$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: QbKwif/G16Avve6AaOPHS1x+O5kiCcvvr5spMGqsArI= Subject key identifier: B6:FA:5A:43:08:AC:38:6A:72:5E:5F:BC:AF:0C:6E:9B:61:61:54:83 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 3067 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 3058 Signing time: Sun 10 Aug 2025 15:24:23 +0000 Manifest this update: Sun 10 Aug 2025 15:24:22 +0000 Manifest next update: Sun 17 Aug 2025 15:24:22 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: N+VvV8ZB27Q7uJ1tRFuM7B7vuN/t2eELUzswKhI9ph4=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: hQKUzdzJskNaUaPGl2kmEUdrCcgwSNhHBQ7D6gtHv6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12391 (0x3067) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Aug 10 15:24:22 2025 GMT Not After : Aug 17 15:24:22 2025 GMT Subject: CN=6898b9a6-6911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:98:38:ca:d1:5a:58:6f:b7:c0:9e:35:9a: 3b:d5:84:27:1c:d0:b5:95:a8:0c:f0:9f:7e:30:12: 84:11:35:5a:84:3b:87:c0:e4:de:a9:ea:ed:0d:1b: 0f:ad:5c:f0:23:f9:5a:2f:41:09:3e:9a:7a:0d:56: ae:86:1d:26:67:20:d5:6a:2c:36:5a:0f:93:83:13: 42:ee:0c:9f:1b:67:d6:45:0d:9b:bd:16:f1:7f:dd: 5a:5f:13:6f:38:e8:b3:ee:9b:e7:6a:de:fe:3c:34: c6:d0:23:61:cf:4f:f1:0b:bb:88:5f:0a:c2:74:f2: 6f:9e:6c:86:c1:4a:f8:53:bb:29:6b:01:c2:7f:79: 22:e4:9f:8d:0f:f5:b9:90:08:44:1c:dd:f3:60:e9: 68:2e:7b:7b:f0:86:7d:25:b0:ad:f1:0c:2c:bd:7f: b3:f9:94:76:23:74:0b:7a:4b:ba:1b:d2:92:ef:2f: 3d:8f:4e:c0:27:91:cf:1a:46:54:21:4a:f8:a1:ca: 9f:cb:7a:a9:5d:18:e5:bb:ca:eb:b6:90:fe:49:c1: c9:4b:be:00:1a:1f:0e:29:8a:d7:e6:98:a1:61:f4: a3:e3:a3:14:35:28:e3:18:d7:4a:2f:70:1e:3a:43: df:59:50:06:93:11:1b:33:08:39:9e:ad:fc:74:d5: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FA:5A:43:08:AC:38:6A:72:5E:5F:BC:AF:0C:6E:9B:61:61:54:83 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:51:13:1d:ad:bd:96:0d:45:b2:5d:79:80:4d:d4:a0:62:7a: 9f:ed:47:dd:ec:56:c7:ef:d1:6d:da:b6:d0:f8:04:57:db:d7: 10:7a:bf:af:01:a3:5d:18:a3:dd:20:53:22:bd:37:45:f7:4c: b5:e7:3c:6d:28:b4:59:ab:4a:f6:08:5b:7f:e1:f2:22:4e:10: 17:6a:4e:84:13:30:18:a3:cc:eb:6b:3c:fb:e8:eb:41:96:0d: 66:e1:5c:96:a8:b4:1c:d3:bd:4a:2a:50:be:41:d1:75:a0:ac: 11:cf:ee:76:96:f3:93:f8:a1:a7:1a:e0:85:b5:a4:e5:4b:07: 7b:cd:b1:ec:3c:ad:99:36:a6:58:3c:3b:bc:e4:ea:e4:72:a7: a7:1c:e4:32:c8:2c:14:aa:de:c6:d3:d1:c4:6e:3b:f4:31:d8: 6f:30:8e:be:e9:a0:b9:88:4f:aa:34:9a:ad:bb:75:6c:02:49: a8:e5:6e:3a:00:7b:0f:3e:07:aa:0f:46:58:0c:b6:3d:15:47: 99:74:36:a4:20:0a:0a:7b:77:9b:23:2f:aa:43:12:83:cd:11: 06:0b:9a:7f:49:1b:49:b5:11:d2:e3:1c:11:69:32:8d:c0:45: 9b:29:a0:91:99:82:31:c9:c9:2e:38:ff:04:6a:52:3c:d7:2b: 39:9c:26:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUwODEwMTUyNDIyWhcNMjUwODE3MTUyNDIyWjAYMRYwFAYD VQQDEw02ODk4YjlhNi02OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApimYOMrRWlhvt8CeNZo71YQnHNC1lagM8J9+MBKEETVahDuHwOTeqertDRsP rVzwI/laL0EJPpp6DVauhh0mZyDVaiw2Wg+TgxNC7gyfG2fWRQ2bvRbxf91aXxNv OOiz7pvnat7+PDTG0CNhz0/xC7uIXwrCdPJvnmyGwUr4U7spawHCf3ki5J+ND/W5 kAhEHN3zYOloLnt78IZ9JbCt8QwsvX+z+ZR2I3QLeku6G9KS7y89j07AJ5HPGkZU IUr4ocqfy3qpXRjlu8rrtpD+ScHJS74AGh8OKYrX5pihYfSj46MUNSjjGNdKL3Ae OkPfWVAGkxEbMwg5nq38dNXJZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb6WkMI rDhqcl5fvK8MbpthYVSDMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDURMdrb2WDUWyXXmATdSgYnqf7Ufd7FbH79Ft2rbQ+ARX29cQer+v AaNdGKPdIFMivTdF90y15zxtKLRZq0r2CFt/4fIiThAXak6EEzAYo8zrazz76OtB lg1m4VyWqLQc071KKlC+QdF1oKwRz+52lvOT+KGnGuCFtaTlSwd7zbHsPK2ZNqZY PDu85OrkcqenHOQyyCwUqt7G09HEbjv0MdhvMI6+6aC5iE+qNJqtu3VsAkmo5W46 AHsPPgeqD0ZYDLY9FUeZdDakIAoKe3ebIy+qQxKDzREGC5p/SRtJtRHS4xwRaTKN wEWbKaCRmYIxyckuOP8EalI81ys5nCYP -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:47 2025 by rpki-client