$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: nbOD0SDP8XRNoJ3fLa4w7zIMP6O5ad32ablitN+hZOE= Subject key identifier: E8:9F:73:19:4F:62:5B:CC:82:69:C1:99:59:71:E7:F1:B1:CF:61:F0 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 7E Signing time: Sun 15 Jun 2025 05:47:00 +0000 Manifest this update: Sun 15 Jun 2025 05:46:59 +0000 Manifest next update: Sun 22 Jun 2025 05:46:59 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: h+L+zz+jPYlvoKzY+mKWKy1TcG/lKVslr63qWeguN30=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Jun 15 05:46:59 2025 GMT Not After : Jun 22 05:46:59 2025 GMT Subject: CN=684e5e54-28fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:5c:38:b9:79:d8:b2:70:7e:b7:3d:8a:f5: c0:86:3f:f6:7c:d6:6d:47:bf:64:ab:42:d2:65:2c: e1:6f:cf:6c:13:e1:ca:a2:7e:1f:f5:c4:f1:7a:4f: 78:b5:f8:45:ab:b2:21:2b:5a:c5:4f:1c:fe:2c:92: e9:95:cd:c3:70:bd:19:3c:d2:e2:07:6d:49:16:37: de:fa:c0:36:fa:ef:f8:4e:08:ae:00:2b:41:86:84: 9d:96:ae:a2:8d:7c:34:27:d5:a0:01:a7:db:2c:45: 98:15:fd:79:e5:16:e4:d9:0e:23:05:8c:ed:a8:47: 2e:84:84:56:0a:2a:e1:ae:1b:66:a8:db:5d:d8:9f: 09:a6:1e:ff:ab:fd:26:6b:ee:d0:9f:80:00:5f:53: 36:62:50:70:bb:24:60:c6:bb:f1:8c:30:02:ef:d3: 4b:51:74:53:44:9a:c5:b6:ea:d0:2b:29:be:b6:be: 53:b2:32:10:96:7b:9d:3a:9b:1d:a6:3b:74:c6:f6: aa:c5:20:01:68:9f:67:65:2e:1f:10:e7:db:9d:bd: 1d:73:ea:17:c9:ae:84:ba:a1:eb:36:64:c8:95:d3: bd:72:6d:2c:2d:f9:be:ca:22:ec:fc:ba:b4:5a:94: 25:e7:13:fb:a5:af:7a:de:a3:4d:2b:00:60:8e:78: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9F:73:19:4F:62:5B:CC:82:69:C1:99:59:71:E7:F1:B1:CF:61:F0 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1d:dd:a4:2b:4b:69:81:a3:89:b7:ba:73:d4:d5:9b:5a:b2: a0:3e:dd:fd:a5:65:22:53:2b:f5:1e:c3:95:1b:21:59:c7:2e: 56:a6:1e:13:a4:12:34:87:8c:98:16:d9:b1:d3:47:ec:e4:a1: 83:7c:70:f1:ea:94:59:28:43:b4:34:4c:c0:7c:95:87:4c:6a: 3b:c2:49:a3:f4:62:35:32:52:c2:af:48:67:96:99:ed:56:bc: d1:08:de:aa:9d:ad:78:95:d8:cd:aa:d1:44:ca:42:e9:56:06: 67:ea:d1:20:1c:e4:f2:4d:5a:1c:03:02:dd:7e:06:23:b1:6a: b4:13:98:80:10:f2:c5:f2:58:b3:cc:44:d9:0d:66:04:da:1d: 76:86:38:3b:e8:a8:e4:6c:5c:1f:55:4c:b9:a6:ea:07:26:63: 2a:5e:7d:d8:ce:4e:d8:2b:15:41:5f:aa:34:89:64:12:af:5d: 0d:df:e8:de:74:6d:ec:9c:ab:ef:3b:17:d5:78:b2:6c:28:5a: 42:29:3c:3c:b9:be:26:73:9e:2b:fe:2a:05:8c:4b:17:46:9f: b7:41:46:c5:ba:13:a1:b3:66:1f:e6:28:7a:e4:f5:28:9b:35: fe:45:f8:63:37:5b:1a:dc:ef:86:a6:80:1e:2e:08:61:3d:52: fd:fe:c5:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUwNjE1MDU0NjU5WhcNMjUwNjIyMDU0NjU5WjAYMRYwFAYD VQQDEw02ODRlNWU1NC0yOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V9cOLl52LJwfrc9ivXAhj/2fNZtR79kq0LSZSzhb89sE+HKon4f9cTxek94 tfhFq7IhK1rFTxz+LJLplc3DcL0ZPNLiB21JFjfe+sA2+u/4TgiuACtBhoSdlq6i jXw0J9WgAafbLEWYFf155Rbk2Q4jBYztqEcuhIRWCirhrhtmqNtd2J8Jph7/q/0m a+7Qn4AAX1M2YlBwuyRgxrvxjDAC79NLUXRTRJrFturQKym+tr5TsjIQlnudOpsd pjt0xvaqxSABaJ9nZS4fEOfbnb0dc+oXya6EuqHrNmTIldO9cm0sLfm+yiLs/Lq0 WpQl5xP7pa963qNNKwBgjnhq0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOifcxlP YlvMgmnBmVlx5/Gxz2HwMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Hd2kK0tpgaOJt7pz1NWbWrKgPt39pWUiUyv1HsOVGyFZxy5Wph4T pBI0h4yYFtmx00fs5KGDfHDx6pRZKEO0NEzAfJWHTGo7wkmj9GI1MlLCr0hnlpnt VrzRCN6qna14ldjNqtFEykLpVgZn6tEgHOTyTVocAwLdfgYjsWq0E5iAEPLF8liz zETZDWYE2h12hjg76KjkbFwfVUy5puoHJmMqXn3Yzk7YKxVBX6o0iWQSr10N3+je dG3snKvvOxfVeLJsKFpCKTw8ub4mc54r/ioFjEsXRp+3QUbFuhOhs2Yf5ih65PUo mzX+RfhjN1sa3O+GpoAeLghhPVL9/sVS -----END CERTIFICATE-----Generated at Sun Jun 15 23:20:02 2025 by rpki-client