$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json) Hash identifier: 8x2CVlh4oCNRQhd18BZ7MFCYeoTQxGXAP2BHVSeqbzk= Subject key identifier: 48:CB:5B:71:D9:16:1F:D6:7E:CF:7B:FF:C9:BC:27:ED:3F:12:8F:18 Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 30B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft Manifest number: 309F Signing time: Fri 20 Jun 2025 15:28:15 +0000 Manifest this update: Fri 20 Jun 2025 15:28:15 +0000 Manifest next update: Fri 27 Jun 2025 15:28:15 +0000 Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: lUarS8X+P6WUYKmOqQ1FvTSSr1Lwq9bweSg2DU7Cyek=) 2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: 54WI7bxOwof+H1Cz8+uPiLZ+tzpprbk2GuCnR0w5MUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12472 (0x30b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Validity Not Before: Jun 20 15:28:15 2025 GMT Not After : Jun 27 15:28:15 2025 GMT Subject: CN=68557e0f-9b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:2d:0d:c7:93:0a:0b:44:66:55:ff:e3:1f: 53:fa:f6:6f:3e:e8:d8:ee:e3:84:0f:34:99:2d:ab: 8d:d5:2f:4c:81:7d:d3:04:1e:00:2e:0b:56:61:34: d7:ab:43:a7:fc:a4:75:c3:19:d9:c6:ba:aa:db:42: 02:9d:fc:ad:58:f2:b3:c4:70:35:e6:e7:7b:63:8d: bb:26:4e:53:9b:39:06:33:70:b6:5d:1b:7b:2f:ed: 80:64:ca:bd:8d:7d:18:64:93:66:8d:a4:17:a1:03: 1b:94:54:ba:bb:c5:93:9b:fa:59:23:fd:00:ab:13: e9:ee:f2:b7:fa:8f:2d:c5:23:4e:47:ef:47:f7:e0: 28:38:8e:ba:98:d6:4a:8e:74:86:0b:a2:0f:0f:18: a1:e7:6f:19:c0:98:6d:23:30:41:1e:26:6c:67:9b: 6c:cf:39:8e:cb:21:bd:ba:0d:1e:c5:11:1b:de:02: 59:a2:71:dd:6d:fe:b7:2c:c5:80:35:e2:65:18:31: 17:90:97:31:a5:68:f8:ae:27:50:ba:a3:70:08:86: d2:60:fc:45:ba:a0:87:75:fa:39:44:e3:0e:33:c2: 92:ad:42:64:7e:c3:a8:e7:74:bd:fc:6d:79:98:9b: 0c:ff:06:42:7d:22:5a:55:03:99:6a:54:7e:72:dc: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CB:5B:71:D9:16:1F:D6:7E:CF:7B:FF:C9:BC:27:ED:3F:12:8F:18 X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c5:ce:c9:3e:5b:6f:24:fa:42:a8:4e:f4:d5:0d:74:3b:21: c2:2d:5d:7a:3c:e6:77:2f:fc:52:0d:80:42:23:99:a6:af:6e: a0:c6:24:ff:b9:76:9f:75:55:b6:2b:95:c7:65:fd:21:83:1b: 5d:0c:73:a9:07:c3:66:64:e8:3c:95:c1:16:f4:a8:f7:22:5a: f2:fc:1e:04:29:44:03:e9:50:98:31:e6:53:ad:fc:4d:1d:e2: aa:fd:f4:4a:bb:d0:df:61:5a:dd:07:9c:e1:16:7f:59:4e:4a: 92:dd:e7:7f:10:9f:a8:b8:9a:b1:24:3b:ac:1e:73:1d:84:7b: d6:40:5d:1d:e3:1e:8e:87:b2:95:c4:e6:21:25:45:9c:91:1f: 42:f7:9a:b8:23:8e:c8:9d:78:0b:ff:99:f6:36:3c:ae:94:ec: 3f:81:90:10:ca:88:e6:98:51:e4:f9:48:e3:ec:2b:55:8d:18: b5:4b:c5:1e:3a:b0:48:66:65:3b:46:31:8e:fd:c2:07:73:86: db:a5:45:80:be:3f:ff:e5:f6:7a:6e:e8:fd:5d:27:42:de:5b: f2:83:aa:09:a8:0f:65:e9:75:70:d7:19:c5:4c:8d:2d:68:ff: 46:b8:12:52:f2:53:ff:0a:fc:7f:3a:ba:63:0b:dd:79:57:e2: c2:68:d7:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjUwNjIwMTUyODE1WhcNMjUwNjI3MTUyODE1WjAYMRYwFAYD VQQDEw02ODU1N2UwZi05YjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVAtDceTCgtEZlX/4x9T+vZvPujY7uOEDzSZLauN1S9MgX3TBB4ALgtWYTTX q0On/KR1wxnZxrqq20ICnfytWPKzxHA15ud7Y427Jk5TmzkGM3C2XRt7L+2AZMq9 jX0YZJNmjaQXoQMblFS6u8WTm/pZI/0AqxPp7vK3+o8txSNOR+9H9+AoOI66mNZK jnSGC6IPDxih528ZwJhtIzBBHiZsZ5tszzmOyyG9ug0exREb3gJZonHdbf63LMWA NeJlGDEXkJcxpWj4ridQuqNwCIbSYPxFuqCHdfo5ROMOM8KSrUJkfsOo53S9/G15 mJsM/wZCfSJaVQOZalR+ctxqmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjLW3HZ Fh/Wfs97/8m8J+0/Eo8YMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUEzNy82ODY4RTAyOEU3RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2 dmd1VW5lRHRnRGc1QmdWQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKxc7JPltvJPpCqE701Q10OyHCLV16POZ3L/xSDYBCI5mmr26gxiT/ uXafdVW2K5XHZf0hgxtdDHOpB8NmZOg8lcEW9Kj3Ilry/B4EKUQD6VCYMeZTrfxN HeKq/fRKu9DfYVrdB5zhFn9ZTkqS3ed/EJ+ouJqxJDusHnMdhHvWQF0d4x6Oh7KV xOYhJUWckR9C95q4I47InXgL/5n2NjyulOw/gZAQyojmmFHk+Ujj7CtVjRi1S8Ue OrBIZmU7RjGO/cIHc4bbpUWAvj//5fZ6buj9XSdC3lvyg6oJqA9l6XVw1xnFTI0t aP9GuBJS8lP/Cvx/OrpjC915V+LCaNd6 -----END CERTIFICATE-----Generated at Fri Jun 20 21:30:31 2025 by rpki-client