$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: fYjKUHMZ1j3CJsM6AzwmsqvQk+PT6xM0k6I5yVheNHg= Subject key identifier: E1:74:D4:CE:BE:F4:0F:92:62:81:36:BD:7C:70:29:4B:C9:A2:E0:60 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 304A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 303B Signing time: Sat 14 Jun 2025 15:26:14 +0000 Manifest this update: Sat 14 Jun 2025 15:26:13 +0000 Manifest next update: Sat 21 Jun 2025 15:26:13 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: cXE/OKMpCsn1IVD6HGTf+OVW8iPfYA4anPuuU6yd4ek=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: hQKUzdzJskNaUaPGl2kmEUdrCcgwSNhHBQ7D6gtHv6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12362 (0x304a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Jun 14 15:26:13 2025 GMT Not After : Jun 21 15:26:13 2025 GMT Subject: CN=684d9495-895c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:48:d6:62:c1:81:06:09:0b:df:33:d6:95: ba:3c:cd:f1:50:65:1f:c4:7c:bd:30:bf:f9:d7:b0: ec:ce:60:7a:a9:bf:cd:cf:c0:d8:08:fa:4a:d3:42: af:db:f7:50:af:00:bf:1b:91:72:f6:98:e1:a6:1c: be:f5:3e:ec:c3:3b:c2:96:97:c4:77:73:f4:88:a6: 9f:2d:78:be:f9:14:8e:2d:e0:37:ff:12:24:78:c5: 97:00:43:c9:5a:26:72:48:82:67:86:91:b4:41:cf: ca:36:8a:bd:b8:11:97:27:f4:01:88:bd:3b:74:9f: eb:ea:fa:bb:3a:69:c5:f9:6f:d5:7b:5c:65:67:0e: fc:3e:95:62:10:77:26:79:33:6b:d9:1f:92:ad:93: 8d:50:07:e9:f0:67:21:55:4e:db:68:16:da:27:0f: e5:e8:3b:e3:ea:9c:c0:ae:9e:83:ab:9e:11:b9:04: b6:87:b9:28:91:cc:89:14:5e:ba:6a:a7:14:6a:ee: b9:c6:8c:af:ba:06:0a:82:8b:3d:02:44:d8:22:47: fe:40:72:43:25:a7:1c:b8:21:9d:4f:2f:61:2c:01: b2:bb:45:38:e8:1c:7e:1b:09:94:87:cd:e6:90:50: 20:c1:09:83:fe:62:8b:69:89:1c:72:5d:78:25:e3: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:D4:CE:BE:F4:0F:92:62:81:36:BD:7C:70:29:4B:C9:A2:E0:60 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:40:09:f4:f6:76:5a:94:21:b0:1c:9d:9d:9e:d8:c7:6c:ca: ea:c0:1f:9f:72:93:21:21:d6:c0:67:4b:5b:da:b6:e6:09:7f: 21:5f:6b:a5:e2:10:45:d6:b3:e1:43:e0:1e:e6:da:cc:f9:cf: f5:dc:ed:d2:8f:5c:a3:5b:77:50:32:ec:ce:05:03:7d:b8:ea: 0f:3f:7e:f2:f3:6b:7f:98:87:cb:88:30:df:52:1a:ce:3f:8c: e5:db:32:fb:df:c1:83:cb:49:69:cd:1d:07:7a:71:32:ca:13: f2:58:ef:64:99:3d:55:46:e0:27:19:82:54:e4:bd:d2:4f:fc: 43:cd:42:58:97:07:fd:d9:c7:58:b0:b1:24:41:04:68:a3:58: 5c:8e:63:97:3b:3c:6e:60:a4:51:47:96:89:85:e3:1e:d4:8c: a5:55:5a:cd:0b:28:f9:e6:ac:4b:31:be:d5:64:5d:0f:c0:a7: f0:9b:d6:36:31:75:56:eb:5a:bc:05:2d:1f:b0:90:98:67:f3: 58:b3:84:e0:e9:a3:f2:d0:9a:99:41:3a:51:c2:41:4a:8b:01: 98:fb:9c:7f:0a:bf:e9:5e:06:98:30:7e:4d:6d:dd:29:d6:ed: db:0b:7b:7a:39:67:f2:ad:6f:b0:38:0f:cb:93:58:f4:28:c5: 32:bc:61:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUwNjE0MTUyNjEzWhcNMjUwNjIxMTUyNjEzWjAYMRYwFAYD VQQDEw02ODRkOTQ5NS04OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIpI1mLBgQYJC98z1pW6PM3xUGUfxHy9ML/517DszmB6qb/Nz8DYCPpK00Kv 2/dQrwC/G5Fy9pjhphy+9T7swzvClpfEd3P0iKafLXi++RSOLeA3/xIkeMWXAEPJ WiZySIJnhpG0Qc/KNoq9uBGXJ/QBiL07dJ/r6vq7OmnF+W/Ve1xlZw78PpViEHcm eTNr2R+SrZONUAfp8GchVU7baBbaJw/l6Dvj6pzArp6Dq54RuQS2h7kokcyJFF66 aqcUau65xoyvugYKgos9AkTYIkf+QHJDJaccuCGdTy9hLAGyu0U46Bx+GwmUh83m kFAgwQmD/mKLaYkccl14JePzWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOF01M6+ 9A+SYoE2vXxwKUvJouBgMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQAn09nZalCGwHJ2dntjHbMrqwB+fcpMhIdbAZ0tb2rbmCX8hX2ul 4hBF1rPhQ+Ae5trM+c/13O3Sj1yjW3dQMuzOBQN9uOoPP37y82t/mIfLiDDfUhrO P4zl2zL738GDy0lpzR0HenEyyhPyWO9kmT1VRuAnGYJU5L3ST/xDzUJYlwf92cdY sLEkQQRoo1hcjmOXOzxuYKRRR5aJheMe1IylVVrNCyj55qxLMb7VZF0PwKfwm9Y2 MXVW61q8BS0fsJCYZ/NYs4Tg6aPy0JqZQTpRwkFKiwGY+5x/Cr/pXgaYMH5Nbd0p 1u3bC3t6OWfyrW+wOA/Lk1j0KMUyvGFB -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:26 2025 by rpki-client