$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft File: ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json) Hash identifier: AwptlD/qMlcic2uLL/z+70xcHkTMu+d+jqs1pIm9X6M= Subject key identifier: E8:1F:44:F6:E7:2F:12:71:A8:7D:99:47:83:87:A7:E1:56:BB:0C:39 Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80 Certificate issuer: /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580 Certificate serial: 3489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft Manifest number: 3489 Signing time: Sun 08 Jun 2025 14:40:21 +0000 Manifest this update: Sun 08 Jun 2025 14:40:21 +0000 Manifest next update: Sun 15 Jun 2025 14:40:21 +0000 Files and hashes: 1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: C0eXJGft4BG9OdHbMPDPQRoKT6IHbZCIiySmbjzRWsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 14:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13449 (0x3489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580 Validity Not Before: Jun 8 14:40:21 2025 GMT Not After : Jun 15 14:40:21 2025 GMT Subject: CN=6845a0d5-4ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:d4:28:21:01:96:27:06:fb:fb:51:f1:ea: 0a:a3:f8:42:f4:89:51:71:c3:45:de:1f:1d:48:1f: 5b:cb:95:be:6e:09:42:11:f0:90:ea:d6:80:a7:4b: b9:09:b4:d5:d8:ef:50:91:7e:cc:eb:2e:44:72:86: c7:be:01:b5:ae:37:90:20:65:d1:02:62:2c:88:4a: 72:2b:41:38:d7:4c:50:22:b8:0e:b2:ab:73:2d:c3: 72:7a:d0:d3:93:42:ba:de:6b:25:b7:b0:49:bf:c7: a3:0d:06:40:3e:61:29:06:ec:d0:36:15:ee:14:01: e5:6e:67:16:3c:4d:17:3d:3f:24:ac:51:27:98:a6: 43:7b:c4:a8:9e:d3:c7:a9:fa:7c:46:09:a1:5d:a4: 37:0f:78:20:da:e3:d9:f5:44:56:56:1c:8f:30:26: 64:f8:d2:98:e3:35:77:2c:1a:c4:e1:26:37:0a:b6: ad:15:87:40:43:20:15:36:c9:a1:a4:90:1f:4e:ba: 9b:45:3d:bc:a8:75:28:7c:7d:37:91:19:03:c8:b7: e6:a2:59:f1:eb:c5:c5:0f:be:d1:c8:0c:e1:ad:e8: 73:de:8f:a8:c1:52:2c:f4:00:c2:5d:ac:ba:36:42: 79:32:5b:02:8a:58:61:ad:90:c5:29:84:dc:38:4b: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1F:44:F6:E7:2F:12:71:A8:7D:99:47:83:87:A7:E1:56:BB:0C:39 X509v3 Authority Key Identifier: keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fb:a8:46:95:9b:4f:0b:d9:02:22:62:24:10:18:5f:0d:ec: cd:1a:e4:22:f0:c6:87:9c:5a:8f:66:e7:9b:a7:6f:cf:01:21: c7:6d:90:6e:1a:8d:00:33:fe:e1:a3:19:6e:06:c6:68:74:f6: 3b:17:58:c3:55:c8:36:76:cf:ed:f1:0c:9c:d8:74:27:c0:35: 4d:5f:20:b7:ff:13:c6:cc:42:3c:2d:2d:10:c0:e6:c0:5c:13: 04:25:44:cd:ab:a5:67:f5:00:b5:04:6c:ce:f2:ac:f8:e3:bd: c7:0f:78:56:e6:34:52:d8:6a:5c:84:ef:7b:31:97:7a:9d:73: aa:00:88:a8:82:2f:e8:68:5b:81:16:a8:e4:f0:43:fd:be:8c: 20:d9:6e:29:44:3c:3b:eb:ae:2e:2a:16:c5:49:83:65:cf:41: 8d:01:e9:fb:04:e0:5e:51:2a:ad:85:1d:3d:f9:4c:c0:44:53: 77:53:43:c7:6d:85:87:52:4a:14:a1:8d:26:0f:24:e3:8f:3e: 35:33:c6:6a:f4:02:d0:d5:26:48:01:e2:7b:d0:58:52:76:c8: e0:b1:7a:12:83:2d:fa:c1:fe:f3:19:1b:52:70:59:19:a7:bd: 95:7b:d7:0d:67:24:0f:c0:36:fa:c8:a2:4c:6d:5b:a8:81:ba: 5e:09:6a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RDREExMTAvBgNVBAUTKDY3MDZEOTg0RTczMTY4MTIwMjE4OEQyOTlFRDM1RjAw NUIwMTc1ODAwHhcNMjUwNjA4MTQ0MDIxWhcNMjUwNjE1MTQ0MDIxWjAYMRYwFAYD VQQDEw02ODQ1YTBkNS00Y2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum7UKCEBlicG+/tR8eoKo/hC9IlRccNF3h8dSB9by5W+bglCEfCQ6taAp0u5 CbTV2O9QkX7M6y5EcobHvgG1rjeQIGXRAmIsiEpyK0E410xQIrgOsqtzLcNyetDT k0K63mslt7BJv8ejDQZAPmEpBuzQNhXuFAHlbmcWPE0XPT8krFEnmKZDe8SontPH qfp8RgmhXaQ3D3gg2uPZ9URWVhyPMCZk+NKY4zV3LBrE4SY3CratFYdAQyAVNsmh pJAfTrqbRT28qHUofH03kRkDyLfmolnx68XFD77RyAzhrehz3o+owVIs9ADCXay6 NkJ5MlsCilhhrZDFKYTcOEtJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgfRPbn LxJxqH2ZR4OHp+FWuww5MB8GA1UdIwQYMBaAFGcG2YTnMWgSAhiNKZ7TXwBbAXWA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RENEQS8xOTJFNzFGNjFE OTAxMUUyQjI5NUFCRUYwOEIwMkNEMi9ad2JaaE9jeGFCSUNHSTBwbnROZkFGc0Jk WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3YlpoT2N4YUJJQ0dJMHBudE5mQUZzQmRZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RENEQS8xOTJFNzFGNjFEOTAxMUUyQjI5NUFCRUYwOEIwMkNEMi9ad2JaaE9jeGFC SUNHSTBwbnROZkFGc0JkWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo+6hGlZtPC9kCImIkEBhfDezNGuQi8MaHnFqPZuebp2/PASHHbZBu Go0AM/7hoxluBsZodPY7F1jDVcg2ds/t8Qyc2HQnwDVNXyC3/xPGzEI8LS0QwObA XBMEJUTNq6Vn9QC1BGzO8qz4473HD3hW5jRS2GpchO97MZd6nXOqAIiogi/oaFuB Fqjk8EP9vowg2W4pRDw7664uKhbFSYNlz0GNAen7BOBeUSqthR09+UzARFN3U0PH bYWHUkoUoY0mDyTjjz41M8Zq9ALQ1SZIAeJ70FhSdsjgsXoSgy36wf7zGRtScFkZ p72Ve9cNZyQPwDb6yKJMbVuogbpeCWo0 -----END CERTIFICATE-----Generated at Mon Jun 9 00:22:28 2025 by rpki-client