$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: WImUcMxwVfPM51gWXVPfKhGQg2iRFaR8ZbWXAeO2SOw= Subject key identifier: E9:1D:85:A2:58:86:34:6F:82:28:83:6F:C5:8D:BD:68:4E:86:6F:40 Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0DD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0DD0 Signing time: Fri 30 May 2025 18:03:56 +0000 Manifest this update: Fri 30 May 2025 18:03:56 +0000 Manifest next update: Fri 06 Jun 2025 18:03:56 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: QheyFoQFdrpF+y/EObDxD7Uiu6eCDQ12+KxIdjgbk4s=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: zpjIrqbuu6FZf6yZ6yRXtcMiYEO9icrMtSLSk/Oo5Eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: May 30 18:03:56 2025 GMT Not After : Jun 6 18:03:56 2025 GMT Subject: CN=6839f30c-c0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:9a:79:cb:fa:fe:c7:68:30:63:fc:c9:a1: e9:91:37:d5:2b:b9:a6:87:fb:3f:5d:59:76:82:69: 69:68:f4:8e:88:f6:08:ee:df:91:16:48:ba:32:48: fb:10:22:1e:bd:b4:ea:51:65:f5:53:5f:0a:31:0a: 26:b2:d7:60:16:a2:8b:a7:0d:98:7f:7d:c8:ca:a2: 9f:7f:8d:ad:a7:90:41:08:1d:ab:d9:29:11:56:b5: 9f:47:65:19:79:cb:aa:be:bd:55:0e:32:d2:9c:09: c6:67:2f:1d:c6:e5:54:73:03:b7:34:8a:58:e2:e0: 80:b2:69:3f:91:c7:0a:5b:c9:48:8e:c8:dc:10:75: 97:b4:80:fe:2d:86:f3:a1:59:1d:43:a9:50:c9:b2: a7:6c:6d:7f:c0:d4:49:4b:4e:5f:cc:34:7a:a4:df: e0:f5:43:f1:2f:52:69:9f:3c:2b:66:d4:66:17:f5: 38:c7:f1:b4:9e:45:b0:cb:5f:4a:db:76:85:24:9b: b1:2a:89:c2:44:e2:fd:9d:cf:f5:80:d2:e9:60:ca: 27:a4:2b:ae:2d:e0:43:f9:07:8a:f0:64:ed:7c:56: c9:54:57:b4:d0:eb:99:1e:52:b2:6e:57:f3:3f:09: 05:7c:56:95:00:9f:4a:78:80:fe:bd:82:ad:da:2c: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:85:A2:58:86:34:6F:82:28:83:6F:C5:8D:BD:68:4E:86:6F:40 X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:84:f7:87:65:da:44:69:da:a4:8a:98:fa:fc:6e:62:56:07: 36:da:f7:55:75:8d:04:06:4a:9f:6f:e7:69:3a:39:bf:8c:b6: 01:90:5b:59:f5:20:2e:a0:c5:32:e5:10:93:a4:1a:20:79:3a: 20:3d:51:af:32:b5:f5:41:9d:e4:0e:0f:34:87:2b:a4:4e:73: 18:07:89:e9:93:6b:36:1a:4f:d1:6a:0b:af:ae:25:68:0b:b4: 7a:62:3a:4b:4d:65:19:15:ca:a5:68:43:ed:04:d9:35:bb:cc: 88:fd:c6:e1:7f:7a:47:17:16:3b:78:12:36:4f:94:8c:c4:a3: 94:af:cb:ae:9d:a2:38:25:73:7b:2e:d3:e1:3b:d7:c3:a1:95: 69:36:16:3d:a1:62:c7:9f:f9:06:a9:0f:4f:fc:0e:74:11:74: 45:a5:41:86:41:44:ef:45:97:0d:4c:5f:54:8c:1c:fe:4d:1e: 56:7f:ed:c8:2c:9d:c8:fe:f7:c3:54:0e:96:dc:3f:a6:34:ee: 5b:0d:78:33:14:32:f4:15:5d:66:75:f9:b4:38:ea:25:bf:c1: 65:9d:3d:e3:87:55:80:18:c8:02:24:cf:f7:57:49:69:8d:88: 65:3a:c0:fb:5d:22:01:f2:37:80:5f:5c:1a:50:3a:bd:7a:e1: e6:49:1c:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUwNTMwMTgwMzU2WhcNMjUwNjA2MTgwMzU2WjAYMRYwFAYD VQQDEw02ODM5ZjMwYy1jMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG+aecv6/sdoMGP8yaHpkTfVK7mmh/s/XVl2gmlpaPSOiPYI7t+RFki6Mkj7 ECIevbTqUWX1U18KMQomstdgFqKLpw2Yf33IyqKff42tp5BBCB2r2SkRVrWfR2UZ ecuqvr1VDjLSnAnGZy8dxuVUcwO3NIpY4uCAsmk/kccKW8lIjsjcEHWXtID+LYbz oVkdQ6lQybKnbG1/wNRJS05fzDR6pN/g9UPxL1JpnzwrZtRmF/U4x/G0nkWwy19K 23aFJJuxKonCROL9nc/1gNLpYMonpCuuLeBD+QeK8GTtfFbJVFe00OuZHlKyblfz PwkFfFaVAJ9KeID+vYKt2iwjUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkdhaJY hjRvgiiDb8WNvWhOhm9AMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWhPeHZdpEadqkipj6/G5iVgc22vdVdY0EBkqfb+dpOjm/jLYBkFtZ 9SAuoMUy5RCTpBogeTogPVGvMrX1QZ3kDg80hyukTnMYB4npk2s2Gk/RaguvriVo C7R6YjpLTWUZFcqlaEPtBNk1u8yI/cbhf3pHFxY7eBI2T5SMxKOUr8uunaI4JXN7 LtPhO9fDoZVpNhY9oWLHn/kGqQ9P/A50EXRFpUGGQUTvRZcNTF9UjBz+TR5Wf+3I LJ3I/vfDVA6W3D+mNO5bDXgzFDL0FV1mdfm0OOolv8FlnT3jh1WAGMgCJM/3V0lp jYhlOsD7XSIB8jeAX1waUDq9euHmSRxH -----END CERTIFICATE-----Generated at Sat May 31 17:37:45 2025 by rpki-client