$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: /r2ZOzyTmojOKlBKAwDlQ3HjV/wBzYzWDLP8hBk6roY= Subject key identifier: 54:9C:7E:82:C7:18:BD:CB:D1:C2:F1:77:6B:A1:BF:F2:5A:BA:D8:A9 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 09C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 09BD Signing time: Fri 06 Jun 2025 20:02:35 +0000 Manifest this update: Fri 06 Jun 2025 20:02:35 +0000 Manifest next update: Fri 13 Jun 2025 20:02:35 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: W+9uWrhvO+oV4QKGbgUZy2zSoeDDdS564ogn2VyRVQs=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: cQpAURqDM/34gPKhgVHe+OBCLHcXpgoxll5j5sk3a4o=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 3doq1VIPrTMuHeE3hP1dvsdzHHC8FVCO0WmVRpeSjbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 20:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Jun 6 20:02:35 2025 GMT Not After : Jun 13 20:02:35 2025 GMT Subject: CN=6843495b-3102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:16:89:5f:3c:f2:9c:f4:df:1c:3a:f7:c8: 57:4a:1c:5b:c0:c5:5d:2e:f5:f4:0b:40:c3:1b:1d: 8c:f4:b4:59:34:69:42:ba:9a:ea:5f:20:52:d3:25: c5:23:b6:54:e8:cf:0d:79:11:7b:d0:bb:8c:68:58: 78:6e:7d:0b:ba:ee:bc:60:b2:5e:4c:f2:d3:3d:b1: ec:89:46:ef:09:e2:1b:72:d1:b6:11:20:a3:58:d2: d4:d0:72:08:da:2c:4f:d5:0e:49:b4:52:95:87:8d: 50:8a:b8:72:54:8f:71:20:52:09:6d:e2:5c:bd:93: ad:b1:a7:9b:6a:ed:6c:f5:99:ef:c1:e7:d5:8e:77: 59:54:c1:0a:1f:d6:51:5a:8c:7f:26:85:d1:85:0c: 9c:74:a7:72:a2:d9:5b:1d:b8:83:11:62:e3:1f:bf: f5:e5:ae:bb:eb:3e:bc:f6:35:3d:2f:86:53:e3:6c: 19:cf:b1:18:c9:7d:f2:be:bd:7b:5c:8c:0d:79:f6: 5f:5e:38:e1:6a:97:82:ec:81:e8:20:57:0e:da:c0: 31:e8:81:97:e5:fb:cc:52:60:93:d9:06:64:ac:f0: e3:2d:f6:11:17:d4:ff:92:16:84:8f:bd:f2:84:50: 66:00:58:ab:0a:7b:25:fe:ef:be:00:c6:be:31:15: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9C:7E:82:C7:18:BD:CB:D1:C2:F1:77:6B:A1:BF:F2:5A:BA:D8:A9 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d8:1a:93:bc:fb:5c:96:35:a8:e9:60:40:1b:ec:09:dc:de: 04:6c:e3:0e:76:ec:74:a7:47:44:af:79:46:a9:46:84:f7:6b: b1:d1:01:55:3b:27:bd:2b:35:9d:75:2f:28:a1:12:de:9a:d6: 6a:2a:3e:03:56:d5:89:84:60:a1:5f:ee:f1:7c:df:a6:f0:05: e6:24:4a:ca:2e:89:90:d6:ba:1c:15:5e:9e:24:cb:b4:f4:12: ac:e3:04:f2:2b:9a:7d:3d:79:f5:2b:50:e0:91:e7:5f:8d:48: 11:16:61:ce:28:2c:46:3f:f4:b1:b1:76:18:82:29:d7:c0:5a: 27:55:bd:95:7e:7d:de:dd:26:31:4a:a8:d1:17:18:f4:34:29: 75:f1:ac:75:72:41:a0:11:30:48:ae:6a:c8:95:dd:a2:7e:d1: 48:07:4d:db:70:2d:17:da:65:f3:8d:43:95:73:57:4a:64:0d: 47:68:8d:23:f9:d4:95:a2:11:dc:c9:18:bd:19:f4:ef:57:dc: 9b:4b:63:db:88:8e:b9:61:62:89:bd:a5:55:38:be:77:49:20: f5:5e:b5:22:28:be:b1:37:bd:18:bd:03:57:dc:44:a9:de:15: 10:43:a2:94:3a:cd:fd:4b:f9:04:71:a7:87:91:79:b7:fa:9c: 26:f5:e0:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjUwNjA2MjAwMjM1WhcNMjUwNjEzMjAwMjM1WjAYMRYwFAYD VQQDEw02ODQzNDk1Yi0zMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthsWiV888pz03xw698hXShxbwMVdLvX0C0DDGx2M9LRZNGlCuprqXyBS0yXF I7ZU6M8NeRF70LuMaFh4bn0Luu68YLJeTPLTPbHsiUbvCeIbctG2ESCjWNLU0HII 2ixP1Q5JtFKVh41QirhyVI9xIFIJbeJcvZOtsaebau1s9ZnvwefVjndZVMEKH9ZR Wox/JoXRhQycdKdyotlbHbiDEWLjH7/15a676z689jU9L4ZT42wZz7EYyX3yvr17 XIwNefZfXjjhapeC7IHoIFcO2sAx6IGX5fvMUmCT2QZkrPDjLfYRF9T/khaEj73y hFBmAFirCnsl/u++AMa+MRUlAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFScfoLH GL3L0cLxd2uhv/JautipMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS2BqTvPtcljWo6WBAG+wJ3N4EbOMOdux0p0dEr3lGqUaE92ux0QFV Oye9KzWddS8ooRLemtZqKj4DVtWJhGChX+7xfN+m8AXmJErKLomQ1rocFV6eJMu0 9BKs4wTyK5p9PXn1K1DgkedfjUgRFmHOKCxGP/SxsXYYginXwFonVb2Vfn3e3SYx SqjRFxj0NCl18ax1ckGgETBIrmrIld2iftFIB03bcC0X2mXzjUOVc1dKZA1HaI0j +dSVohHcyRi9GfTvV9ybS2PbiI65YWKJvaVVOL53SSD1XrUiKL6xN70YvQNX3ESp 3hUQQ6KUOs39S/kEcaeHkXm3+pwm9eA1 -----END CERTIFICATE-----Generated at Sun Jun 8 17:15:15 2025 by rpki-client