$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: ngA61uA3rd0DS/rmtPg/Ec9odUpBkpg4QmUBKRPiwrk= Subject key identifier: 56:51:57:6D:32:2A:7F:0A:92:D4:B2:E0:04:3F:85:18:E6:44:1E:95 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 0111 Signing time: Sat 31 May 2025 04:34:30 +0000 Manifest this update: Sat 31 May 2025 04:34:29 +0000 Manifest next update: Sat 07 Jun 2025 04:34:29 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: j4VTUfAH3XOCc1Xd9UMztb9u+2H5WvN+VOGJqHalmyk=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: May 31 04:34:29 2025 GMT Not After : Jun 7 04:34:29 2025 GMT Subject: CN=683a86d5-62e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:fe:d3:58:4c:ff:33:b6:2f:17:ec:b9:a9: 7c:bf:fe:78:e7:3b:6e:f5:45:2c:e3:66:4c:52:99: a5:e1:89:7b:6f:f9:07:75:7f:17:62:40:e4:9c:bd: e0:59:a0:9f:38:22:e5:8f:1f:08:bf:0e:5b:b6:dd: c9:b4:9e:66:33:d7:78:7d:63:9a:c9:48:78:7e:0e: 07:dc:6d:59:cb:08:40:4a:db:f6:52:7b:b8:ec:58: 53:ee:00:08:c3:8e:36:68:d2:f1:72:bc:6e:af:cd: d6:a6:66:f7:e8:44:e7:b3:ca:56:44:d7:59:79:c4: 1d:9a:52:68:76:39:7a:27:ad:67:3f:3f:b8:f0:22: c0:bb:c7:52:4d:66:30:84:53:18:fb:ad:09:77:07: f7:00:de:74:6a:de:e0:00:03:30:f1:67:38:46:73: e4:54:e4:37:89:2e:6c:ba:a3:d7:16:c0:dc:75:5b: 6b:f1:12:76:23:4a:2b:07:98:96:44:1f:01:ff:07: dd:77:9a:b4:a6:ef:19:cc:d3:06:ad:ba:5a:d1:98: db:10:b1:2d:6e:f6:b9:d4:e2:33:e3:99:f1:47:28: aa:c6:30:5c:e8:e0:ea:9a:99:db:a2:fc:34:46:3e: 34:a1:63:2c:d6:12:af:74:9a:da:9e:9b:b4:08:b8: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:51:57:6D:32:2A:7F:0A:92:D4:B2:E0:04:3F:85:18:E6:44:1E:95 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:74:bf:2e:97:6c:d1:58:98:e1:c4:0e:ea:25:fd:5e:10:3d: 83:ea:d5:4a:38:d0:35:c4:c3:93:66:a7:81:e9:58:c9:7e:ec: 77:f8:7a:42:da:99:cf:27:58:fb:ed:65:e1:54:c4:21:ab:dd: d6:35:a3:ec:05:d5:22:ca:7b:9f:08:c0:16:b2:9a:64:10:c6: c2:db:fa:c1:36:c5:2b:7f:c4:6b:5d:2b:82:7c:2b:18:86:df: 00:f7:9f:4b:47:3b:69:e8:d0:a1:02:d2:bf:b8:6b:cc:ee:87: f3:32:a6:c2:2e:fa:91:59:58:35:f7:2e:94:d4:1e:e8:20:dd: ba:6d:45:9c:0b:d5:23:1a:f7:80:a6:96:1c:d7:c6:97:e8:6b: ab:3f:9a:5a:47:96:ff:56:bb:c2:27:4d:4a:16:32:6d:35:ab: 88:c2:ea:f2:a3:6f:fd:34:0f:4c:f2:54:56:2c:71:17:81:dc: e6:2b:ed:a3:55:a5:eb:48:ff:ff:e8:0a:82:5a:40:f1:a2:8a: 90:02:ca:28:dc:01:98:d1:45:7a:6a:fd:7d:9a:d2:98:b5:17: 7e:07:dd:a8:18:8a:3d:3e:fd:3e:ac:1b:1e:84:08:b5:f5:d2: f5:e6:53:86:6b:ef:af:f8:28:37:5e:1a:32:3f:72:d0:00:ad: 60:ff:da:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUwNTMxMDQzNDI5WhcNMjUwNjA3MDQzNDI5WjAYMRYwFAYD VQQDEw02ODNhODZkNS02MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfj+01hM/zO2Lxfsual8v/545ztu9UUs42ZMUpml4Yl7b/kHdX8XYkDknL3g WaCfOCLljx8Ivw5btt3JtJ5mM9d4fWOayUh4fg4H3G1ZywhAStv2Unu47FhT7gAI w442aNLxcrxur83Wpmb36ETns8pWRNdZecQdmlJodjl6J61nPz+48CLAu8dSTWYw hFMY+60Jdwf3AN50at7gAAMw8Wc4RnPkVOQ3iS5suqPXFsDcdVtr8RJ2I0orB5iW RB8B/wfdd5q0pu8ZzNMGrbpa0ZjbELEtbva51OIz45nxRyiqxjBc6ODqmpnbovw0 Rj40oWMs1hKvdJranpu0CLhGmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZRV20y Kn8KktSy4AQ/hRjmRB6VMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8dL8ul2zRWJjhxA7qJf1eED2D6tVKONA1xMOTZqeB6VjJfux3+HpC 2pnPJ1j77WXhVMQhq93WNaPsBdUiynufCMAWsppkEMbC2/rBNsUrf8RrXSuCfCsY ht8A959LRztp6NChAtK/uGvM7ofzMqbCLvqRWVg19y6U1B7oIN26bUWcC9UjGveA ppYc18aX6GurP5paR5b/VrvCJ01KFjJtNauIwuryo2/9NA9M8lRWLHEXgdzmK+2j VaXrSP//6AqCWkDxooqQAsoo3AGY0UV6av19mtKYtRd+B92oGIo9Pv0+rBsehAi1 9dL15lOGa++v+Cg3XhoyP3LQAK1g/9q9 -----END CERTIFICATE-----Generated at Sat May 31 17:45:11 2025 by rpki-client