$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: cJ43H8+Art63l2z4nIbgW/dOZb03tLz2nlq04Df91dE= Subject key identifier: 7F:3C:73:9E:1E:CB:74:7D:AA:99:FE:F6:2D:45:EA:FF:93:B5:20:9E Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 0437 Signing time: Thu 12 Jun 2025 23:55:00 +0000 Manifest this update: Thu 12 Jun 2025 23:55:00 +0000 Manifest next update: Thu 19 Jun 2025 23:55:00 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: dQ0d+FrUqnIZZ+UQJCPrOhmLTcnSM2BdKwJklXYBKXc=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Jun 12 23:55:00 2025 GMT Not After : Jun 19 23:55:00 2025 GMT Subject: CN=684b68d4-6f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:1a:a6:ea:bb:0b:69:7a:c2:39:4b:a9:5e: 8c:71:b4:bd:51:fe:22:d8:19:e5:42:91:d3:94:ca: cf:64:2c:86:95:fd:00:55:9b:b3:16:21:b5:26:d5: 35:24:7c:ee:ee:d1:56:b2:6f:d7:99:db:d4:1f:66: 1e:2a:7c:4f:0e:4f:0a:4b:4c:e3:71:0e:8f:17:ba: a2:fe:dd:59:8a:cc:bc:ec:15:9e:90:1a:c8:8a:4c: 80:e3:98:f2:43:a6:cd:f9:65:a2:fb:48:f2:42:a3: 69:56:15:c6:a4:29:74:64:cb:cf:fe:ef:38:14:c2: 9d:3e:c8:4a:92:00:85:29:82:2a:9c:ee:11:3a:75: 36:00:f7:25:f4:3f:a0:0c:90:47:26:d9:d3:49:2f: e5:9d:45:55:88:b5:d1:49:75:bc:80:3b:6b:23:ce: 55:44:da:65:c8:0a:ab:91:74:e0:cf:77:13:86:0e: e8:dc:f8:50:0d:e3:76:1b:b9:0b:28:8e:35:ed:98: 53:ae:85:f0:3e:41:4f:81:72:22:d4:65:9b:e0:50: de:da:c1:92:ce:e4:3a:2f:aa:d8:f8:b2:ce:68:0b: 68:23:0e:58:47:09:9e:8e:e4:8e:ee:b8:ba:c8:e0: 87:9d:28:20:b7:9e:26:68:15:76:14:ed:3d:2a:d8: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:73:9E:1E:CB:74:7D:AA:99:FE:F6:2D:45:EA:FF:93:B5:20:9E X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7f:d6:2b:15:e6:68:f7:47:5a:72:4f:19:06:80:23:c1:8f: 13:7e:5c:21:33:bd:d3:fe:d0:57:11:65:5b:c1:b5:01:4a:7c: 1f:8b:b8:87:f9:49:8b:50:b7:e2:66:3e:b1:85:4e:ba:69:e5: 94:21:f6:2b:6b:fb:c9:6e:bb:49:61:34:42:2b:66:1a:ef:35: 15:8b:7c:da:0d:1b:36:69:30:f7:c2:5a:8d:36:4d:04:05:15: 1d:3d:b8:e2:b4:1b:c7:34:c7:89:9a:bf:b2:25:75:40:ef:9a: 2d:a8:19:ad:3e:42:9d:0a:3d:cc:51:fd:a2:11:d0:a5:5d:58: 62:d9:aa:a1:50:2e:8c:a5:cf:94:99:1a:17:74:fb:77:6d:b0: 89:ef:ee:5d:de:0e:51:12:74:64:8c:67:f1:f0:c1:41:48:a5: af:d1:e2:cd:a1:6d:88:aa:6c:5f:46:30:ac:80:0d:11:50:89: aa:e7:50:51:9f:df:13:f8:13:8e:f6:05:18:d1:92:07:8a:b0: 76:b5:78:89:41:dc:4e:75:49:62:d6:63:40:62:68:15:12:9e: 49:98:10:01:8d:43:29:40:84:19:08:04:4f:43:eb:29:1b:56: aa:3e:35:17:69:3d:76:3a:7a:f7:7b:4c:c5:5a:6a:14:5c:8d: 09:fa:2c:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjUwNjEyMjM1NTAwWhcNMjUwNjE5MjM1NTAwWjAYMRYwFAYD VQQDEw02ODRiNjhkNC02ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV0apuq7C2l6wjlLqV6McbS9Uf4i2BnlQpHTlMrPZCyGlf0AVZuzFiG1JtU1 JHzu7tFWsm/XmdvUH2YeKnxPDk8KS0zjcQ6PF7qi/t1Zisy87BWekBrIikyA45jy Q6bN+WWi+0jyQqNpVhXGpCl0ZMvP/u84FMKdPshKkgCFKYIqnO4ROnU2APcl9D+g DJBHJtnTSS/lnUVViLXRSXW8gDtrI85VRNplyAqrkXTgz3cThg7o3PhQDeN2G7kL KI417ZhTroXwPkFPgXIi1GWb4FDe2sGSzuQ6L6rY+LLOaAtoIw5YRwmejuSO7ri6 yOCHnSggt54maBV2FO09KtjglQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH88c54e y3R9qpn+9i1F6v+TtSCeMB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBif9YrFeZo90dack8ZBoAjwY8TflwhM73T/tBXEWVbwbUBSnwfi7iH +UmLULfiZj6xhU66aeWUIfYra/vJbrtJYTRCK2Ya7zUVi3zaDRs2aTD3wlqNNk0E BRUdPbjitBvHNMeJmr+yJXVA75otqBmtPkKdCj3MUf2iEdClXVhi2aqhUC6Mpc+U mRoXdPt3bbCJ7+5d3g5REnRkjGfx8MFBSKWv0eLNoW2IqmxfRjCsgA0RUImq51BR n98T+BOO9gUY0ZIHirB2tXiJQdxOdUli1mNAYmgVEp5JmBABjUMpQIQZCARPQ+sp G1aqPjUXaT12Onr3e0zFWmoUXI0J+iya -----END CERTIFICATE-----Generated at Sat Jun 14 19:41:16 2025 by rpki-client