$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: lW4Qcd0PvFyZe/FFq38zQAKdkFZDd1TtL2raI4RhDag= Subject key identifier: 8E:20:4A:61:4B:77:8D:2A:0A:44:9B:49:EF:45:F2:7F:9C:C2:CA:0E Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 17E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 1790 Signing time: Sat 14 Jun 2025 16:33:21 +0000 Manifest this update: Sat 14 Jun 2025 16:33:20 +0000 Manifest next update: Sat 21 Jun 2025 16:33:20 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: TAx9N+RHNHxmb2W7keN39lZVaMpNs5Jrrhi8mq3aJMQ=) 2: 3F43565CB4A711EFA3D95012C4F9AE02.roa (hash: OELdD8LbVgXXbJX6bTHTOCI+oCTaXDP2euo2Avh/+Rk=) 3: C4C407A6ABFE11EF8BC3AC17C4F9AE02.roa (hash: EhC7Iw3SYEkIxbf/jSCiFbV/awgcX2mr9+KQdTNr1bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6112 (0x17e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125, serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: Jun 14 16:33:20 2025 GMT Not After : Jun 21 16:33:20 2025 GMT Subject: CN=684da450-3444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:62:82:a8:a2:4a:f1:d9:af:c2:69:35:27: e1:94:86:bc:a6:1f:68:ac:4d:b3:da:b7:6f:1d:bd: 0f:4a:7a:3b:6e:9f:1a:05:72:00:60:c1:e6:62:6d: 5d:91:f9:92:7d:db:f7:5f:49:9b:8f:5a:b7:ee:fb: fd:66:5f:30:fd:4f:0d:64:ef:b5:aa:1a:92:81:05: f8:02:46:77:26:9d:0c:a2:14:e2:1a:11:23:98:fd: 2b:91:65:37:77:8e:a7:9c:fa:4b:c2:15:82:b0:93: c6:c9:41:0d:bd:26:6a:32:2f:d2:61:44:1e:b7:27: 1a:87:1b:31:f8:38:e2:11:d5:5a:c7:5e:7c:be:ba: c6:ce:d9:53:1b:50:f6:b8:34:db:42:f3:bb:ca:0e: 34:d3:2f:be:15:06:b3:6d:de:88:0a:a2:69:ac:61: 87:cc:cf:8c:a1:85:5c:f1:5e:ae:7a:7e:8e:74:8e: 94:26:6d:bb:f9:f3:2c:61:6c:81:ea:80:fc:d8:e8: bd:d1:38:22:67:59:0b:3c:16:34:d0:95:55:19:6a: 71:4f:29:6d:db:3d:ff:bb:50:8f:88:d5:2d:da:93: 20:71:cd:f5:96:bf:fd:bd:0b:15:f9:d0:80:c4:b9: 0c:9f:5e:d8:b7:cd:d1:d9:b1:f9:66:f9:0f:12:89: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:20:4A:61:4B:77:8D:2A:0A:44:9B:49:EF:45:F2:7F:9C:C2:CA:0E X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8c:d5:24:d6:66:a3:5a:57:9c:72:b5:5d:d1:13:5d:13:97: 6a:e5:fd:1f:e1:60:3f:3e:ab:26:17:f4:42:0b:83:ae:0b:d0: af:6c:a3:4e:c4:4b:99:29:0c:82:79:bd:a7:33:54:9c:d9:38: f6:bd:0d:84:32:02:5d:8f:49:86:81:55:03:44:e4:b0:88:88: 01:95:c8:67:6e:dc:80:bf:01:7a:26:d8:5b:32:57:8f:7b:9a: 82:34:d3:d0:ad:0f:5c:77:c5:2f:19:05:35:02:92:3d:a1:b2: ef:16:cb:5d:52:e2:3a:06:fa:70:88:96:88:c1:93:fc:21:7b: 02:97:27:5b:62:19:27:02:cf:07:2b:8a:84:21:70:32:57:2e: 51:6d:a5:84:04:f0:9f:8c:45:a3:00:52:5d:78:07:bc:79:ac: 53:b4:de:45:73:93:e8:35:ae:95:bf:c5:c5:c7:22:51:da:0a: 90:31:21:f8:89:ca:b9:7d:b2:d1:ed:e6:20:49:67:f8:eb:5f: 34:b6:df:8e:38:75:a5:71:bb:98:29:11:dc:6b:cb:53:74:a9: b2:8f:72:b3:42:7e:ee:2e:ea:ee:0a:6f:33:97:fd:a2:43:d1: ca:21:b5:3a:2e:b2:b8:c5:84:1a:d3:b3:74:18:b2:66:58:c4: ba:e5:53:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjUwNjE0MTYzMzIwWhcNMjUwNjIxMTYzMzIwWjAYMRYwFAYD VQQDEw02ODRkYTQ1MC0zNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzitigqiiSvHZr8JpNSfhlIa8ph9orE2z2rdvHb0PSno7bp8aBXIAYMHmYm1d kfmSfdv3X0mbj1q37vv9Zl8w/U8NZO+1qhqSgQX4AkZ3Jp0MohTiGhEjmP0rkWU3 d46nnPpLwhWCsJPGyUENvSZqMi/SYUQetycahxsx+DjiEdVax158vrrGztlTG1D2 uDTbQvO7yg400y++FQazbd6ICqJprGGHzM+MoYVc8V6uen6OdI6UJm27+fMsYWyB 6oD82Oi90TgiZ1kLPBY00JVVGWpxTylt2z3/u1CPiNUt2pMgcc31lr/9vQsV+dCA xLkMn17Yt83R2bH5ZvkPEolnRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4gSmFL d40qCkSbSe9F8n+cwsoOMB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADjNUk1majWleccrVd0RNdE5dq5f0f4WA/PqsmF/RCC4OuC9CvbKNO xEuZKQyCeb2nM1Sc2Tj2vQ2EMgJdj0mGgVUDROSwiIgBlchnbtyAvwF6JthbMleP e5qCNNPQrQ9cd8UvGQU1ApI9obLvFstdUuI6BvpwiJaIwZP8IXsClydbYhknAs8H K4qEIXAyVy5RbaWEBPCfjEWjAFJdeAe8eaxTtN5Fc5PoNa6Vv8XFxyJR2gqQMSH4 icq5fbLR7eYgSWf46180tt+OOHWlcbuYKRHca8tTdKmyj3KzQn7uLuruCm8zl/2i Q9HKIbU6LrK4xYQa07N0GLJmWMS65VMJ -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:29 2025 by rpki-client