$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: MhOHjjcZRzDOKbNEICjFD1K4ZjKvdN9Zlz1bUQ/C8Gw= Subject key identifier: 40:63:1A:69:76:F1:28:5A:0D:E2:83:1F:6A:47:2A:CA:FD:25:73:91 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 0269 Signing time: Fri 13 Jun 2025 02:52:09 +0000 Manifest this update: Fri 13 Jun 2025 02:52:09 +0000 Manifest next update: Fri 20 Jun 2025 02:52:09 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: hwRe7physeZDE2RNNmfRIQtG0+TGG4t5iDlYrdlpntI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Jun 13 02:52:09 2025 GMT Not After : Jun 20 02:52:09 2025 GMT Subject: CN=684b9259-31e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:43:63:7e:4b:f4:f8:b7:2a:f2:87:18:d5: c6:88:d3:31:b8:00:25:4e:40:f3:6b:84:0d:02:57: 11:ee:4b:e6:97:58:41:c7:2c:fc:63:7c:f0:a2:b2: ce:e9:a8:87:1a:7b:1d:5f:9e:db:1d:23:01:ce:97: 62:6a:e1:50:b2:59:9d:e3:f8:19:68:bd:b5:d8:18: 45:09:54:a5:3e:80:52:d4:6a:48:bf:6a:72:e9:ec: 60:b0:c8:a5:fd:65:5b:67:c7:ad:b3:11:47:d6:16: 76:5b:02:ff:9d:07:db:ce:b7:a9:2a:3c:3e:5f:6d: 47:1e:e9:ed:1e:97:3d:79:fb:f3:fa:aa:20:d9:5d: d0:8d:73:3e:71:4e:f7:0e:73:47:b3:b8:db:c0:9c: e9:db:75:96:fa:f7:ae:1a:dd:4a:eb:2e:f0:41:0e: 2d:5c:a2:78:1c:35:3c:45:4b:09:a6:40:eb:44:60: c7:99:eb:1f:db:99:85:79:b7:df:3e:d9:5c:85:29: df:50:ef:2b:4c:33:a5:4c:d2:26:8d:3f:ba:a0:c6: 3a:02:94:e3:fc:03:d1:d8:65:1d:1a:dc:80:4b:6b: 7f:76:8b:c4:19:06:93:21:08:ac:76:a1:3f:9e:ac: 2a:70:fc:56:1f:92:4e:39:8d:71:9e:44:4c:17:8c: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:63:1A:69:76:F1:28:5A:0D:E2:83:1F:6A:47:2A:CA:FD:25:73:91 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:39:e2:eb:fc:3e:d6:f5:d7:73:2a:31:c6:e1:7a:25:2a:ba: 25:b0:83:78:18:c1:59:30:d0:f9:1b:fe:4f:5a:1a:e4:5d:0c: 3f:7f:cb:c9:8a:07:a9:6a:86:07:74:d3:36:34:9f:ed:b5:c9: 91:b3:58:46:0b:52:6b:8d:6a:17:b5:58:82:43:ca:ed:1b:17: 51:5d:ec:a8:86:a9:8d:6e:c6:07:08:6a:8c:0c:bf:8d:c6:a6: de:20:11:d0:53:49:93:a3:80:29:c5:0f:76:bf:38:a2:71:37: e0:50:9e:7e:c5:98:b3:4b:64:72:6f:78:3d:0b:c3:4d:60:a3: c5:7f:25:5a:e3:96:c3:ca:79:63:8d:1b:2b:39:b3:d3:ce:29: ee:95:ec:71:bc:19:f1:7b:6a:cc:d6:f8:ec:54:b4:e4:75:c8: 89:a7:cb:60:9f:c6:82:fb:35:c8:bb:b2:83:b8:38:f0:c8:82: 16:64:b2:4b:8d:6c:e3:55:52:d0:39:52:5c:57:05:87:b0:9d: 19:c5:33:2c:e7:82:3a:d3:97:7e:d5:e5:23:a1:83:1f:68:2e: 92:b5:c8:85:48:ce:fd:56:f7:b1:1e:f7:c3:9a:21:39:07:ae: 3f:bd:de:60:b6:0a:13:4c:de:0c:16:57:bc:ba:50:4c:a6:2e: 4e:f7:70:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUwNjEzMDI1MjA5WhcNMjUwNjIwMDI1MjA5WjAYMRYwFAYD VQQDEw02ODRiOTI1OS0zMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZdDY35L9Pi3KvKHGNXGiNMxuAAlTkDza4QNAlcR7kvml1hBxyz8Y3zworLO 6aiHGnsdX57bHSMBzpdiauFQslmd4/gZaL212BhFCVSlPoBS1GpIv2py6exgsMil /WVbZ8etsxFH1hZ2WwL/nQfbzrepKjw+X21HHuntHpc9efvz+qog2V3QjXM+cU73 DnNHs7jbwJzp23WW+veuGt1K6y7wQQ4tXKJ4HDU8RUsJpkDrRGDHmesf25mFebff PtlchSnfUO8rTDOlTNImjT+6oMY6ApTj/APR2GUdGtyAS2t/dovEGQaTIQisdqE/ nqwqcPxWH5JOOY1xnkRMF4wozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBjGml2 8ShaDeKDH2pHKsr9JXORMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7OeLr/D7W9ddzKjHG4XolKrolsIN4GMFZMND5G/5PWhrkXQw/f8vJ igepaoYHdNM2NJ/ttcmRs1hGC1JrjWoXtViCQ8rtGxdRXeyohqmNbsYHCGqMDL+N xqbeIBHQU0mTo4ApxQ92vziicTfgUJ5+xZizS2Ryb3g9C8NNYKPFfyVa45bDynlj jRsrObPTzinulexxvBnxe2rM1vjsVLTkdciJp8tgn8aC+zXIu7KDuDjwyIIWZLJL jWzjVVLQOVJcVwWHsJ0ZxTMs54I605d+1eUjoYMfaC6StciFSM79VvexHvfDmiE5 B64/vd5gtgoTTN4MFle8ulBMpi5O93CP -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:20 2025 by rpki-client