$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: ccMmWNIvIwEf+RoBm9K0GvLG9DuCNmADfiLxt2iFLo0= Subject key identifier: BF:1B:E1:B2:C3:DB:4F:ED:E9:F9:22:BE:1B:91:99:8E:A2:28:F2:61 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: EE Signing time: Sat 31 May 2025 05:08:35 +0000 Manifest this update: Sat 31 May 2025 05:08:35 +0000 Manifest next update: Sat 07 Jun 2025 05:08:34 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: O3BFN3HF6m1NzqUG7KymuNQco7iCiVXydreNJGHu320=) 2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: ej1Z6/vJKdXFXCjwXb83ZJtZZrkbIfDZkFd1eoC4aOQ=) 3: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=) 4: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=) 5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: May 31 05:08:35 2025 GMT Not After : Jun 7 05:08:34 2025 GMT Subject: CN=683a8ed3-a943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:e8:78:89:5f:40:33:2e:05:e2:79:7b:20: 4d:3a:02:fe:0a:d1:2e:a3:60:3d:f5:0b:8a:ab:06: 0a:84:19:6c:bc:8b:e0:ce:e6:c9:3b:c0:a6:08:39: 11:26:4a:4f:09:99:77:c3:31:31:96:8d:3e:5b:cd: 57:e4:7a:e4:7a:65:36:18:50:7f:b7:8c:1a:02:6c: 66:b1:dc:f3:f0:ae:ce:c0:a8:6c:fc:3d:55:65:b8: 0b:af:51:09:9f:2b:8b:83:4f:af:13:68:fd:04:cf: 08:af:68:1e:c1:5a:90:5f:f3:8f:55:fc:27:cb:9c: 45:30:be:99:2c:ed:87:45:da:a0:f3:50:ee:ce:c7: fb:9f:3d:46:59:83:98:9f:f6:f1:c8:aa:22:1c:8a: 7d:c3:28:7b:14:6e:b7:b6:5f:fd:be:59:da:a7:cb: d3:10:7b:65:de:49:19:5a:e9:59:1b:3b:3a:aa:9f: 78:17:44:b3:30:0e:38:08:a3:59:b1:cc:36:ac:43: 16:7a:dd:51:7d:c2:de:7c:69:33:25:5b:7c:24:53: 0c:c8:97:c6:a7:64:46:9f:ed:5f:ee:19:e8:13:e3: 91:cf:2a:5f:73:f8:3b:6d:c5:2a:f4:61:ec:c0:c0: e8:56:c9:0c:db:95:41:cf:29:f7:4c:3c:7d:aa:01: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1B:E1:B2:C3:DB:4F:ED:E9:F9:22:BE:1B:91:99:8E:A2:28:F2:61 X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:65:9e:3c:05:5a:bc:20:d1:f2:60:be:09:1e:16:54:1b:af: 1c:d1:e6:91:c7:11:4a:92:6c:1e:70:fd:1e:0c:43:5a:93:a2: e6:14:b9:bc:39:c6:5b:e4:77:ec:1f:ae:ff:76:d6:6e:f0:61: 63:d6:f3:a4:1b:33:45:e7:88:84:4c:3e:c2:07:d5:68:b0:44: 08:22:58:22:65:3f:ad:c5:e2:07:70:f7:b3:4b:61:68:3a:b7: 76:25:0a:ca:59:0c:0a:15:45:3a:ed:f6:cd:45:ad:b7:1b:92: 5e:e5:3b:6c:f5:eb:19:6e:ab:96:0f:44:64:55:cd:18:a0:8f: 9d:95:e7:a8:2b:eb:7f:72:9c:61:a0:0b:a7:ff:19:d1:34:21: b2:70:f9:fd:53:b6:04:57:8e:b5:0b:d3:b3:70:40:60:6d:09: 27:28:5a:4b:ce:5b:2b:4f:05:4f:11:26:28:9e:df:db:76:b1: b6:5f:67:f6:dd:97:5b:94:af:79:40:4c:5b:62:a4:cd:dc:e1: 01:1e:ab:29:da:30:9a:f7:6e:d9:cf:ac:03:c6:e2:b1:83:04: 3c:b1:94:8a:1c:df:f1:46:17:c8:a5:9b:4f:a3:36:12:ab:7d: 76:3f:ac:17:57:70:16:02:c1:0f:da:ea:12:a3:67:13:a7:06: 34:44:8d:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUwNTMxMDUwODM1WhcNMjUwNjA3MDUwODM0WjAYMRYwFAYD VQQDEw02ODNhOGVkMy1hOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncvoeIlfQDMuBeJ5eyBNOgL+CtEuo2A99QuKqwYKhBlsvIvgzubJO8CmCDkR JkpPCZl3wzExlo0+W81X5HrkemU2GFB/t4waAmxmsdzz8K7OwKhs/D1VZbgLr1EJ nyuLg0+vE2j9BM8Ir2gewVqQX/OPVfwny5xFML6ZLO2HRdqg81Duzsf7nz1GWYOY n/bxyKoiHIp9wyh7FG63tl/9vlnap8vTEHtl3kkZWulZGzs6qp94F0SzMA44CKNZ scw2rEMWet1RfcLefGkzJVt8JFMMyJfGp2RGn+1f7hnoE+ORzypfc/g7bcUq9GHs wMDoVskM25VBzyn3TDx9qgHF7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8b4bLD 20/t6fkivhuRmY6iKPJhMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZZ48BVq8INHyYL4JHhZUG68c0eaRxxFKkmwecP0eDENak6LmFLm8 OcZb5HfsH67/dtZu8GFj1vOkGzNF54iETD7CB9VosEQIIlgiZT+txeIHcPezS2Fo Ord2JQrKWQwKFUU67fbNRa23G5Je5Tts9esZbquWD0RkVc0YoI+dleeoK+t/cpxh oAun/xnRNCGycPn9U7YEV461C9OzcEBgbQknKFpLzlsrTwVPESYont/bdrG2X2f2 3ZdblK95QExbYqTN3OEBHqsp2jCa927Zz6wDxuKxgwQ8sZSKHN/xRhfIpZtPozYS q312P6wXV3AWAsEP2uoSo2cTpwY0RI21 -----END CERTIFICATE-----Generated at Sat May 31 17:37:50 2025 by rpki-client