$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: umywpoaX2iqJK3PaYfJGqbEJmG5DyUdUyMUCbSkcr9U= Subject key identifier: A6:56:CC:9C:81:4D:E4:06:7B:05:BF:A2:6A:EA:C0:BF:1F:81:A7:70 Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 027E Signing time: Sat 31 May 2025 01:50:41 +0000 Manifest this update: Sat 31 May 2025 01:50:40 +0000 Manifest next update: Sat 07 Jun 2025 01:50:40 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: YPEvH9sE5Oz+gCFQeyYu+zjavoTSiLXBDx22IwoT7gc=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: WqjZAsQr/HLYxK8PcAumByn22k0e0D3wGPxVIBEBQ6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: May 31 01:50:40 2025 GMT Not After : Jun 7 01:50:40 2025 GMT Subject: CN=683a6071-0ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:66:72:90:72:c9:2f:e4:13:a5:d0:5c:c4: 55:56:fb:9e:6b:dc:75:a3:c1:c0:7c:5f:70:75:21: 68:54:5a:09:90:61:31:26:ee:ca:61:63:4f:ee:05: 0c:d7:b0:a0:39:13:3f:b3:43:a2:c5:cf:c2:d8:32: 05:f1:16:d6:6f:30:e8:f4:d1:0f:20:31:b4:ab:cf: f7:e5:fc:21:e6:a2:6d:a9:ac:88:b0:a3:0f:08:e7: 3f:1c:7a:1f:e4:cd:b6:6b:01:96:d6:4f:9f:95:62: 2c:f7:42:79:3d:7e:2d:4b:f5:10:78:d1:36:39:7b: 46:24:4a:61:31:e9:ec:4e:50:b8:92:06:41:41:4f: 9e:03:c8:f6:41:23:6c:dc:96:39:f7:2e:34:b4:52: 0c:e1:33:c8:b0:94:21:28:2a:72:b1:72:23:ca:5a: 28:16:4a:a8:6b:2c:0a:9d:b4:a5:2d:b1:e9:d8:8b: 6e:83:15:33:a2:29:0e:38:e0:4b:8c:10:40:50:c4: cc:20:6b:bb:63:9a:ab:43:27:34:36:28:54:4a:c1: d7:7a:c9:eb:62:cd:91:e6:a5:0a:f8:65:a4:be:d2: f0:26:63:d4:4f:75:2f:e9:e9:65:6c:15:3a:b8:4b: ae:fb:57:42:da:4e:c3:a1:f5:15:6d:ff:b2:8c:eb: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:CC:9C:81:4D:E4:06:7B:05:BF:A2:6A:EA:C0:BF:1F:81:A7:70 X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:8e:7b:b6:47:ec:02:5d:1e:01:30:f5:64:d1:80:49:42:58: 87:57:1f:7d:4b:b5:b7:84:84:47:d0:2f:90:0e:28:c8:c8:fa: 05:7d:e5:31:63:3d:06:a1:27:d8:fd:20:45:28:91:c9:cc:78: 3f:ae:7e:45:9f:8e:10:3a:37:ad:69:57:e2:7e:02:86:0b:34: a3:f1:7e:52:46:23:97:c1:85:da:df:3f:d5:b8:f7:df:2e:05: 54:c4:45:11:44:66:c2:06:17:95:ab:24:e7:fe:5a:1e:9a:78: 5c:a3:58:47:40:aa:05:ba:e5:76:26:d5:20:d7:0e:de:62:aa: f5:4f:5f:da:eb:22:1a:f4:6c:ef:05:c5:28:38:3e:24:ff:d2: fb:10:ac:26:89:9e:b2:36:d3:5b:58:fe:04:09:4c:36:a3:11: a2:d5:39:8b:d1:25:aa:60:6a:03:8d:9d:af:92:4f:89:57:14: c2:7b:4e:0e:3e:5f:ea:d4:6b:2a:4d:5f:73:b2:02:0a:3e:e3: ff:be:fe:fd:60:84:39:74:4b:dd:fe:90:fe:20:33:89:13:43: 39:53:54:7a:f6:8e:ff:83:2b:37:f3:f9:bc:8c:d7:d4:30:3c: 83:df:28:fb:2b:3d:a4:b4:51:b6:17:4a:73:f5:0f:5e:2e:72: 7d:14:f4:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUwNTMxMDE1MDQwWhcNMjUwNjA3MDE1MDQwWjAYMRYwFAYD VQQDEw02ODNhNjA3MS0wYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkJmcpByyS/kE6XQXMRVVvuea9x1o8HAfF9wdSFoVFoJkGExJu7KYWNP7gUM 17CgORM/s0Oixc/C2DIF8RbWbzDo9NEPIDG0q8/35fwh5qJtqayIsKMPCOc/HHof 5M22awGW1k+flWIs90J5PX4tS/UQeNE2OXtGJEphMensTlC4kgZBQU+eA8j2QSNs 3JY59y40tFIM4TPIsJQhKCpysXIjylooFkqoaywKnbSlLbHp2ItugxUzoikOOOBL jBBAUMTMIGu7Y5qrQyc0NihUSsHXesnrYs2R5qUK+GWkvtLwJmPUT3Uv6ellbBU6 uEuu+1dC2k7DofUVbf+yjOu1ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZWzJyB TeQGewW/omrqwL8fgadwMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjjnu2R+wCXR4BMPVk0YBJQliHVx99S7W3hIRH0C+QDijIyPoFfeUx Yz0GoSfY/SBFKJHJzHg/rn5Fn44QOjetaVfifgKGCzSj8X5SRiOXwYXa3z/VuPff LgVUxEURRGbCBheVqyTn/loemnhco1hHQKoFuuV2JtUg1w7eYqr1T1/a6yIa9Gzv BcUoOD4k/9L7EKwmiZ6yNtNbWP4ECUw2oxGi1TmL0SWqYGoDjZ2vkk+JVxTCe04O Pl/q1GsqTV9zsgIKPuP/vv79YIQ5dEvd/pD+IDOJE0M5U1R69o7/gys38/m8jNfU MDyD3yj7Kz2ktFG2F0pz9Q9eLnJ9FPQx -----END CERTIFICATE-----Generated at Sat May 31 16:50:40 2025 by rpki-client