$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: xjtesmkRGRD3r8y11ruulPlfk8QucQncGIjQcLGNTJI= Subject key identifier: 9D:54:2C:29:10:B1:41:A5:09:4B:F1:7E:E8:44:53:04:B3:8C:C8:8B Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 09BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 09B8 Signing time: Fri 30 May 2025 20:12:07 +0000 Manifest this update: Fri 30 May 2025 20:12:07 +0000 Manifest next update: Fri 06 Jun 2025 20:12:07 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: VxBO+GaUWHK+bi5Ts9NX1CwfxV6r+o1oQ/wxZGw84yw=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2495 (0x9bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: May 30 20:12:07 2025 GMT Not After : Jun 6 20:12:07 2025 GMT Subject: CN=683a1117-5806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:48:d2:33:27:4d:08:7b:96:0d:89:c1:99: 58:8f:a6:83:2e:0f:9e:ee:bb:93:70:38:a1:ed:e8: 92:ca:23:96:67:b5:09:94:87:58:1b:7a:42:97:2f: 79:07:43:e1:67:b9:48:36:9b:dd:e5:35:a0:fa:2f: 0f:32:eb:c4:38:28:a8:fd:63:a0:7a:f5:d5:d4:fc: 0a:89:81:72:0c:cf:d7:f8:b1:81:4b:d8:3c:79:1f: 03:1c:fa:8d:e4:94:a0:b6:fe:be:51:c2:f9:b8:35: 80:23:63:91:12:db:33:9b:00:d4:a6:ac:66:20:aa: b9:60:86:f6:f0:6c:67:77:e2:40:7f:a6:e5:fa:36: fa:c1:33:af:81:3c:bf:d3:e2:96:c7:c1:c7:71:a6: 84:e9:1b:dd:76:fa:23:d1:83:ef:65:6e:dc:d3:d9: 28:c5:7c:1e:eb:f3:03:eb:3b:22:9f:fb:79:17:ff: cd:8a:21:01:f1:f8:62:77:e9:fe:ed:19:ae:3e:25: 4c:27:a1:55:49:ff:be:c1:39:f6:00:3c:a6:d3:22: 14:f0:e7:af:38:9c:8c:88:84:e5:3a:7c:75:ac:a3: 60:b3:e4:3b:6e:5d:28:2a:d0:23:5c:e2:eb:b0:dd: e1:94:cf:1f:cc:2e:41:d0:ce:b7:25:93:44:bd:29: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:54:2C:29:10:B1:41:A5:09:4B:F1:7E:E8:44:53:04:B3:8C:C8:8B X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fe:8d:a3:a1:3f:d1:1b:5a:18:aa:62:77:f2:40:bc:74:29: 96:a1:af:99:9f:f8:59:51:d8:cb:b7:b6:39:2d:b0:e6:80:4d: 99:13:ef:4f:d8:4a:7a:2a:3e:ff:1d:e6:18:08:a2:79:4e:e5: 38:a1:23:20:6d:be:8e:3d:eb:91:f8:02:bd:49:ab:0d:d6:f7: ca:93:f3:c1:3c:0b:b0:71:3a:4f:aa:11:42:ad:32:7b:c6:f6: 36:4c:56:71:cc:03:f7:c3:dc:0d:0b:ed:75:3f:99:82:46:9e: b0:76:8b:f6:0c:9e:85:0f:f8:b4:a1:47:77:e6:8f:4f:dc:37: 77:79:a3:9a:58:8d:d4:c1:7e:a9:d2:f3:b6:27:8d:2d:7e:12: a4:ed:60:f6:72:6e:06:7c:c9:26:34:24:3b:3f:a5:95:bc:d5: fc:b2:1e:12:fb:64:da:40:c2:a0:2b:50:63:ea:7f:76:83:38: e1:ff:83:3e:fb:0c:ed:62:dd:b7:71:13:ce:3d:39:11:07:d6: cc:db:e2:b1:50:68:12:74:e8:45:8b:70:96:92:39:a0:ca:2a: b5:c3:7a:e4:d0:f5:a2:f4:a7:75:14:68:f4:d4:40:d7:f4:23: 87:ca:9b:0a:d9:28:37:eb:a4:32:d2:ed:28:91:c0:64:45:f3: e6:bf:b2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUwNTMwMjAxMjA3WhcNMjUwNjA2MjAxMjA3WjAYMRYwFAYD VQQDEw02ODNhMTExNy01ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9BI0jMnTQh7lg2JwZlYj6aDLg+e7ruTcDih7eiSyiOWZ7UJlIdYG3pCly95 B0PhZ7lINpvd5TWg+i8PMuvEOCio/WOgevXV1PwKiYFyDM/X+LGBS9g8eR8DHPqN 5JSgtv6+UcL5uDWAI2OREtszmwDUpqxmIKq5YIb28Gxnd+JAf6bl+jb6wTOvgTy/ 0+KWx8HHcaaE6Rvddvoj0YPvZW7c09koxXwe6/MD6zsin/t5F//NiiEB8fhid+n+ 7RmuPiVMJ6FVSf++wTn2ADym0yIU8OevOJyMiITlOnx1rKNgs+Q7bl0oKtAjXOLr sN3hlM8fzC5B0M63JZNEvSnagQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1ULCkQ sUGlCUvxfuhEUwSzjMiLMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/o2joT/RG1oYqmJ38kC8dCmWoa+Zn/hZUdjLt7Y5LbDmgE2ZE+9P 2Ep6Kj7/HeYYCKJ5TuU4oSMgbb6OPeuR+AK9SasN1vfKk/PBPAuwcTpPqhFCrTJ7 xvY2TFZxzAP3w9wNC+11P5mCRp6wdov2DJ6FD/i0oUd35o9P3Dd3eaOaWI3UwX6p 0vO2J40tfhKk7WD2cm4GfMkmNCQ7P6WVvNX8sh4S+2TaQMKgK1Bj6n92gzjh/4M+ +wztYt23cRPOPTkRB9bM2+KxUGgSdOhFi3CWkjmgyiq1w3rk0PWi9Kd1FGj01EDX 9COHypsK2Sg366Qy0u0okcBkRfPmv7KH -----END CERTIFICATE-----Generated at Sat May 31 16:01:55 2025 by rpki-client