$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: zztwWh29xB0Q9iAvT7ecajaR24qqDHgC/U5p0pn6jVs= Subject key identifier: 2B:37:59:D0:A9:D0:C4:D1:41:7A:F6:DC:00:A7:A3:42:E1:AE:BF:A3 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0D0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0C94 Signing time: Mon 02 Jun 2025 17:05:42 +0000 Manifest this update: Mon 02 Jun 2025 17:05:42 +0000 Manifest next update: Mon 09 Jun 2025 17:05:42 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: Wer+9c/0p0uGG+dUH7IZ4aBS+DVoYKgPMtgUi9qt6qE=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: OL9yx105s7LK6EsnOhe+XLOZ40wASVHJwc15W55t9pM=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 3CFdx6XR3J9PdhVao7c8tK7DvtGCWPlPo7fHfVEStVA=) 4: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: qTG6wZpRk0tGrQDQoKCe/XP0NeNHOR27KvTlya4CKWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3339 (0xd0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jun 2 17:05:42 2025 GMT Not After : Jun 9 17:05:42 2025 GMT Subject: CN=683dd9e6-9311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:41:a0:03:c1:2b:67:07:4c:4c:a2:41:bc: c9:36:b8:4d:3e:e8:d1:ae:da:16:7d:f6:60:9b:5b: 5f:37:e6:ff:f4:d1:34:c7:1f:46:a6:ad:c4:47:8c: de:2a:8d:04:f3:3a:d5:81:4a:b4:ee:f2:2c:fc:30: 2f:5e:8f:d1:ed:42:27:c6:a9:e6:9f:43:ab:95:db: 8c:6f:32:b1:ac:7b:64:09:79:7a:9e:d5:c0:2c:93: 1d:99:45:88:78:3e:b8:0a:ae:15:e1:87:1c:dc:61: ed:a2:14:b6:d4:e2:12:46:ad:2f:b4:37:02:6f:e0: b0:79:36:c5:2d:35:ca:17:cc:ff:c2:24:a5:9e:68: 98:d2:84:ac:0d:4c:00:c0:1e:42:1c:63:3e:a0:db: 21:2e:74:c4:fe:b7:df:d6:7d:b5:9d:96:34:61:50: e4:67:eb:39:ad:79:61:82:39:10:ec:a7:c3:51:b2: 3d:e3:09:b6:82:59:d9:fd:cf:80:48:e5:34:e9:20: ce:7f:d7:a6:3f:76:dc:c5:ff:65:4c:fe:a3:87:31: cf:73:29:93:90:ae:9b:5a:36:52:93:43:d2:c4:19: 4e:2a:ad:33:41:a5:ca:8a:3e:51:88:b8:39:f4:1b: 25:26:e9:59:08:81:4b:48:92:c0:b0:c7:8b:32:d7: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:59:D0:A9:D0:C4:D1:41:7A:F6:DC:00:A7:A3:42:E1:AE:BF:A3 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ad:0c:96:c7:08:1d:33:09:28:9a:90:be:98:76:dd:5c:85: c5:f4:00:98:f7:c5:dc:3c:80:a8:6c:1c:88:2b:42:bf:70:40: 86:f6:b5:fa:bf:b7:38:0c:37:fe:04:51:b9:d6:50:04:43:74: 74:38:a0:2a:94:3e:87:bd:48:4a:d8:88:eb:3a:da:00:f7:f5: 0d:d2:6e:6a:da:fd:25:80:3e:ff:0f:c8:93:39:9c:f3:83:72: 6a:69:86:54:d7:40:2f:c7:50:45:85:7c:1d:e5:87:bf:41:17: 74:45:de:cb:41:b9:93:bf:d8:5f:ca:f1:3a:2c:43:c8:3a:98: cb:8a:1f:f8:93:f6:72:be:43:bd:5c:7b:1c:c4:ec:56:cc:39: 23:d5:f0:73:ae:40:4b:92:cc:75:72:80:f9:f9:4b:ba:79:80: 86:6e:10:61:01:b8:dd:5e:fd:5f:4f:a6:ef:da:4c:78:65:e2: 8c:fe:cc:2a:6f:d8:dc:83:d2:ab:5a:d9:d9:d5:ad:8f:ee:c7: 26:d4:e8:b6:fe:f5:31:7d:ad:c6:e0:bb:5e:aa:db:10:e4:17: 5e:50:9f:84:9d:f1:17:f3:fe:ae:5f:35:ee:55:ef:5e:fe:49: f4:77:2e:0c:a4:a5:b5:15:55:1b:a5:1c:7c:26:8d:a1:c7:ed: 4a:8f:91:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjUwNjAyMTcwNTQyWhcNMjUwNjA5MTcwNTQyWjAYMRYwFAYD VQQDEw02ODNkZDllNi05MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CxBoAPBK2cHTEyiQbzJNrhNPujRrtoWffZgm1tfN+b/9NE0xx9Gpq3ER4ze Ko0E8zrVgUq07vIs/DAvXo/R7UInxqnmn0OrlduMbzKxrHtkCXl6ntXALJMdmUWI eD64Cq4V4Ycc3GHtohS21OISRq0vtDcCb+CweTbFLTXKF8z/wiSlnmiY0oSsDUwA wB5CHGM+oNshLnTE/rff1n21nZY0YVDkZ+s5rXlhgjkQ7KfDUbI94wm2glnZ/c+A SOU06SDOf9emP3bcxf9lTP6jhzHPcymTkK6bWjZSk0PSxBlOKq0zQaXKij5RiLg5 9BslJulZCIFLSJLAsMeLMtfZ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs3WdCp 0MTRQXr23ACno0Lhrr+jMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6rQyWxwgdMwkompC+mHbdXIXF9ACY98XcPICobByIK0K/cECG9rX6 v7c4DDf+BFG51lAEQ3R0OKAqlD6HvUhK2IjrOtoA9/UN0m5q2v0lgD7/D8iTOZzz g3JqaYZU10Avx1BFhXwd5Ye/QRd0Rd7LQbmTv9hfyvE6LEPIOpjLih/4k/ZyvkO9 XHscxOxWzDkj1fBzrkBLksx1coD5+Uu6eYCGbhBhAbjdXv1fT6bv2kx4ZeKM/swq b9jcg9KrWtnZ1a2P7scm1Oi2/vUxfa3G4LteqtsQ5BdeUJ+EnfEX8/6uXzXuVe9e /kn0dy4MpKW1FVUbpRx8Jo2hx+1Kj5E2 -----END CERTIFICATE-----Generated at Wed Jun 4 00:21:45 2025 by rpki-client