$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: woeY/7AIL+ieQdAIeOIbzO72kDuKq6otA89LKqbMVuI= Subject key identifier: E3:D4:32:9D:31:0F:40:A8:31:5C:52:25:57:C9:CC:91:B6:3F:EF:D6 Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 0920 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 0919 Signing time: Thu 12 Jun 2025 20:03:51 +0000 Manifest this update: Thu 12 Jun 2025 20:03:51 +0000 Manifest next update: Thu 19 Jun 2025 20:03:51 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: VrpmjgOmYUbJw2EycozYX3T19JHvwjYSndly14gGI5o=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: Jun 12 20:03:51 2025 GMT Not After : Jun 19 20:03:51 2025 GMT Subject: CN=684b32a7-a5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6b:9e:81:eb:ca:32:4d:41:17:6b:80:28:62: 4f:c7:2b:f7:7a:14:e4:b1:fc:82:3c:62:41:a8:f0: ba:c1:f5:fe:93:61:60:70:76:f1:33:4d:15:de:39: fa:b9:69:df:e6:cb:a4:ec:f5:be:23:f9:45:db:fb: 41:d6:d9:b7:70:4f:4b:d7:8c:52:42:ff:8f:12:65: 75:70:f8:6f:c4:b2:8f:a0:71:df:fc:79:ea:ee:31: 14:65:92:f2:fc:4d:eb:ca:49:b4:53:6b:e8:2b:e9: 4b:66:d3:25:76:3b:1d:0e:dd:21:98:25:a5:46:ff: 4f:49:78:5e:26:11:91:02:6a:b3:53:e3:61:75:e2: ea:6a:5d:b3:50:d8:4e:34:76:c8:4c:11:b9:4d:51: d1:3f:30:d4:57:10:a3:35:af:2e:d0:ad:a5:13:43: ba:41:78:bd:ad:fb:c2:8e:60:37:a3:37:4e:b6:cd: 25:64:6d:f6:31:23:d1:01:29:d4:d6:a6:ec:ba:90: c6:8c:15:42:65:0e:73:b1:4b:54:05:69:53:10:a4: de:00:86:32:4f:0c:85:b3:b4:ee:3f:5e:c6:8b:fb: 3e:61:a2:61:47:bf:ce:4f:9d:48:8c:29:0c:b0:ab: be:f9:e3:05:24:0c:78:77:f0:b9:42:6b:39:a7:14: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D4:32:9D:31:0F:40:A8:31:5C:52:25:57:C9:CC:91:B6:3F:EF:D6 X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:1b:c0:bc:8d:47:29:91:9d:1f:14:44:d1:a6:14:52:fb: cb:db:0e:8c:6c:ec:f4:bf:ab:54:ec:a1:bd:93:32:63:d1:ad: 66:e8:46:0f:68:bd:85:99:6e:58:31:56:a9:b5:df:87:3d:33: f1:6e:4c:4c:49:91:37:1e:63:7f:9d:67:ad:bb:17:38:0a:0d: 5c:7e:91:32:07:41:52:5f:04:71:42:0a:1b:7a:71:6c:6c:8e: ed:d2:c2:bd:f9:23:c0:40:5b:c1:52:ab:02:a2:dd:f6:53:d5: 56:34:16:d0:b9:1f:22:d2:48:10:3b:2b:e9:b0:7e:72:06:15: 13:af:a1:f1:b0:1d:fb:76:56:e7:86:85:0c:c5:30:ec:ab:dd: 08:31:5b:25:3d:21:11:5c:63:66:3a:5d:ef:c0:d6:16:90:6c: b5:87:51:b7:e2:2c:11:fe:cf:8b:18:55:44:95:62:6a:54:7d: 87:74:25:76:36:ef:4d:35:9b:9a:ed:8a:05:38:9f:96:1c:e2: 3a:04:70:4c:1e:0f:a3:27:58:71:b0:00:7a:1d:17:97:53:ee: 27:ed:68:96:0f:a3:c9:57:91:01:bb:a5:5f:7c:9d:2b:a9:2e: ae:7e:fd:16:8e:77:ff:ef:63:12:11:9f:5c:c0:4a:f7:2f:7e: b3:50:cb:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjUwNjEyMjAwMzUxWhcNMjUwNjE5MjAwMzUxWjAYMRYwFAYD VQQDEw02ODRiMzJhNy1hNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32uegevKMk1BF2uAKGJPxyv3ehTksfyCPGJBqPC6wfX+k2FgcHbxM00V3jn6 uWnf5suk7PW+I/lF2/tB1tm3cE9L14xSQv+PEmV1cPhvxLKPoHHf/Hnq7jEUZZLy /E3rykm0U2voK+lLZtMldjsdDt0hmCWlRv9PSXheJhGRAmqzU+NhdeLqal2zUNhO NHbITBG5TVHRPzDUVxCjNa8u0K2lE0O6QXi9rfvCjmA3ozdOts0lZG32MSPRASnU 1qbsupDGjBVCZQ5zsUtUBWlTEKTeAIYyTwyFs7TuP17Gi/s+YaJhR7/OT51IjCkM sKu++eMFJAx4d/C5Qms5pxTP7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPUMp0x D0CoMVxSJVfJzJG2P+/WMB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaRBvAvI1HKZGdHxRE0aYUUvvL2w6MbOz0v6tU7KG9kzJj0a1m6EYP aL2FmW5YMVaptd+HPTPxbkxMSZE3HmN/nWetuxc4Cg1cfpEyB0FSXwRxQgobenFs bI7t0sK9+SPAQFvBUqsCot32U9VWNBbQuR8i0kgQOyvpsH5yBhUTr6HxsB37dlbn hoUMxTDsq90IMVslPSERXGNmOl3vwNYWkGy1h1G34iwR/s+LGFVElWJqVH2HdCV2 Nu9NNZua7YoFOJ+WHOI6BHBMHg+jJ1hxsAB6HReXU+4n7WiWD6PJV5EBu6VffJ0r qS6ufv0Wjnf/72MSEZ9cwEr3L36zUMti -----END CERTIFICATE-----Generated at Sat Jun 14 00:45:57 2025 by rpki-client