$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: sDKv0j688NDxkS2aomufpD/ZfjjaiI7LRfu6MasKpWQ= Subject key identifier: 18:C0:E2:DA:0D:41:75:73:87:0A:8B:9D:A4:AD:7F:C2:93:78:9C:5A Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A28 Signing time: Wed 18 Jun 2025 16:22:47 +0000 Manifest this update: Wed 18 Jun 2025 16:22:47 +0000 Manifest next update: Wed 25 Jun 2025 16:22:47 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: 24HdXaglWP30rpM7HAHo3TCywsN4yl3J2zYnaAy97JM=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: nliRTAkVAtJ8FfxKEHQS9HqVovT0tZ32fPM48Sk/l8k=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: EijUWJlocJ1+GHXxh5XIDZa+yD2/CG2e199ekLmtdEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6724 (0x1a44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Jun 18 16:22:47 2025 GMT Not After : Jun 25 16:22:47 2025 GMT Subject: CN=6852e7d7-a862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:fe:67:46:4e:01:23:24:d6:01:75:20:28: 19:ca:32:4e:a1:07:c6:af:94:16:18:b9:df:af:9e: 47:0a:03:4f:8d:d9:cd:ea:3d:64:a7:70:c8:c4:95: 2b:09:f3:54:5f:96:11:68:c7:e1:2b:58:cb:92:3c: 0c:89:21:83:bf:a9:23:6a:c0:03:94:93:fc:ed:29: 64:2f:e5:7d:e8:1c:a7:c3:cf:17:c7:79:d2:58:f4: bc:bd:21:45:b7:7e:df:64:21:45:2c:88:53:17:f7: 23:8f:f6:6f:32:15:42:fd:f4:94:02:24:e5:3f:51: 5e:75:7a:a2:ea:64:13:2a:05:c6:f4:71:1f:c8:7b: 0c:7e:4c:7f:1a:21:dd:4a:bc:03:3d:8d:04:d2:83: 8a:fe:63:b9:b9:21:20:d8:86:c5:40:e1:c6:49:f2: c4:3b:3e:4e:43:5b:5b:9a:af:86:20:62:15:54:ee: 2e:fd:d4:fc:86:85:b7:86:90:b6:86:34:2d:f4:01: c9:eb:e6:d3:b7:11:b2:5c:20:bb:27:2b:f1:84:86: e3:f9:1d:ba:19:29:f7:dc:61:cc:eb:ec:d9:e6:25: 4b:bb:e5:87:5d:b2:3e:69:08:e0:ef:99:46:63:8b: 37:33:ce:63:b7:d6:be:65:43:4d:15:9b:07:30:f1: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C0:E2:DA:0D:41:75:73:87:0A:8B:9D:A4:AD:7F:C2:93:78:9C:5A X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:58:5a:24:29:c8:36:4f:95:dd:e0:11:05:d6:40:99:13:4f: 27:2c:45:e8:2f:d6:21:36:09:e7:f6:3c:c0:bc:d4:15:28:95: db:cf:51:d9:50:bf:f8:8b:33:ef:5c:44:62:7d:d1:77:3a:bc: 89:ea:8e:42:55:0a:f6:4b:00:db:c7:09:67:ec:e3:40:09:ac: e5:29:4a:91:60:84:9f:19:8c:6a:51:28:03:40:64:c6:be:a5: 1c:4e:c2:1a:4b:c4:4b:8c:9a:12:65:ac:f1:d0:5a:5a:3c:6c: fd:7f:75:0f:a5:c4:9d:ad:d4:c1:ed:40:2f:cb:52:d4:92:f8: a6:a9:a0:33:6e:89:0c:95:35:06:df:ea:05:f0:b0:27:cc:aa: f2:e9:3c:17:4a:c4:46:b3:a0:81:d2:3c:c6:d6:df:e7:8a:f2: 18:8d:23:31:8c:79:c2:58:dc:55:bf:9a:f7:d4:99:fd:e0:d3: a2:46:d8:01:58:60:13:10:e5:cf:33:34:c5:50:d5:08:3c:03: aa:f6:65:1b:c9:c0:d4:20:08:16:cf:65:8c:f4:1f:70:21:04: 1f:6a:33:90:86:92:7f:88:fe:14:a5:a8:07:9a:8e:48:12:71: 89:ef:26:fb:ec:46:e4:7d:d1:65:f8:dc:bf:20:7e:c8:d7:6c: b4:cf:49:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUwNjE4MTYyMjQ3WhcNMjUwNjI1MTYyMjQ3WjAYMRYwFAYD VQQDEw02ODUyZTdkNy1hODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5W3+Z0ZOASMk1gF1ICgZyjJOoQfGr5QWGLnfr55HCgNPjdnN6j1kp3DIxJUr CfNUX5YRaMfhK1jLkjwMiSGDv6kjasADlJP87SlkL+V96Bynw88Xx3nSWPS8vSFF t37fZCFFLIhTF/cjj/ZvMhVC/fSUAiTlP1FedXqi6mQTKgXG9HEfyHsMfkx/GiHd SrwDPY0E0oOK/mO5uSEg2IbFQOHGSfLEOz5OQ1tbmq+GIGIVVO4u/dT8hoW3hpC2 hjQt9AHJ6+bTtxGyXCC7JyvxhIbj+R26GSn33GHM6+zZ5iVLu+WHXbI+aQjg75lG Y4s3M85jt9a+ZUNNFZsHMPHdoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjA4toN QXVzhwqLnaStf8KTeJxaMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLWFokKcg2T5Xd4BEF1kCZE08nLEXoL9YhNgnn9jzAvNQVKJXbz1HZ UL/4izPvXERifdF3OryJ6o5CVQr2SwDbxwln7ONACazlKUqRYISfGYxqUSgDQGTG vqUcTsIaS8RLjJoSZazx0FpaPGz9f3UPpcSdrdTB7UAvy1LUkvimqaAzbokMlTUG 3+oF8LAnzKry6TwXSsRGs6CB0jzG1t/nivIYjSMxjHnCWNxVv5r31Jn94NOiRtgB WGATEOXPMzTFUNUIPAOq9mUbycDUIAgWz2WM9B9wIQQfajOQhpJ/iP4UpagHmo5I EnGJ7yb77EbkfdFl+Ny/IH7I12y0z0l7 -----END CERTIFICATE-----Generated at Fri Jun 20 17:02:55 2025 by rpki-client