$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: Ij6EQe3tihsamE0x245IMoKz8yU/dSz0ek67T9Qg2hs= Subject key identifier: B7:11:9D:F3:02:F2:52:90:42:9D:16:93:B2:18:87:9B:E2:13:12:7B Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0BE2 Signing time: Sat 14 Jun 2025 18:39:55 +0000 Manifest this update: Sat 14 Jun 2025 18:39:54 +0000 Manifest next update: Sat 21 Jun 2025 18:39:54 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: WJRvXDlXw9rmzqy1JF8jjruJZ+eM/FI/iHnKOuXVUXc=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Jun 14 18:39:54 2025 GMT Not After : Jun 21 18:39:54 2025 GMT Subject: CN=684dc1fb-834c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:3f:c1:f2:76:ed:0c:0d:4e:79:a3:92:0a: 81:7c:31:82:48:2e:de:ca:35:bd:24:23:a1:4b:ae: b4:ac:f1:d8:2e:fc:84:79:1b:01:37:c3:bf:ea:c1: 18:22:8e:93:6b:e0:27:cc:51:b0:5c:f2:dc:cf:2b: e1:af:94:db:d9:34:08:15:6e:86:a9:cc:fa:cf:32: d2:92:4f:28:14:d8:75:85:5a:8b:37:8a:eb:91:d8: 3a:15:12:be:9d:49:07:5d:3c:ed:ff:f3:3f:01:69: 7c:30:8f:96:1d:1b:0c:28:bb:08:65:ec:4c:18:dd: d9:dc:8d:12:ce:fa:9a:a2:5c:a7:5d:e8:3d:7d:e3: ed:42:df:16:b4:27:80:02:81:5a:85:ab:40:e0:4a: 1d:a6:b4:82:bc:8c:3c:df:8c:e8:ae:10:56:f9:ec: 9c:e6:1f:bd:85:92:f0:d3:a4:9a:c4:91:50:36:42: 0b:66:ed:30:6e:09:03:90:9c:69:dd:1d:e5:cc:2e: 58:0d:c3:9a:d5:28:32:7b:76:36:74:8d:ec:26:d6: a1:a5:79:74:be:72:19:d0:bb:03:51:ff:b6:4a:4e: 10:c0:ec:e7:4d:6c:13:ed:16:f3:9d:05:86:5f:82: 4b:fb:a8:ec:0d:de:18:09:14:2f:78:a7:bf:bd:7c: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:9D:F3:02:F2:52:90:42:9D:16:93:B2:18:87:9B:E2:13:12:7B X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:45:d9:b3:8d:51:aa:b0:ab:40:57:ca:a6:9a:e7:0a:59:dd: 5b:db:cd:52:6f:07:a3:a2:9c:5b:79:fb:88:2a:6a:d1:18:0d: ba:c8:ea:c3:a4:35:27:df:ed:db:df:7e:55:4c:59:52:50:79: 3d:db:ff:e1:17:23:3c:a5:fd:f4:28:d3:fa:e0:ad:88:5b:57: a1:3f:40:9a:21:92:bb:6e:23:67:e6:bc:bd:ec:f0:80:7c:d7: e6:7a:33:e4:43:3e:d5:fe:dd:31:21:18:58:39:9d:d9:bf:9c: cc:e7:ca:c7:81:db:72:9c:bf:95:0d:b5:c8:ee:64:da:1d:7a: c4:85:bf:68:d1:b2:a3:c7:05:af:bb:50:69:f2:f6:02:2c:93: 10:70:f5:9d:c7:ef:20:4b:7b:c8:c9:7d:dc:2f:ea:03:26:49: 9d:90:c0:48:58:63:29:0f:50:ed:79:f6:01:06:e1:0a:2d:b3: 23:f1:f4:39:81:8c:ad:01:d9:c2:72:c6:88:74:0d:0b:cf:14: 46:68:d6:5d:d2:77:6f:77:50:f1:4f:ea:f9:1b:2e:90:c2:8d: 86:5e:e3:b1:88:37:c0:8b:b8:bb:f1:5f:f8:76:66:56:49:09: 41:1e:8a:e8:c8:ef:67:98:34:8c:c4:90:14:b8:c4:0e:20:37: 4c:04:30:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjUwNjE0MTgzOTU0WhcNMjUwNjIxMTgzOTU0WjAYMRYwFAYD VQQDEw02ODRkYzFmYi04MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHg/wfJ27QwNTnmjkgqBfDGCSC7eyjW9JCOhS660rPHYLvyEeRsBN8O/6sEY Io6Ta+AnzFGwXPLczyvhr5Tb2TQIFW6Gqcz6zzLSkk8oFNh1hVqLN4rrkdg6FRK+ nUkHXTzt//M/AWl8MI+WHRsMKLsIZexMGN3Z3I0SzvqaolynXeg9fePtQt8WtCeA AoFahatA4EodprSCvIw834zorhBW+eyc5h+9hZLw06SaxJFQNkILZu0wbgkDkJxp 3R3lzC5YDcOa1Sgye3Y2dI3sJtahpXl0vnIZ0LsDUf+2Sk4QwOznTWwT7RbznQWG X4JL+6jsDd4YCRQveKe/vXwkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcRnfMC 8lKQQp0Wk7IYh5viExJ7MB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgRdmzjVGqsKtAV8qmmucKWd1b281SbwejopxbefuIKmrRGA26yOrD pDUn3+3b335VTFlSUHk92//hFyM8pf30KNP64K2IW1ehP0CaIZK7biNn5ry97PCA fNfmejPkQz7V/t0xIRhYOZ3Zv5zM58rHgdtynL+VDbXI7mTaHXrEhb9o0bKjxwWv u1Bp8vYCLJMQcPWdx+8gS3vIyX3cL+oDJkmdkMBIWGMpD1DtefYBBuEKLbMj8fQ5 gYytAdnCcsaIdA0LzxRGaNZd0ndvd1DxT+r5Gy6Qwo2GXuOxiDfAi7i78V/4dmZW SQlBHoroyO9nmDSMxJAUuMQOIDdMBDB1 -----END CERTIFICATE-----Generated at Sun Jun 15 00:05:32 2025 by rpki-client