$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: WnwZMcYmMaorT62/yYEE8rjnb0vPOXebl7+XNhpu0l8= Subject key identifier: 2F:4A:6A:9D:E1:D5:BE:7B:02:D7:35:CF:8F:78:FC:DD:E2:83:6A:91 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 04CD Signing time: Thu 12 Jun 2025 23:23:14 +0000 Manifest this update: Thu 12 Jun 2025 23:23:13 +0000 Manifest next update: Thu 19 Jun 2025 23:23:13 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: nkZ1Sdmo81ewgUe+NOUXROPpvioIPK679R3XqHP9Qys=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: Jun 12 23:23:13 2025 GMT Not After : Jun 19 23:23:13 2025 GMT Subject: CN=684b6162-94f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:68:49:5b:13:8d:ac:d6:0b:e0:da:03:80: ac:38:dc:00:a1:02:60:cf:b4:c3:53:7c:b7:27:a8: cb:be:62:0b:39:fc:c0:36:7c:19:ef:36:60:60:d3: 76:1f:4c:9d:13:36:0d:c9:af:67:76:a6:57:b3:ef: 0e:41:1d:29:54:74:03:ed:d5:6a:b9:7c:be:b7:00: d5:27:0e:50:b8:9d:aa:22:4f:d1:4b:cb:d2:ae:83: 82:8e:5b:b8:16:8c:7a:45:92:cc:67:0f:96:a6:49: 90:74:76:4e:0b:ab:62:c3:a5:97:34:7a:9b:36:62: 8e:ab:14:05:df:3b:93:d9:be:5a:0d:e0:b7:ab:77: ae:aa:6b:68:b6:ad:15:3e:8d:ab:58:65:8f:60:d8: 2d:0c:57:f2:60:4e:4f:50:50:a4:e6:11:93:e7:b9: 68:20:9f:29:42:3a:60:bd:52:a4:3c:d8:d1:59:4a: 2b:23:3e:ee:f8:65:84:31:22:58:69:02:f9:0c:56: 15:65:3b:f4:3f:2f:d2:e9:18:63:67:5e:c3:a7:ad: c7:5b:65:fd:07:08:c5:da:3d:29:64:1d:fa:75:fb: a1:ce:21:ef:6d:a9:eb:b8:99:ac:d3:30:c7:66:7b: cd:bd:79:c6:36:83:74:e4:6e:f3:5b:9a:06:61:c6: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:6A:9D:E1:D5:BE:7B:02:D7:35:CF:8F:78:FC:DD:E2:83:6A:91 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9a:80:85:af:2b:d2:4d:d5:22:42:68:16:5b:71:c7:41:17: d5:32:ca:f9:12:bb:de:f3:bc:b9:3e:10:71:90:9e:04:67:5a: 50:68:90:1f:c5:94:d1:b5:79:cc:f8:95:30:1f:38:97:fa:c6: c0:8c:fa:79:ec:9b:63:01:50:36:df:9b:a8:e4:fc:80:87:fe: da:85:39:9d:e4:81:8b:37:c3:92:da:c8:dc:f6:f7:61:d5:96: 1e:2b:82:51:92:8f:d2:26:b1:2a:e7:b3:c0:83:f1:f9:03:40: 8e:30:ba:d6:32:5b:ce:43:b6:6d:5c:b5:46:a5:af:26:ef:8e: bc:85:5a:0c:66:eb:ec:f0:7b:a3:d5:5d:42:f6:67:57:f2:a5: 09:94:22:7f:cb:cf:10:71:dd:97:f4:26:16:22:6a:f0:cc:ce: 2a:c7:de:d4:28:97:78:bb:72:f0:f1:44:ab:6a:87:6f:6f:27: d9:c7:83:c0:18:0c:dc:c8:b3:a0:ac:e4:f1:52:69:38:c3:fe: 0e:fd:f3:b9:ab:75:37:6d:7d:46:b1:5f:ac:1b:1d:ca:be:ba: b5:f5:ea:c6:0a:d5:46:61:ee:11:2d:9c:aa:fc:44:e2:7d:ea: cf:db:1d:bd:64:dd:3b:6e:e1:20:2a:47:a3:78:66:1c:74:ba: a7:7b:59:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUwNjEyMjMyMzEzWhcNMjUwNjE5MjMyMzEzWjAYMRYwFAYD VQQDEw02ODRiNjE2Mi05NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SloSVsTjazWC+DaA4CsONwAoQJgz7TDU3y3J6jLvmILOfzANnwZ7zZgYNN2 H0ydEzYNya9ndqZXs+8OQR0pVHQD7dVquXy+twDVJw5QuJ2qIk/RS8vSroOCjlu4 Fox6RZLMZw+WpkmQdHZOC6tiw6WXNHqbNmKOqxQF3zuT2b5aDeC3q3euqmtotq0V Po2rWGWPYNgtDFfyYE5PUFCk5hGT57loIJ8pQjpgvVKkPNjRWUorIz7u+GWEMSJY aQL5DFYVZTv0Py/S6RhjZ17Dp63HW2X9BwjF2j0pZB36dfuhziHvbanruJms0zDH ZnvNvXnGNoN05G7zW5oGYcYC+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9Kap3h 1b57Atc1z494/N3ig2qRMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsmoCFryvSTdUiQmgWW3HHQRfVMsr5Erve87y5PhBxkJ4EZ1pQaJAf xZTRtXnM+JUwHziX+sbAjPp57JtjAVA235uo5PyAh/7ahTmd5IGLN8OS2sjc9vdh 1ZYeK4JRko/SJrEq57PAg/H5A0COMLrWMlvOQ7ZtXLVGpa8m7468hVoMZuvs8Huj 1V1C9mdX8qUJlCJ/y88Qcd2X9CYWImrwzM4qx97UKJd4u3Lw8USraodvbyfZx4PA GAzcyLOgrOTxUmk4w/4O/fO5q3U3bX1GsV+sGx3Kvrq19erGCtVGYe4RLZyq/ETi ferP2x29ZN07buEgKkejeGYcdLqne1kt -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:12 2025 by rpki-client