$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: 3xPPcOZf/2dkeeZn392JEgPhOFY3FCQwlXwJYwHe7Xw= Subject key identifier: 24:49:17:E7:47:44:9E:1E:79:6E:98:5D:99:15:BE:26:F5:13:AB:2F Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 1B Signing time: Sat 31 May 2025 07:29:14 +0000 Manifest this update: Sat 31 May 2025 07:29:13 +0000 Manifest next update: Sat 07 Jun 2025 07:29:13 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: CHKErGzhiSsRJ4ooa9p6BQtJlq0YrGay0HYuINnw8m8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: May 31 07:29:13 2025 GMT Not After : Jun 7 07:29:13 2025 GMT Subject: CN=683aafc9-e826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:d4:74:b4:95:0d:11:33:6a:94:c8:c7:9a: 03:5e:fe:3e:17:f7:b3:f8:47:94:19:4d:1e:09:88: cb:ba:3e:06:75:f6:2e:01:f1:b5:c3:9a:ce:bc:9a: 04:11:f1:72:9e:2e:13:77:26:df:d9:75:cd:2f:ca: 10:ab:48:aa:a5:28:c4:d4:07:f2:3e:88:f5:7f:7a: cc:47:3e:35:1a:c6:61:62:dc:14:a2:2b:ca:a8:cc: 97:17:bf:c3:5c:61:36:cb:25:0f:bb:61:68:09:e5: 42:06:a5:7d:fd:c9:48:3b:2c:e0:8f:f7:5c:fe:a7: 53:6f:40:82:1b:19:59:87:70:06:87:4e:3f:23:33: e8:cb:b6:12:b1:28:59:c2:37:33:a2:46:25:c2:8d: e6:74:06:22:a5:d0:00:e9:4f:a4:3d:a6:b0:82:78: 28:49:63:76:c0:b5:52:9c:06:56:0c:ff:83:3d:1d: 90:10:30:25:b1:d1:fb:9a:f9:31:ca:62:30:ef:c7: 6c:f8:7e:bd:c4:9e:29:bb:c8:a4:d5:23:7b:1b:38: f6:07:ce:a7:69:28:3e:27:ab:a3:89:65:2a:db:40: b7:ee:2f:66:f3:b3:51:ff:35:eb:93:9b:ec:d9:ce: 43:80:4c:5b:2e:a4:13:0d:64:a1:cc:72:d4:26:42: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:49:17:E7:47:44:9E:1E:79:6E:98:5D:99:15:BE:26:F5:13:AB:2F X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:43:de:b9:31:cc:c0:60:53:1b:ca:2c:ae:0b:f0:bc:a7:be: 7d:89:24:17:a6:bc:1a:3a:39:44:36:b5:62:de:ef:5f:7c:86: 38:6a:eb:7d:9a:8b:6a:34:09:48:34:a6:5c:d0:e1:86:b3:eb: a9:b3:8f:f6:f4:1c:3e:49:36:56:4e:2f:fc:08:b0:6d:32:88: 5c:6d:86:40:92:72:8f:ed:63:68:aa:b2:32:e2:73:25:5d:cb: 6f:a7:58:7a:6b:26:a8:6e:10:1d:f9:3a:ca:c7:01:01:2e:ba: 6f:33:2b:1e:14:52:d5:4b:76:10:fd:1f:b7:58:eb:14:d3:1d: c0:07:a8:54:5e:cb:bc:ca:9c:d6:a7:9d:b1:f7:13:74:e3:4c: b8:76:b5:c1:a8:24:dd:21:a4:6d:0e:15:a2:f3:ec:82:67:e4: 1c:c8:08:13:b9:c9:90:46:e7:bc:18:5e:6e:c6:6b:d6:dc:06: ca:fe:33:1f:d0:00:bc:e3:90:3a:b0:9c:2d:b9:88:86:fe:5a: 33:dc:b4:45:dc:b5:10:51:0d:ef:96:aa:66:9f:ed:c5:a6:a0: d9:f8:82:0f:83:03:c5:8c:9d:64:47:98:e3:7f:cf:0a:be:95: 2a:85:fe:f7:75:13:50:d4:29:c0:cc:a2:f2:28:67:ae:d1:22: b0:cc:cf:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTA1MzEwNzI5MTNaFw0yNTA2MDcwNzI5MTNaMBgxFjAUBgNV BAMTDTY4M2FhZmM5LWU4MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxfNR0tJUNETNqlMjHmgNe/j4X97P4R5QZTR4JiMu6PgZ19i4B8bXDms68mgQR 8XKeLhN3Jt/Zdc0vyhCrSKqlKMTUB/I+iPV/esxHPjUaxmFi3BSiK8qozJcXv8Nc YTbLJQ+7YWgJ5UIGpX39yUg7LOCP91z+p1NvQIIbGVmHcAaHTj8jM+jLthKxKFnC NzOiRiXCjeZ0BiKl0ADpT6Q9prCCeChJY3bAtVKcBlYM/4M9HZAQMCWx0fua+THK YjDvx2z4fr3Enim7yKTVI3sbOPYHzqdpKD4nq6OJZSrbQLfuL2bzs1H/NeuTm+zZ zkOATFsupBMNZKHMctQmQiJ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJEkX50dE nh55bphdmRW+JvUTqy8wHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC1D3rkxzMBgUxvKLK4L8Lynvn2JJBemvBo6OUQ2tWLe7198hjhq632a i2o0CUg0plzQ4Yaz66mzj/b0HD5JNlZOL/wIsG0yiFxthkCSco/tY2iqsjLicyVd y2+nWHprJqhuEB35OsrHAQEuum8zKx4UUtVLdhD9H7dY6xTTHcAHqFRey7zKnNan nbH3E3TjTLh2tcGoJN0hpG0OFaLz7IJn5BzICBO5yZBG57wYXm7Ga9bcBsr+Mx/Q ALzjkDqwnC25iIb+WjPctEXctRBRDe+Wqmaf7cWmoNn4gg+DA8WMnWRHmON/zwq+ lSqF/vd1E1DUKcDMovIoZ67RIrDMzyA= -----END CERTIFICATE-----Generated at Sat May 31 14:36:44 2025 by rpki-client