$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: njvAli5T2/rmCXzapKvxuO5N2+1dOGFhhymYAWdThuc= Subject key identifier: DA:F4:CE:21:F8:2F:CA:FB:6F:DF:85:89:54:E8:2A:01:EB:67:FC:65 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 27D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 27C7 Signing time: Thu 12 Jun 2025 15:36:41 +0000 Manifest this update: Thu 12 Jun 2025 15:36:40 +0000 Manifest next update: Thu 19 Jun 2025 15:36:40 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: 375wkLL10X60yK9MsP+DJHk4TMlr5/wHmQRwCjZKKz8=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10197 (0x27d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Jun 12 15:36:40 2025 GMT Not After : Jun 19 15:36:40 2025 GMT Subject: CN=684af409-b231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:fd:4b:fc:6b:17:3d:a5:72:ee:4c:2b:a7: a2:5f:c3:3f:12:12:fb:89:27:b1:bb:8c:5b:9e:a7: 0e:f4:5b:26:d8:3e:cf:8b:b9:04:86:e0:f7:04:5a: 64:0a:83:62:00:7b:79:e9:7d:4a:9f:6f:f2:ae:3a: 03:10:12:2f:c8:57:a5:49:bd:ef:4c:3b:4f:38:85: fa:8f:13:af:27:84:cf:84:21:9a:23:4a:0e:5d:1c: fc:0d:5c:da:86:59:10:2b:bf:e8:be:5b:f8:e6:57: 23:b5:c8:e2:01:a4:fd:74:47:fb:24:57:13:1a:68: 24:fd:f5:32:a1:37:9c:04:3b:f5:e7:75:00:a5:21: 41:a0:95:2f:ec:dd:f2:55:8c:f0:13:d6:7e:13:f2: 72:48:0d:3e:5f:19:61:b6:05:92:1b:fa:1e:6d:d1: 90:2c:77:6b:60:72:52:a5:b2:6b:d3:3e:e8:5a:06: a1:ff:62:66:91:62:ff:10:28:81:eb:89:96:f2:3f: d9:19:ae:e6:a2:08:ef:13:a8:1f:ac:65:a1:4d:00: 5e:6b:f6:0e:ef:a0:c7:39:82:41:9e:ec:cf:f4:e1: 95:6c:71:59:e8:50:34:eb:e3:8a:57:49:10:70:d3: ac:fb:b1:3c:3a:7e:27:c4:cb:d6:ba:14:b2:9b:16: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F4:CE:21:F8:2F:CA:FB:6F:DF:85:89:54:E8:2A:01:EB:67:FC:65 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a8:94:8d:45:0d:06:ef:1b:3d:bf:29:03:64:b2:b7:a1:39: 36:83:52:e7:30:c1:ea:56:0a:0f:d7:ad:05:7e:75:26:ea:e8: fd:68:e5:a9:85:af:66:b2:08:fe:f7:a4:81:65:b9:30:fc:f7: 42:dc:f7:9a:61:24:b4:f6:cb:4d:af:d3:24:0e:f0:9d:aa:c0: f4:cb:bb:eb:e5:1e:28:b7:93:59:e1:ee:27:12:85:1e:90:50: 9a:36:be:a1:0c:94:b2:d9:81:bd:a8:f1:e2:c6:58:7b:4e:d9: dd:3f:ec:e8:7a:38:4a:5c:58:66:da:81:d2:5d:5a:9d:14:90: 61:41:86:e3:d9:f4:eb:25:b8:3d:ec:03:46:ed:b6:3a:fe:04: 0a:d1:b5:b8:1d:dd:f8:61:b5:f9:9a:a9:68:2b:bd:25:4c:c6: fd:60:44:84:3a:62:ae:eb:52:b4:7a:df:6f:4d:a2:27:4f:73: 70:2c:dd:cb:cb:e1:76:78:39:67:b0:b0:56:1c:47:cc:13:1d: 8a:30:3d:25:88:46:9e:bf:5e:12:cb:77:8b:56:fe:67:cc:03: 8a:ec:5f:45:b3:28:e2:0c:23:c3:24:02:89:bc:05:45:33:3c: 72:72:50:58:ee:60:38:ca:72:ff:e9:4b:c4:12:f7:60:c6:c2: 95:34:3e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUwNjEyMTUzNjQwWhcNMjUwNjE5MTUzNjQwWjAYMRYwFAYD VQQDEw02ODRhZjQwOS1iMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvT9S/xrFz2lcu5MK6eiX8M/EhL7iSexu4xbnqcO9Fsm2D7Pi7kEhuD3BFpk CoNiAHt56X1Kn2/yrjoDEBIvyFelSb3vTDtPOIX6jxOvJ4TPhCGaI0oOXRz8DVza hlkQK7/ovlv45lcjtcjiAaT9dEf7JFcTGmgk/fUyoTecBDv153UApSFBoJUv7N3y VYzwE9Z+E/JySA0+XxlhtgWSG/oebdGQLHdrYHJSpbJr0z7oWgah/2JmkWL/ECiB 64mW8j/ZGa7mogjvE6gfrGWhTQBea/YO76DHOYJBnuzP9OGVbHFZ6FA06+OKV0kQ cNOs+7E8On4nxMvWuhSymxayowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNr0ziH4 L8r7b9+FiVToKgHrZ/xlMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5qJSNRQ0G7xs9vykDZLK3oTk2g1LnMMHqVgoP160FfnUm6uj9aOWp ha9msgj+96SBZbkw/PdC3PeaYSS09stNr9MkDvCdqsD0y7vr5R4ot5NZ4e4nEoUe kFCaNr6hDJSy2YG9qPHixlh7TtndP+zoejhKXFhm2oHSXVqdFJBhQYbj2fTrJbg9 7ANG7bY6/gQK0bW4Hd34YbX5mqloK70lTMb9YESEOmKu61K0et9vTaInT3NwLN3L y+F2eDlnsLBWHEfMEx2KMD0liEaev14Sy3eLVv5nzAOK7F9FsyjiDCPDJAKJvAVF MzxyclBY7mA4ynL/6UvEEvdgxsKVND5L -----END CERTIFICATE-----Generated at Fri Jun 13 16:14:01 2025 by rpki-client