$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: FIcadHxETaKOGTWtKrI+Z+AIdyT1Eh++zIPHw5caWPQ= Subject key identifier: E8:3C:EF:80:C1:28:63:7D:0F:1E:7C:F2:12:4B:9E:AF:F9:B1:7E:FF Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: E0 Signing time: Sun 15 Jun 2025 04:37:14 +0000 Manifest this update: Sun 15 Jun 2025 04:37:14 +0000 Manifest next update: Sun 22 Jun 2025 04:37:14 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: v+X6AVTWaG/2VZQ5YEPBNl/l9jtOdb2WPQ8XgYvlOKk=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: 6LBO3myStmMJStc10q3AtZjxwkWij6Z9eqgSR2m1lpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E, serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: Jun 15 04:37:14 2025 GMT Not After : Jun 22 04:37:14 2025 GMT Subject: CN=684e4dfa-458f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:3d:a3:bb:7a:18:1a:91:10:53:a2:0a:d0: d7:9d:3a:67:ad:af:11:2e:55:43:a8:ba:02:9b:df: 87:cb:5f:aa:a8:91:7d:51:c3:5c:48:c2:ae:aa:a4: 18:c4:45:74:4e:fe:4f:22:b0:d8:0c:5d:3d:1f:5d: c6:5e:23:3f:da:13:6c:c8:4f:96:41:2d:1c:8a:07: 5a:b0:3d:cb:56:68:a7:d4:47:67:94:27:8b:83:92: 85:cc:01:f7:3a:2a:87:1e:67:74:9b:99:6f:7f:98: ad:33:7e:b8:67:65:f2:f0:03:e5:0b:6e:fe:07:2d: ca:65:4e:a5:6f:ca:83:90:0c:2f:ae:ba:aa:ec:56: cd:c7:2f:64:2b:f3:8f:a0:5d:11:9c:e7:ea:3b:c1: cc:9e:b8:3a:41:99:c9:b2:b4:a8:36:fc:53:1e:bd: c8:ec:4d:72:08:60:34:6c:6a:0a:f9:d5:54:68:f3: 55:d8:bf:de:05:97:69:12:0b:8f:ce:2b:c6:9a:9c: e8:87:c8:e2:c6:8b:c4:0f:1a:d7:b3:0a:15:4f:db: 18:92:97:37:80:7a:5f:02:05:e5:33:fb:38:4d:64: 33:fa:dc:7e:1c:23:35:be:3f:84:38:79:d1:1c:6d: 87:cb:b8:db:e4:d0:91:09:82:bc:61:02:e8:14:45: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3C:EF:80:C1:28:63:7D:0F:1E:7C:F2:12:4B:9E:AF:F9:B1:7E:FF X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0f:84:8d:8b:f5:e7:0f:55:96:4b:24:36:5b:44:d5:77:40: 4f:df:b4:0b:7b:b4:65:fc:df:e9:25:aa:3e:bd:c4:50:88:de: e1:5d:ca:9d:10:12:35:0c:0e:b6:f7:1b:5f:77:3d:ac:9c:04: 7c:bf:6a:03:45:be:3f:47:b1:30:8b:5e:92:e7:19:79:a0:a0: 96:f7:17:60:51:f3:8f:67:45:5f:ef:ab:16:c2:43:d2:9b:03: 8c:2a:b1:ba:e2:4f:50:ce:2f:25:de:66:a4:e0:76:51:64:67: 0d:a6:8e:7d:1b:2a:67:24:73:4b:cf:c7:a0:fd:78:21:91:8c: 51:74:fc:5d:0b:30:4f:86:da:cd:30:98:d8:24:15:c2:8a:4e: 45:12:90:d5:f6:76:e4:3c:07:48:65:2a:ee:16:1f:36:5a:e1: da:51:1c:9a:c2:5d:46:10:26:e0:2f:11:01:c4:d7:c3:a5:39: ac:65:8c:3b:6c:51:5f:e6:08:65:77:04:c7:dd:80:5f:27:4c: 86:09:ad:6c:15:57:43:9b:75:e5:97:8f:b7:96:dd:40:c3:38: 8d:79:97:68:a4:24:50:ee:21:b6:1a:4a:e9:33:ab:7b:ae:7f: e8:39:5b:66:90:5f:42:e4:a9:7a:9f:51:8c:fc:21:f6:97:fb: 4a:69:74:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBNEUxMTAvBgNVBAUTKDY1QjQzNTJGQzVCNzREMzFENzc5NzM2RkNGRTdGNjQx QkFDNzNFQjIwHhcNMjUwNjE1MDQzNzE0WhcNMjUwNjIyMDQzNzE0WjAYMRYwFAYD VQQDEw02ODRlNGRmYS00NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6k9o7t6GBqREFOiCtDXnTpnra8RLlVDqLoCm9+Hy1+qqJF9UcNcSMKuqqQY xEV0Tv5PIrDYDF09H13GXiM/2hNsyE+WQS0cigdasD3LVmin1EdnlCeLg5KFzAH3 OiqHHmd0m5lvf5itM364Z2Xy8APlC27+By3KZU6lb8qDkAwvrrqq7FbNxy9kK/OP oF0RnOfqO8HMnrg6QZnJsrSoNvxTHr3I7E1yCGA0bGoK+dVUaPNV2L/eBZdpEguP zivGmpzoh8jixovEDxrXswoVT9sYkpc3gHpfAgXlM/s4TWQz+tx+HCM1vj+EOHnR HG2Hy7jb5NCRCYK8YQLoFEUmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg874DB KGN9Dx588hJLnq/5sX7/MB8GA1UdIwQYMBaAFGW0NS/Ft00x13lzb8/n9kG6xz6y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0E0RS83NjJGRTY0NEYx MzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RUSFhlWE52ei1mMlFickhQ ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0E0RS83NjJGRTY0NEYxMzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RU SFhlWE52ei1mMlFickhQckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdD4SNi/XnD1WWSyQ2W0TVd0BP37QLe7Rl/N/pJao+vcRQiN7hXcqd EBI1DA629xtfdz2snAR8v2oDRb4/R7Ewi16S5xl5oKCW9xdgUfOPZ0Vf76sWwkPS mwOMKrG64k9Qzi8l3mak4HZRZGcNpo59GypnJHNLz8eg/XghkYxRdPxdCzBPhtrN MJjYJBXCik5FEpDV9nbkPAdIZSruFh82WuHaURyawl1GECbgLxEBxNfDpTmsZYw7 bFFf5ghldwTH3YBfJ0yGCa1sFVdDm3Xll4+3lt1AwziNeZdopCRQ7iG2GkrpM6t7 rn/oOVtmkF9C5Kl6n1GM/CH2l/tKaXQx -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:29 2025 by rpki-client