$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: 3LdfgbK4hH4CJIbusjzmDf4eEWWGFYvhKZehk2RaiHc= Subject key identifier: 69:BC:44:34:DD:93:E8:C6:52:80:9C:6B:CF:15:FE:FD:8F:FD:0C:5E Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0C3B Signing time: Mon 16 Jun 2025 18:27:36 +0000 Manifest this update: Mon 16 Jun 2025 18:27:36 +0000 Manifest next update: Mon 23 Jun 2025 18:27:36 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: XEfXCBoV0NU3338dSFj7f7EgOTqrEKe8qlYLVzzdgPI=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: O2LLRL8b/tm+vv16MRK3yWBKThY2uxl21s2tEaGgYZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Jun 16 18:27:36 2025 GMT Not After : Jun 23 18:27:36 2025 GMT Subject: CN=68506218-1191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:93:51:0b:e1:d1:e4:7a:62:62:ed:ef:cd: 02:f2:85:86:0f:33:6a:7f:76:5c:c6:1a:ad:4d:50: 6c:32:d1:56:07:58:a6:21:bc:88:b7:35:f3:f1:33: b8:52:f7:44:7e:c1:80:62:0c:d5:c3:fd:c1:07:4f: 19:90:6c:c5:97:e8:eb:4a:0b:a4:92:20:26:09:96: 19:e3:ca:69:02:f3:f9:85:01:1c:3c:64:f4:92:a2: e1:b8:64:d9:7a:2c:01:2b:cc:ad:bc:0a:55:ae:58: 4c:3d:d4:d8:de:51:b0:fd:52:c2:89:ae:84:52:c1: 77:4c:dd:6f:3d:06:27:8c:2d:54:c2:b1:80:fd:32: 85:42:e5:e0:44:e3:fb:9a:e0:73:48:b1:4f:15:4d: fa:89:3d:49:5c:44:88:52:b2:d4:31:9c:6e:f2:5a: c7:b1:4a:17:59:36:c9:e6:01:a0:9d:5d:1c:34:86: 51:87:b8:94:7f:59:ff:34:a0:7f:7b:1a:b6:71:22: 2e:c0:d6:9d:da:ed:99:e1:f5:9b:b2:16:1a:cc:35: 60:70:71:00:04:b6:10:58:86:bb:e8:fb:85:3e:16: 84:7b:3c:ef:78:3a:85:3b:3b:ae:3f:a6:48:4e:f7: c0:8c:23:8d:77:43:fa:4c:ad:f8:db:22:11:95:d8: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BC:44:34:DD:93:E8:C6:52:80:9C:6B:CF:15:FE:FD:8F:FD:0C:5E X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:14:1d:bb:65:7c:d8:45:11:d4:93:aa:c1:99:f6:13:f3:0d: 22:1d:26:9b:be:96:ca:45:36:98:65:4e:65:38:52:a1:33:52: 5c:fe:68:68:8e:17:f5:4b:73:ac:30:ab:4d:55:b2:e2:61:9f: 52:e7:5c:48:7e:66:75:42:6f:b3:6e:51:b1:da:fb:66:dc:3f: 3e:3e:a9:36:1b:fd:2f:ed:04:9d:27:72:11:36:c2:11:95:a6: 9c:f7:10:8a:07:54:c4:f4:53:d4:3f:bd:72:a3:be:0e:24:25: 10:40:52:e6:06:fa:00:45:7e:c3:df:3c:7c:66:9b:43:29:6a: 5f:b3:cf:13:ba:63:b3:fc:3e:21:f8:b5:5a:60:72:0b:53:cf: d7:d6:7c:2c:88:6e:ee:33:40:a3:85:87:af:bc:51:c7:74:37: 68:a4:01:71:45:cb:a2:c2:2b:9d:b6:dd:01:36:2e:7a:23:fd: e5:5b:8f:17:64:0d:b2:66:ae:e4:6a:0a:2f:ef:e8:c7:c6:d8: 94:f5:14:51:84:5d:d8:51:37:d0:dc:37:67:e3:cc:73:61:93: 65:6b:93:12:84:37:11:95:fa:bf:1e:68:94:97:e5:c2:d7:4e: 7a:35:bf:b0:6e:6b:6a:91:35:27:d9:e3:3f:99:39:16:71:47: 20:18:35:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUwNjE2MTgyNzM2WhcNMjUwNjIzMTgyNzM2WjAYMRYwFAYD VQQDEw02ODUwNjIxOC0xMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MOTUQvh0eR6YmLt780C8oWGDzNqf3ZcxhqtTVBsMtFWB1imIbyItzXz8TO4 UvdEfsGAYgzVw/3BB08ZkGzFl+jrSgukkiAmCZYZ48ppAvP5hQEcPGT0kqLhuGTZ eiwBK8ytvApVrlhMPdTY3lGw/VLCia6EUsF3TN1vPQYnjC1UwrGA/TKFQuXgROP7 muBzSLFPFU36iT1JXESIUrLUMZxu8lrHsUoXWTbJ5gGgnV0cNIZRh7iUf1n/NKB/ exq2cSIuwNad2u2Z4fWbshYazDVgcHEABLYQWIa76PuFPhaEezzveDqFOzuuP6ZI TvfAjCONd0P6TK342yIRldj8JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGm8RDTd k+jGUoCca88V/v2P/QxeMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSFB27ZXzYRRHUk6rBmfYT8w0iHSabvpbKRTaYZU5lOFKhM1Jc/mho jhf1S3OsMKtNVbLiYZ9S51xIfmZ1Qm+zblGx2vtm3D8+Pqk2G/0v7QSdJ3IRNsIR laac9xCKB1TE9FPUP71yo74OJCUQQFLmBvoARX7D3zx8ZptDKWpfs88TumOz/D4h +LVaYHILU8/X1nwsiG7uM0CjhYevvFHHdDdopAFxRcuiwiudtt0BNi56I/3lW48X ZA2yZq7kagov7+jHxtiU9RRRhF3YUTfQ3Ddn48xzYZNla5MShDcRlfq/HmiUl+XC 1056Nb+wbmtqkTUn2eM/mTkWcUcgGDVS -----END CERTIFICATE-----Generated at Wed Jun 18 08:20:29 2025 by rpki-client