$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: Rk3XfCIzKOhl8HvBkW3upgvBHYGY16HHxWXiXag6Clg= Subject key identifier: 98:A1:45:4B:AE:A5:26:31:BC:F8:D0:CA:B5:E3:EE:C2:85:E7:25:B0 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 86 Signing time: Thu 19 Jun 2025 05:54:24 +0000 Manifest this update: Thu 19 Jun 2025 05:54:23 +0000 Manifest next update: Thu 26 Jun 2025 05:54:23 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: K7o0UZkklJs8c3Eoax5l8pMr1G8pcroyvmScfsSuWLk=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Jun 19 05:54:23 2025 GMT Not After : Jun 26 05:54:23 2025 GMT Subject: CN=6853a610-a3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d0:6e:19:1f:ca:79:65:8c:d8:f5:6a:35:c2: c8:45:e8:5f:e8:e2:a5:f6:7c:e8:3a:29:79:e6:a3: fe:ab:40:95:b6:84:40:b2:cd:c6:56:2b:df:87:af: d6:81:29:1d:42:73:e8:c6:b9:89:84:15:33:b3:9b: 89:1e:27:54:b3:67:9a:7d:0a:6a:7e:aa:ae:c8:80: 9f:b6:a0:83:5f:9b:4e:f4:6b:a2:4a:5a:4c:fd:28: bb:b1:46:ce:92:01:4d:df:1c:a2:f7:69:d5:83:6a: c7:d8:2f:f2:03:89:f5:8f:38:08:aa:e9:06:31:92: 03:5e:63:77:5a:51:a1:fc:42:e3:60:c1:90:a1:06: fd:68:bc:ae:f8:ae:44:5b:69:c3:62:76:a3:c8:ea: e1:74:f9:db:d4:51:7f:8f:f4:e4:b3:5e:c2:79:45: 69:9c:ea:c7:d3:81:90:ef:7c:ac:56:23:76:5c:54: 51:76:28:6f:fa:a2:27:37:0b:9f:52:36:b2:f5:bf: f8:b1:4f:04:05:a2:44:65:a8:25:c6:e6:3b:01:ee: e0:a5:b1:35:0c:dd:cc:0a:16:4a:d3:2e:19:e8:43: fe:c3:81:b1:f9:8d:18:80:4a:9a:4f:54:79:e0:28: 94:24:e9:1e:e1:42:38:2d:cf:7d:5d:77:7a:f6:27: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:45:4B:AE:A5:26:31:BC:F8:D0:CA:B5:E3:EE:C2:85:E7:25:B0 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:6f:ea:59:90:91:2e:36:77:b1:60:7e:ea:fa:f7:0a:0d:4b: 0b:6c:3e:15:a1:6c:17:01:5d:93:41:b6:d2:c9:0a:e0:5b:61: 8a:73:f9:9e:bf:56:9f:59:de:c7:77:3c:37:8b:18:f8:1e:3c: 5b:a4:b1:65:78:df:28:28:d9:1f:07:aa:49:91:2c:55:4b:0a: 9b:19:32:39:09:d3:f8:84:c7:e2:0e:c5:ac:be:57:31:33:62: e8:a7:59:79:5b:51:1c:f8:d3:dd:4b:c1:c5:c3:a6:19:b6:54: 66:ed:40:c9:95:64:ef:40:64:e9:e7:13:cf:d6:30:c6:89:18: 4f:d0:c7:94:7b:2d:96:7a:92:4a:0e:2f:4c:ee:b4:f6:56:30: 95:17:04:1f:d9:9d:32:7c:52:15:9a:39:e9:05:91:12:fc:c8: 9a:bc:4b:43:79:7c:73:ee:da:9c:a9:55:92:03:8a:67:7b:ac: 17:bc:db:f5:29:49:ef:65:17:14:e4:0a:34:68:ce:ef:bf:1c: cc:be:cd:e5:3c:63:a3:c0:b5:24:93:fb:2f:0a:40:a2:82:d1: a4:bf:eb:af:eb:cd:4d:19:95:5f:94:56:e4:78:04:dc:94:77: 73:fb:e7:85:ac:97:30:4c:f0:e0:41:5b:f3:68:3c:65:ec:fc: dd:88:40:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjUwNjE5MDU1NDIzWhcNMjUwNjI2MDU1NDIzWjAYMRYwFAYD VQQDEw02ODUzYTYxMC1hM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9dBuGR/KeWWM2PVqNcLIRehf6OKl9nzoOil55qP+q0CVtoRAss3GVivfh6/W gSkdQnPoxrmJhBUzs5uJHidUs2eafQpqfqquyICftqCDX5tO9GuiSlpM/Si7sUbO kgFN3xyi92nVg2rH2C/yA4n1jzgIqukGMZIDXmN3WlGh/ELjYMGQoQb9aLyu+K5E W2nDYnajyOrhdPnb1FF/j/Tks17CeUVpnOrH04GQ73ysViN2XFRRdihv+qInNwuf Ujay9b/4sU8EBaJEZaglxuY7Ae7gpbE1DN3MChZK0y4Z6EP+w4Gx+Y0YgEqaT1R5 4CiUJOke4UI4Lc99XXd69ieS0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJihRUuu pSYxvPjQyrXj7sKF5yWwMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2b+pZkJEuNnexYH7q+vcKDUsLbD4VoWwXAV2TQbbSyQrgW2GKc/me v1afWd7Hdzw3ixj4HjxbpLFleN8oKNkfB6pJkSxVSwqbGTI5CdP4hMfiDsWsvlcx M2Lop1l5W1Ec+NPdS8HFw6YZtlRm7UDJlWTvQGTp5xPP1jDGiRhP0MeUey2WepJK Di9M7rT2VjCVFwQf2Z0yfFIVmjnpBZES/MiavEtDeXxz7tqcqVWSA4pne6wXvNv1 KUnvZRcU5Ao0aM7vvxzMvs3lPGOjwLUkk/svCkCigtGkv+uv681NGZVflFbkeATc lHdz++eFrJcwTPDgQVvzaDxl7PzdiECi -----END CERTIFICATE-----Generated at Fri Jun 20 20:59:16 2025 by rpki-client