$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: 520Ae3AQwgQyFWLZBVsQF16yyzcADTv1YkIfLjv3OdI= Subject key identifier: 77:55:CD:62:1B:1E:6D:1D:42:08:E7:5B:FD:F1:54:93:DB:BE:95:07 Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 22FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 22EB Signing time: Sat 31 May 2025 15:49:06 +0000 Manifest this update: Sat 31 May 2025 15:49:06 +0000 Manifest next update: Sat 07 Jun 2025 15:49:06 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: vlfknhsw4CD4ipuG+MqZ1L7FY9vO7rj27/vnwLvN4Yw=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8954 (0x22fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: May 31 15:49:06 2025 GMT Not After : Jun 7 15:49:06 2025 GMT Subject: CN=683b24f2-29d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:61:db:2d:c3:d1:80:33:c3:af:75:9e:64:a4: b7:45:60:45:56:a1:b9:49:56:8b:f9:db:5e:8d:28: 12:4e:7b:29:b0:52:39:57:d6:0b:10:b1:2c:17:46: 22:aa:2b:de:74:3f:93:8b:57:ea:e5:fb:75:3f:f9: 21:e1:e0:74:57:e7:1c:36:e6:f7:fd:ae:30:56:32: 80:c3:23:2d:a9:c6:9e:48:4e:ef:32:4d:a5:78:48: f8:39:13:7e:9d:09:7a:fe:7b:27:eb:a8:84:8a:9e: 5e:f3:76:40:9c:ff:d7:12:07:0e:29:bb:e9:1d:ee: 74:30:2d:a6:ad:d2:30:cf:5f:e4:4c:8b:73:6a:4c: dd:d9:af:e0:d9:46:f1:63:b8:82:51:e1:c3:fa:02: c1:85:ef:6f:0d:1e:c9:bc:16:97:2c:8d:b9:c2:16: 55:97:03:e4:3f:31:3d:1a:13:75:33:93:d6:e4:5a: b9:b2:07:a6:88:be:dd:41:6e:45:d5:2e:04:6b:16: 4b:2c:9b:ea:87:2a:3d:07:6f:fa:63:b1:cd:fb:bd: 7e:a2:81:e9:bd:1a:95:b6:54:62:57:78:ea:8c:00: 4d:38:6c:22:62:8a:ca:01:e3:c1:e0:8e:d2:e3:53: 7c:a0:41:bc:3b:50:9e:1b:12:41:f6:fd:bf:50:d3: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:55:CD:62:1B:1E:6D:1D:42:08:E7:5B:FD:F1:54:93:DB:BE:95:07 X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8c:0d:6e:60:60:58:9d:08:6e:05:f4:58:f2:79:52:b3:5c: b5:95:d7:59:9c:9e:a4:b9:36:c0:7e:b0:c0:07:6f:98:68:1b: b4:9c:86:e9:8d:3b:67:f1:e4:b7:a5:9f:0d:09:3d:e2:b8:d0: 6f:3c:21:e4:05:11:78:68:6e:d5:28:b7:cd:ef:ee:2e:55:bb: 76:1f:88:d1:77:57:35:3f:7f:c5:24:74:0d:53:a0:12:22:83: 9b:53:7a:69:47:24:1a:31:d5:a3:d2:61:cf:fc:db:54:42:a7: a9:f5:36:51:b4:92:14:4e:71:1b:34:d8:a1:80:57:1e:9d:9a: f7:2d:6a:86:af:80:7d:af:e8:85:e2:99:56:14:61:67:71:91: 48:8d:38:1b:fb:e9:f6:e2:54:7b:9d:76:73:5c:57:3b:c9:e4: 6f:b3:9f:4a:0b:f7:cc:a2:b7:a7:30:79:53:7d:25:0d:c7:97: 7f:c9:8d:7f:32:bb:28:d4:37:b4:25:70:5e:37:37:db:b3:eb: 90:c0:49:a5:6a:30:1b:cd:a9:b5:cf:7c:22:a2:e7:64:c1:75: 6d:f7:e1:3a:3d:d1:a6:f8:3f:09:be:89:d8:35:56:82:50:21: da:c0:6f:20:2a:c5:49:24:13:84:97:44:af:0c:e5:9a:2b:0a: 09:83:e1:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUwNTMxMTU0OTA2WhcNMjUwNjA3MTU0OTA2WjAYMRYwFAYD VQQDEw02ODNiMjRmMi0yOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/WHbLcPRgDPDr3WeZKS3RWBFVqG5SVaL+dtejSgSTnspsFI5V9YLELEsF0Yi qivedD+Ti1fq5ft1P/kh4eB0V+ccNub3/a4wVjKAwyMtqcaeSE7vMk2leEj4ORN+ nQl6/nsn66iEip5e83ZAnP/XEgcOKbvpHe50MC2mrdIwz1/kTItzakzd2a/g2Ubx Y7iCUeHD+gLBhe9vDR7JvBaXLI25whZVlwPkPzE9GhN1M5PW5Fq5sgemiL7dQW5F 1S4EaxZLLJvqhyo9B2/6Y7HN+71+ooHpvRqVtlRiV3jqjABNOGwiYorKAePB4I7S 41N8oEG8O1CeGxJB9v2/UNPltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdVzWIb Hm0dQgjnW/3xVJPbvpUHMB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsjA1uYGBYnQhuBfRY8nlSs1y1lddZnJ6kuTbAfrDAB2+YaBu0nIbp jTtn8eS3pZ8NCT3iuNBvPCHkBRF4aG7VKLfN7+4uVbt2H4jRd1c1P3/FJHQNU6AS IoObU3ppRyQaMdWj0mHP/NtUQqep9TZRtJIUTnEbNNihgFcenZr3LWqGr4B9r+iF 4plWFGFncZFIjTgb++n24lR7nXZzXFc7yeRvs59KC/fMorenMHlTfSUNx5d/yY1/ Mrso1De0JXBeNzfbs+uQwEmlajAbzam1z3wioudkwXVt9+E6PdGm+D8JvonYNVaC UCHawG8gKsVJJBOEl0SvDOWaKwoJg+E/ -----END CERTIFICATE-----Generated at Sat May 31 17:45:03 2025 by rpki-client