$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: LyiXCFN/JgQBSOKWQvYTWWz/FPgTQbVZo+ugQfuYIqg= Subject key identifier: F0:4A:BC:EC:BA:2E:82:FE:9F:3E:89:DD:04:50:D8:8B:40:3B:75:D1 Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0BE1 Signing time: Thu 12 Jun 2025 18:37:43 +0000 Manifest this update: Thu 12 Jun 2025 18:37:43 +0000 Manifest next update: Thu 19 Jun 2025 18:37:43 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: BpWlElZ5AEr0SaPy60EidifDfj5cclwpXAt6oJL4bTw=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Jun 12 18:37:43 2025 GMT Not After : Jun 19 18:37:43 2025 GMT Subject: CN=684b1e77-e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:de:bb:a0:01:58:24:13:d0:f0:3f:27:d2: a4:77:bc:96:5b:f5:87:d8:b4:61:7d:ab:d1:7e:fe: e0:b8:46:1d:ff:68:44:5c:4b:65:73:3a:12:46:78: e7:c2:00:05:1b:90:b8:2e:45:b4:a3:94:1a:4c:73: 63:54:00:b6:9b:24:07:a9:af:0b:43:da:60:ae:78: 15:fe:b3:7a:5b:c5:61:e6:48:f4:2e:c5:27:9c:57: fd:8d:66:8f:23:89:48:b3:1b:bf:55:03:87:ea:43: a9:22:7c:bb:36:72:64:61:b1:48:e8:e0:99:d3:59: 18:35:35:66:62:93:e3:25:34:61:90:87:79:02:ad: 4d:b1:0b:26:64:94:7c:fa:10:6b:08:1e:87:f8:18: 51:ed:93:10:e8:aa:db:d4:5e:26:d7:87:61:d1:06: 49:a7:0c:0f:90:7c:ce:ce:b6:2f:10:3a:3b:99:12: 0e:76:b1:86:ec:d1:4d:4f:4f:0d:51:bb:ed:c5:2a: 9b:34:4b:99:b1:79:b5:7a:a8:2c:52:05:48:b0:b5: 84:56:c3:b2:f6:e3:69:2e:77:cd:68:80:4e:0c:f4: 77:48:79:86:fa:6d:14:32:2a:94:91:c1:1c:a2:2f: 22:6d:b0:32:06:cb:2f:75:f5:5b:fb:ba:a2:d7:fc: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4A:BC:EC:BA:2E:82:FE:9F:3E:89:DD:04:50:D8:8B:40:3B:75:D1 X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e2:21:87:07:c7:3f:52:12:09:74:b8:98:78:c2:1c:cf:8d: 08:ab:83:82:00:ae:27:22:49:19:2a:16:05:c8:55:7f:de:87: da:b7:d1:fc:89:b3:a2:0e:51:b2:2b:79:24:ee:7f:81:ab:52: fd:15:cb:3f:f1:f0:23:b4:fb:e2:0a:12:68:b7:28:ab:79:c1: 43:67:35:da:fc:bd:08:cb:31:15:d4:d5:6c:2a:e5:59:c7:94: 39:ee:ff:66:75:0e:dc:ef:fd:1d:d0:bb:2a:72:5d:49:ce:82: 56:77:7f:94:6a:24:16:e9:7f:89:8f:d4:98:79:99:aa:0d:3e: 2b:61:03:02:b3:de:5c:61:4b:ee:91:13:a1:d5:3a:16:d4:4f: e9:41:23:ff:68:4c:21:e1:1a:80:61:22:4f:fd:db:9e:4b:d8: d7:c4:5f:3d:0e:c0:ac:fa:e7:8c:f4:7a:b6:73:fc:a6:aa:bf: 66:23:11:ef:0f:bf:84:81:f7:6b:b9:44:ab:3c:5a:41:b0:81: db:6e:3e:f3:fd:12:44:20:4b:2a:53:e4:ab:68:e1:5a:65:b3: 55:c6:1e:6b:8b:43:4e:a0:ed:6c:51:aa:a9:35:3d:11:43:01: 37:37:68:c4:7f:27:ef:d6:26:60:e8:f1:38:b7:2d:58:9b:ad: b8:c2:15:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjUwNjEyMTgzNzQzWhcNMjUwNjE5MTgzNzQzWjAYMRYwFAYD VQQDEw02ODRiMWU3Ny1lNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHHeu6ABWCQT0PA/J9Kkd7yWW/WH2LRhfavRfv7guEYd/2hEXEtlczoSRnjn wgAFG5C4LkW0o5QaTHNjVAC2myQHqa8LQ9pgrngV/rN6W8Vh5kj0LsUnnFf9jWaP I4lIsxu/VQOH6kOpIny7NnJkYbFI6OCZ01kYNTVmYpPjJTRhkId5Aq1NsQsmZJR8 +hBrCB6H+BhR7ZMQ6Krb1F4m14dh0QZJpwwPkHzOzrYvEDo7mRIOdrGG7NFNT08N UbvtxSqbNEuZsXm1eqgsUgVIsLWEVsOy9uNpLnfNaIBODPR3SHmG+m0UMiqUkcEc oi8ibbAyBssvdfVb+7qi1/wtpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBKvOy6 LoL+nz6J3QRQ2ItAO3XRMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB4iGHB8c/UhIJdLiYeMIcz40Iq4OCAK4nIkkZKhYFyFV/3ofat9H8 ibOiDlGyK3kk7n+Bq1L9Fcs/8fAjtPviChJotyirecFDZzXa/L0IyzEV1NVsKuVZ x5Q57v9mdQ7c7/0d0Lsqcl1JzoJWd3+UaiQW6X+Jj9SYeZmqDT4rYQMCs95cYUvu kROh1ToW1E/pQSP/aEwh4RqAYSJP/dueS9jXxF89DsCs+ueM9Hq2c/ymqr9mIxHv D7+EgfdruUSrPFpBsIHbbj7z/RJEIEsqU+SraOFaZbNVxh5ri0NOoO1sUaqpNT0R QwE3N2jEfyfv1iZg6PE4ty1Ym624whXy -----END CERTIFICATE-----Generated at Fri Jun 13 00:42:20 2025 by rpki-client