT Subject: CN=68464416-b3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:f3:dc:ac:9f:cf:dd:0e:ef:68:95:d4:f2: 1b:28:c8:bc:5d:ff:69:51:b8:37:58:4c:46:76:6e: e7:89:a0:10:29:7a:6a:e5:67:3e:d2:14:5f:f7:f5: a0:4c:e3:07:7e:38:bc:9e:82:bd:0e:fd:bf:09:6f: 6e:23:51:d8:be:e3:3b:01:8b:e5:92:23:1b:f5:84: 2a:2d:6e:71:ab:53:f7:97:ed:20:a4:1b:ae:ff:38: c8:83:bb:c3:17:1b:34:83:34:d9:25:0a:a6:ef:57: 05:82:4c:59:1f:47:ae:39:11:d3:32:d3:3a:bc:79: 18:d7:d0:d4:e9:0f:72:76:bb:6c:70:91:fb:70:c4: 71:a9:3f:c0:38:29:b2:c0:c0:fc:d2:8b:f6:f9:f0: 78:8e:b6:6b:ee:f1:9d:d6:37:b0:f8:a8:ba:05:c6: 2a:6f:b6:6c:7d:10:eb:39:8d:ba:bd:15:69:48:3d: 18:f1:61:ce:99:58:68:d7:75:ee:b4:ac:21:9b:b7: cc:de:fe:a3:59:a6:47:e2:e9:94:01:70:1e:d2:05: e1:80:26:4b:1b:ed:75:20:c9:7c:f1:72:ee:cb:65: 61:9d:15:f9:28:ab:cb:c0:1f:12:d2:7f:25:47:89: 06:94:04:b4:90:66:db:9a:65:e6:a8:03:6e:e2:bd: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:35:48:2C:EF:32:C9:61:57:3B:12:68:59:77:5A:B3:28:DC:0B:6A X509v3 Authority Key Identifier: keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:71:66:6d:96:ad:a8:9f:93:93:6e:e3:18:e1:88:55:cf:bd: 06:ec:c3:e2:50:69:c8:d9:09:f3:e4:38:8a:ec:52:00:b5:49: 7a:1e:e2:5d:75:45:75:21:b1:88:e9:40:2c:a6:04:dd:8a:5e: c5:e7:54:31:a8:f7:ac:3c:98:79:f0:97:2d:ad:2d:f6:3e:66: ba:8a:a0:a3:cf:3a:9a:2c:3b:84:b0:f3:08:e5:13:f6:01:1b: f4:61:cc:44:79:ae:7a:3d:23:3b:a8:ef:04:ce:02:06:fe:0d: ba:4e:f5:97:ad:52:8d:df:14:13:f3:3c:f6:d9:c4:6d:2d:c4: 81:5d:82:f8:e5:84:55:9a:59:64:28:a7:a2:7b:04:2b:63:35: 76:1c:a0:10:98:3f:99:73:f6:b6:e4:8a:06:06:b5:27:d3:c2: 4d:ea:20:82:af:c4:46:d2:da:80:44:80:01:48:75:c9:4b:35: ee:e0:1f:35:fe:c2:0c:39:54:5b:d3:eb:03:eb:43:87:70:e4: 4e:57:7e:f0:fc:99:af:39:f9:49:4d:97:e5:38:85:65:2c:c9: ad:ca:91:d8:4c:a8:a5:13:53:86:9e:cb:24:a3:3c:fa:ec:98: bc:05:49:0b:90:5c:90:13:3a:69:5b:ee:c8:e6:72:8b:e7:bb: 8e:3f:87:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxQTgxMTAvBgNVBAUTKDhCRUNDMzYzODA3MEE2Qjc5RjZEQ0UyMkEwRTY1QkIy MUUwRDc3MjkwHhcNMjUwNjA5MDIxNjUzWhcNMjUwNjE2MDIxNjUzWjAYMRYwFAYD VQQDEw02ODQ2NDQxNi1iM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9jz3Kyfz90O72iV1PIbKMi8Xf9pUbg3WExGdm7niaAQKXpq5Wc+0hRf9/Wg TOMHfji8noK9Dv2/CW9uI1HYvuM7AYvlkiMb9YQqLW5xq1P3l+0gpBuu/zjIg7vD Fxs0gzTZJQqm71cFgkxZH0euORHTMtM6vHkY19DU6Q9ydrtscJH7cMRxqT/AOCmy wMD80ov2+fB4jrZr7vGd1jew+Ki6BcYqb7ZsfRDrOY26vRVpSD0Y8WHOmVho13Xu tKwhm7fM3v6jWaZH4umUAXAe0gXhgCZLG+11IMl88XLuy2VhnRX5KKvLwB8S0n8l R4kGlAS0kGbbmmXmqANu4r2ZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA1SCzv MslhVzsSaFl3WrMo3AtqMB8GA1UdIwQYMBaAFIvsw2OAcKa3n23OIqDmW7IeDXcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFBOC9BNDBBNzI0QUIx MzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3ByZWZiYzRpb09aYnNoNE5k eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktekRZNEJ3cHJlZmJjNGlvT1pic2g0TmR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFBOC9BNDBBNzI0QUIxMzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3By ZWZiYzRpb09aYnNoNE5keWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXcWZtlq2on5OTbuMY4YhVz70G7MPiUGnI2Qnz5DiK7FIAtUl6HuJd dUV1IbGI6UAspgTdil7F51QxqPesPJh58JctrS32Pma6iqCjzzqaLDuEsPMI5RP2 ARv0YcxEea56PSM7qO8EzgIG/g26TvWXrVKN3xQT8zz22cRtLcSBXYL45YRVmllk KKeiewQrYzV2HKAQmD+Zc/a25IoGBrUn08JN6iCCr8RG0tqARIABSHXJSzXu4B81 /sIMOVRb0+sD60OHcOROV37w/JmvOflJTZflOIVlLMmtypHYTKilE1OGnsskozz6 7Ji8BUkLkFyQEzppW+7I5nKL57uOP4dp -----END CERTIFICATE-----Generated at Tue Jun 10 15:04:12 2025 by rpki-client