$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: SBJO1XOSwtakeS8QcBH/pvg1ETUHxegeEG00ZQBg3co= Subject key identifier: 2D:75:90:99:9F:73:75:47:FB:78:E1:6E:4F:EF:D9:0C:3C:26:0C:66 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: 7C Signing time: Sun 01 Jun 2025 06:29:34 +0000 Manifest this update: Sun 01 Jun 2025 06:29:34 +0000 Manifest next update: Sun 08 Jun 2025 06:29:34 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: 2ndMH6bkqyNfJGOL/pBfPttFPQ/Ae9QAX+nvJPhpPK4=) 2: 1976FC0CFA6C11EF99638E1FC4F9AE02.roa (hash: te5PzAkdFI+eQ5CMJL5Z4aIa9hh81p7zUj8QOmt+SYo=) 3: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: WagnJcg5f8efkpfWr+mqkirfnMGP4KyRA+7+p8TOFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Jun 1 06:29:34 2025 GMT Not After : Jun 8 06:29:34 2025 GMT Subject: CN=683bf34e-2e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:ee:31:6c:6f:0b:23:6b:ac:c0:05:97:d0: c9:43:26:36:dd:3b:93:04:0d:43:b2:8b:83:67:8b: a1:31:d1:ff:a4:79:03:5b:86:02:06:67:92:e4:5b: 8c:c8:10:77:6b:e0:2f:db:53:0b:57:d7:c5:f5:3d: e0:1f:d3:64:1b:e6:d2:eb:cf:ec:d0:0b:48:98:3c: e3:6b:59:15:0f:0e:e9:ea:29:87:27:2c:dd:3b:d3: 30:67:4e:ee:16:8f:2c:58:8d:d4:c8:4a:64:da:cb: b2:7b:57:39:1b:81:82:79:d9:df:73:2c:10:25:e1: 69:90:61:6d:ba:75:22:cb:10:ae:79:e6:b0:9d:64: 00:98:07:eb:5e:c9:03:b8:19:bc:88:54:4b:d1:6d: b2:3d:6e:ae:ed:7d:87:e4:e9:f0:04:4e:42:89:fd: ff:50:9e:d9:19:9f:50:8f:cc:69:4b:39:e6:48:79: 73:57:71:05:fe:70:4b:ed:58:ee:b5:d4:2b:54:66: c0:a0:c4:45:06:3d:de:da:fc:e5:f8:27:e8:25:a2: 32:42:70:1c:5b:88:07:35:ee:62:eb:5f:68:cb:4e: 41:d3:45:37:e8:09:1f:d0:a4:a3:cf:49:3a:ee:38: 8f:cc:93:b8:d9:a9:cd:8d:0b:2f:8f:f2:3b:56:07: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:90:99:9F:73:75:47:FB:78:E1:6E:4F:EF:D9:0C:3C:26:0C:66 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ad:14:a6:4f:e2:6b:a3:41:93:38:b5:6c:2f:7a:02:64:4b: d4:6d:97:0c:03:e8:c3:65:05:c6:34:82:0b:83:d9:93:24:9d: f7:98:e3:2a:24:49:93:9d:59:ce:8f:3f:fe:7a:c0:8d:6f:a4: 20:b9:88:85:f5:a2:18:7e:e5:a6:3b:86:2c:8d:cd:c0:ee:63: 0b:3c:5f:3a:3e:b8:d0:4f:88:f1:43:c7:fc:c3:eb:8c:65:14: 1f:36:df:37:2d:42:f9:49:c1:49:26:52:e2:fc:d9:1b:c7:c7: ce:74:27:d6:9d:ad:16:fd:a0:78:4e:24:c9:48:55:b1:04:73: 75:56:d9:9a:20:7e:47:d0:21:4a:2e:30:7a:a1:e9:9d:2d:9e: 21:32:30:f6:a5:1e:23:f3:fb:bb:ea:d6:ca:a7:d3:90:b6:a5: 13:14:dd:6a:81:28:ce:da:1f:f1:de:4f:43:a0:50:c3:98:2e: 88:2b:40:1b:9a:9a:de:71:5c:83:62:82:1c:86:4c:1d:80:03: ac:c0:db:71:79:ba:4b:f7:33:67:46:76:89:a3:e5:22:e8:e3: bf:f3:a3:c8:33:4f:b1:eb:e1:ba:15:ee:c4:d2:43:b4:46:96: 7f:08:5f:9c:d8:58:ca:a0:4a:88:22:be:af:43:ba:e0:a0:ab: af:1c:b9:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoRkQ5RDdGNjYwRjNBMTMwQ0E0OEJFQkJBNjZFMTYyQkQz MDM0RTM4RDAeFw0yNTA2MDEwNjI5MzRaFw0yNTA2MDgwNjI5MzRaMBgxFjAUBgNV BAMTDTY4M2JmMzRlLTJlMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Eu4xbG8LI2uswAWX0MlDJjbdO5MEDUOyi4Nni6Ex0f+keQNbhgIGZ5LkW4zI EHdr4C/bUwtX18X1PeAf02Qb5tLrz+zQC0iYPONrWRUPDunqKYcnLN070zBnTu4W jyxYjdTISmTay7J7VzkbgYJ52d9zLBAl4WmQYW26dSLLEK555rCdZACYB+teyQO4 GbyIVEvRbbI9bq7tfYfk6fAETkKJ/f9QntkZn1CPzGlLOeZIeXNXcQX+cEvtWO61 1CtUZsCgxEUGPd7a/OX4J+glojJCcBxbiAc17mLrX2jLTkHTRTfoCR/QpKPPSTru OI/Mk7jZqc2NCy+P8jtWB6Z3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULXWQmZ9z dUf7eOFuT+/ZDDwmDGYwHwYDVR0jBBgwFoAU/Z1/Zg86Ewyki+u6ZuFivTA0440w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzRFRkQxNUI2OEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1oxX1pnODZFd3lraS11Nlp1Rml2VEEwNDQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzRFRkQxNUI2OEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5 a2ktdTZadUZpdlRBMDQ0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqtFKZP4mujQZM4tWwvegJkS9RtlwwD6MNlBcY0gguD2ZMknfeY4yok SZOdWc6PP/56wI1vpCC5iIX1ohh+5aY7hiyNzcDuYws8Xzo+uNBPiPFDx/zD64xl FB823zctQvlJwUkmUuL82RvHx850J9adrRb9oHhOJMlIVbEEc3VW2ZogfkfQIUou MHqh6Z0tniEyMPalHiPz+7vq1sqn05C2pRMU3WqBKM7aH/HeT0OgUMOYLogrQBua mt5xXINighyGTB2AA6zA23F5ukv3M2dGdomj5SLo47/zo8gzT7Hr4boV7sTSQ7RG ln8IX5zYWMqgSogivq9DuuCgq68cuZE= -----END CERTIFICATE-----Generated at Mon Jun 2 21:03:18 2025 by rpki-client