$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: Iuk0KeccHvNUoMYQVgw/nrFo6Fgt3VE1nMVYLtgmIBA= Subject key identifier: 34:45:62:BA:5B:03:09:53:1C:4D:71:20:7B:DE:EA:24:DE:EA:3B:43 Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 61 Signing time: Thu 07 Aug 2025 07:42:07 +0000 Manifest this update: Thu 07 Aug 2025 07:42:07 +0000 Manifest next update: Thu 14 Aug 2025 07:42:07 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: Fo9TTKr50j5THsFJkEm/FhFN5oKAvz3XDOQ3gMGfPco=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: HEKgeQjMhMYDkC2JrcKXdt5Voc5+W7Do5jSGbSkekDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Aug 7 07:42:07 2025 GMT Not After : Aug 14 07:42:07 2025 GMT Subject: CN=689458cf-a256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:a8:92:5c:1f:dd:49:3f:03:d7:35:0e:50: 06:50:8e:03:b4:6c:bc:d8:bd:38:11:a1:25:7b:ee: 7a:2b:12:6b:05:ed:9c:a1:0a:89:10:72:d4:30:66: aa:b2:15:a6:67:b8:71:56:9b:2d:d8:01:14:0b:9d: ec:6e:09:1c:a6:bf:ff:1b:9c:2a:92:7e:af:ba:51: e0:9a:c7:9c:8d:d7:bb:7d:b7:c3:7b:69:27:87:2b: 29:c2:79:92:97:25:aa:5f:d6:22:73:f5:23:26:84: 91:c3:23:27:b1:f6:02:3f:97:2d:ba:39:f6:6e:91: 50:fb:69:31:61:ef:4d:13:3e:77:f7:29:a6:63:81: 3e:99:91:ed:81:d5:af:e1:b0:5e:8f:b8:54:e8:b6: 59:55:5d:78:99:74:37:12:ff:7a:6c:c2:09:e2:78: 94:c0:95:77:4b:b8:9c:4a:8c:09:ec:7a:0a:69:04: a9:39:c6:aa:15:c1:6c:1f:c4:69:d7:99:02:fd:d4: ce:c1:c4:a5:dc:d5:c8:f5:f3:5a:9e:b3:29:20:1c: 35:b0:2d:20:68:17:b8:df:ef:0e:1f:ba:41:fe:75: 3d:72:6c:9a:3e:06:a9:eb:06:d3:55:53:54:27:ea: f7:b5:b9:dd:aa:69:0f:e2:90:08:43:21:db:61:1a: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:45:62:BA:5B:03:09:53:1C:4D:71:20:7B:DE:EA:24:DE:EA:3B:43 X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:69:42:bf:5e:b2:d6:a9:67:e9:91:da:de:96:55:11:82:aa: 28:82:5f:d0:35:a9:39:52:95:93:09:68:79:c1:43:97:8b:e2: d1:39:04:9d:97:a6:4f:4c:f9:87:58:64:3d:ec:79:9c:d5:57: 09:db:d6:18:db:1c:21:3d:3e:13:7e:43:bf:15:ae:05:b5:b4: b9:26:69:1f:bb:0b:50:45:b3:56:a2:ea:8b:75:a6:e7:a7:09: 65:41:08:53:81:fa:c2:bd:18:be:57:bf:55:35:5a:22:56:65: a0:01:10:b6:20:6d:8a:e0:9d:c4:0e:c1:c5:ca:94:fa:12:0a: 94:8e:70:cc:78:d3:0f:de:1b:24:73:94:6f:55:a4:80:da:a6: b1:2d:93:d2:c4:29:df:9d:bc:3f:7e:74:54:62:ce:2b:bd:3e: 94:00:29:2d:c8:99:01:a8:88:63:df:67:2b:3d:21:e1:77:7f: d5:97:51:98:41:2d:c2:8a:77:5b:12:5d:17:3d:06:69:c3:33: 74:48:28:a3:48:03:bd:86:f5:d4:fa:7a:c1:a6:54:4e:a4:31: b6:4a:c1:2e:60:97:c5:ed:1c:33:93:c0:63:80:fe:54:7a:b8: a0:5f:e1:74:0e:c6:c2:0f:e6:69:73:be:23:c4:c2:67:18:3e: b1:18:f7:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUMzMTExMC8GA1UEBRMoNjdENzlDM0IxMTE2RDM2RkI5RTE3MUQ2NjU4RjhGNDNC NTNDNzJGQTAeFw0yNTA4MDcwNzQyMDdaFw0yNTA4MTQwNzQyMDdaMBgxFjAUBgNV BAMTDTY4OTQ1OGNmLWEyNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiVqiSXB/dST8D1zUOUAZQjgO0bLzYvTgRoSV77norEmsF7ZyhCokQctQwZqqy FaZnuHFWmy3YARQLnexuCRymv/8bnCqSfq+6UeCax5yN17t9t8N7aSeHKynCeZKX Japf1iJz9SMmhJHDIyex9gI/ly26OfZukVD7aTFh700TPnf3KaZjgT6Zke2B1a/h sF6PuFTotllVXXiZdDcS/3pswgnieJTAlXdLuJxKjAnsegppBKk5xqoVwWwfxGnX mQL91M7BxKXc1cj181qesykgHDWwLSBoF7jf7w4fukH+dT1ybJo+BqnrBtNVU1Qn 6ve1ud2qaQ/ikAhDIdthGjTdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNEViulsD CVMcTXEge97qJN7qO0MwHwYDVR0jBBgwFoAUZ9ecOxEW02+54XHWZY+PQ7U8cvow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQzMxLzNDRjUzNjIyRTRB NDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjllY094RVcwMi01NFhIV1pZLVBRN1U4Y3ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QzMxLzNDRjUzNjIyRTRBNDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDIt NTRYSFdaWS1QUTdVOGN2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKFpQr9estapZ+mR2t6WVRGCqiiCX9A1qTlSlZMJaHnBQ5eL4tE5BJ2X pk9M+YdYZD3seZzVVwnb1hjbHCE9PhN+Q78VrgW1tLkmaR+7C1BFs1ai6ot1puen CWVBCFOB+sK9GL5Xv1U1WiJWZaABELYgbYrgncQOwcXKlPoSCpSOcMx40w/eGyRz lG9VpIDaprEtk9LEKd+dvD9+dFRiziu9PpQAKS3ImQGoiGPfZys9IeF3f9WXUZhB LcKKd1sSXRc9BmnDM3RIKKNIA72G9dT6esGmVE6kMbZKwS5gl8XtHDOTwGOA/lR6 uKBf4XQOxsIP5mlzviPEwmcYPrEY9wI= -----END CERTIFICATE-----Generated at Fri Aug 8 00:07:18 2025 by rpki-client