$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json) Hash identifier: iwJYHuQbvsNZeFRRE5zNqFGKQ7wKlcnVJdBhXv/+WbE= Subject key identifier: 8B:08:99:25:B4:05:CA:16:0B:4B:F6:C8:63:A9:84:35:A3:51:61:22 Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft Manifest number: AC Signing time: Thu 19 Jun 2025 05:25:28 +0000 Manifest this update: Thu 19 Jun 2025 05:25:27 +0000 Manifest next update: Thu 26 Jun 2025 05:25:27 +0000 Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: +vDbpLpLGsqbosSTkSo3c5J08zTXtGz6dzx8RotL6Hg=) 2: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: LjkQk5pWU/mOE2Q5+ogi7WUAZwgNRPqYtt1+W47MskQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: Jun 19 05:25:27 2025 GMT Not After : Jun 26 05:25:27 2025 GMT Subject: CN=68539f48-86cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:94:77:a3:fc:05:e0:bf:25:da:8a:c0:60:6b: 5e:37:08:05:bb:04:60:62:b9:40:fb:fa:38:2f:8c: 51:d7:65:3d:c2:dc:97:c2:d3:81:1a:0a:a6:74:86: 75:cd:83:5f:cc:20:86:a5:7d:85:3d:b9:bb:ad:65: df:13:45:b3:d5:ec:93:8f:1a:6d:db:7c:97:aa:80: 65:b0:0c:ce:72:6d:05:7b:24:74:62:36:e2:12:b1: 80:78:20:e4:0e:d0:4e:ce:ca:9a:bc:b1:1b:76:c8: 38:e1:74:8a:92:d7:59:53:1c:e4:a2:12:a7:9a:0b: 5f:c5:83:58:fd:f6:8d:26:a3:f0:49:4b:a7:ef:58: b9:42:3d:fa:22:df:11:8f:09:2d:99:8c:8f:6a:fe: e9:24:be:2d:db:09:64:1e:d7:b2:5e:cd:aa:27:aa: 3d:cf:9c:6e:ae:19:bf:5a:43:49:9d:c0:ae:67:5c: d3:9a:63:45:51:cf:c9:65:fe:b2:c5:1c:9a:65:25: 22:33:c4:57:1e:95:19:03:fe:ce:e8:57:18:0c:eb: b2:61:90:96:e1:ac:33:e4:ae:12:87:2d:cf:95:44: 67:87:14:a6:85:43:a1:60:e2:2f:94:bc:f6:34:56: 69:02:6b:16:df:e6:62:5e:12:a1:d5:08:c5:b0:27: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:08:99:25:B4:05:CA:16:0B:4B:F6:C8:63:A9:84:35:A3:51:61:22 X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:a0:0c:aa:ef:d3:86:0a:65:94:c7:28:e3:fc:47:13:4a: 85:75:1c:f0:a9:f1:d0:1d:80:c2:d9:c1:be:2d:68:49:13:f4: 9b:dd:fc:a3:71:f4:f3:27:2d:91:fd:ce:17:0f:31:59:20:6f: 8a:c5:65:b0:13:7e:fe:fb:79:1f:e5:4f:d1:a7:d4:95:4b:36: 54:e2:fe:bb:63:f9:64:0a:d9:3e:f2:3b:53:4c:a3:74:05:a3: e4:f7:ac:24:53:f4:0e:b2:53:88:fb:27:e7:54:76:62:cc:9e: 26:b8:0d:28:8e:26:30:cf:3c:2a:b7:f4:d9:d9:b3:c2:20:f6: 78:05:76:c2:a0:14:9e:26:b5:d7:dd:df:26:ca:50:a2:a7:da: 60:28:4c:fa:29:1b:ce:68:c5:75:5c:71:ef:96:2a:c7:14:77: b6:e3:f8:53:e0:7a:08:a1:e2:49:bb:d3:64:79:65:5c:5a:00: 7e:c5:4a:e7:c0:f8:9b:1b:78:dc:8f:3b:8f:9c:c0:8a:71:3f: d8:c6:45:a9:3f:cd:5e:06:62:1c:98:32:77:89:f6:0f:19:75: d2:ce:cd:a5:db:9c:05:e4:18:78:da:31:be:5e:e4:08:69:5a: 46:a2:a4:fb:ac:39:8b:59:7c:2e:5a:51:57:bb:9c:cb:8b:a7: 6c:6b:e4:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjUwNjE5MDUyNTI3WhcNMjUwNjI2MDUyNTI3WjAYMRYwFAYD VQQDEw02ODUzOWY0OC04NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JR3o/wF4L8l2orAYGteNwgFuwRgYrlA+/o4L4xR12U9wtyXwtOBGgqmdIZ1 zYNfzCCGpX2FPbm7rWXfE0Wz1eyTjxpt23yXqoBlsAzOcm0FeyR0YjbiErGAeCDk DtBOzsqavLEbdsg44XSKktdZUxzkohKnmgtfxYNY/faNJqPwSUun71i5Qj36It8R jwktmYyPav7pJL4t2wlkHteyXs2qJ6o9z5xurhm/WkNJncCuZ1zTmmNFUc/JZf6y xRyaZSUiM8RXHpUZA/7O6FcYDOuyYZCW4awz5K4Shy3PlURnhxSmhUOhYOIvlLz2 NFZpAmsW3+ZiXhKh1QjFsCf8aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsImSW0 BcoWC0v2yGOphDWjUWEiMB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81OERCODdGMjQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENh NHdleHVjN2t2OVI4UEhkeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnFqAMqu/ThgpllMco4/xHE0qFdRzwqfHQHYDC2cG+LWhJE/Sb3fyj cfTzJy2R/c4XDzFZIG+KxWWwE37++3kf5U/Rp9SVSzZU4v67Y/lkCtk+8jtTTKN0 BaPk96wkU/QOslOI+yfnVHZizJ4muA0ojiYwzzwqt/TZ2bPCIPZ4BXbCoBSeJrXX 3d8mylCip9pgKEz6KRvOaMV1XHHvlirHFHe24/hT4HoIoeJJu9NkeWVcWgB+xUrn wPibG3jcjzuPnMCKcT/YxkWpP81eBmIcmDJ3ifYPGXXSzs2l25wF5Bh42jG+XuQI aVpGoqT7rDmLWXwuWlFXu5zLi6dsa+QZ -----END CERTIFICATE-----Generated at Fri Jun 20 16:45:54 2025 by rpki-client