$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: u6+L5zvoVDR8SXuwkUnksSdW7WZNhLVYxr6A+VOlEK8= Subject key identifier: 7B:A8:1F:D3:0A:1C:B7:27:73:71:5F:09:47:E5:2E:3E:57:6B:AB:F2 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 0867 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 085B Signing time: Sat 14 Jun 2025 20:31:28 +0000 Manifest this update: Sat 14 Jun 2025 20:31:28 +0000 Manifest next update: Sat 21 Jun 2025 20:31:28 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: lPDrC49gASau+9eQUt8BmG+aoM1OjMbKeBNBWM/Zl6o=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: f9tQPToB76p1pPXGROGF6QphrQQvfLBw4Gw3PGjwt1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Jun 14 20:31:28 2025 GMT Not After : Jun 21 20:31:28 2025 GMT Subject: CN=684ddc20-fd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ab:78:ac:96:a3:c6:4a:f7:35:2f:95:c2:93: 51:7b:af:06:98:7b:4c:77:73:1f:af:3d:69:a0:35: a0:3a:ee:7f:88:64:ea:2e:20:85:81:46:48:72:20: 9f:ee:b5:0c:ae:fd:f2:2b:51:11:84:54:98:e9:65: db:d9:81:0e:aa:27:c6:b4:04:3e:b2:18:7d:d6:0c: 16:6a:00:47:51:ed:35:39:73:4e:08:b2:d3:75:31: ba:d5:9a:0a:46:82:e5:98:bd:97:8f:f0:1f:5a:2d: aa:39:a7:bc:66:79:0e:ef:1d:83:d3:c7:32:70:f3: 99:19:30:ed:0f:52:d4:3a:ab:d3:23:90:5c:c7:4b: d4:f3:21:10:cc:f4:1f:30:07:0c:ed:f1:a4:ff:b8: 96:4f:94:2e:b6:ce:73:38:03:bf:bf:7f:ce:47:eb: fa:14:3e:58:75:cd:8e:6d:3e:ef:71:ba:d3:88:d7: a2:fe:06:b1:b6:3e:03:68:6a:30:07:9e:30:0c:ce: 44:6a:e2:c2:ca:45:91:29:0b:12:17:29:c2:6c:4a: 7e:ae:e7:d2:d8:53:46:a8:4f:41:94:75:1f:bd:b7: 52:ca:92:15:c9:29:de:49:94:4e:8b:e6:a5:c0:ed: 52:0f:59:6a:e3:78:54:78:05:d2:55:36:9a:f6:66: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A8:1F:D3:0A:1C:B7:27:73:71:5F:09:47:E5:2E:3E:57:6B:AB:F2 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:da:77:8b:71:64:01:78:3c:ef:ee:ac:e1:da:75:52:f1:c8: c2:b6:20:6f:b7:8f:da:54:9e:59:d9:44:90:83:af:b3:a9:a5: 28:25:e7:c9:d9:b7:79:cc:60:c8:d8:d3:c4:13:2e:55:e3:a6: e3:45:aa:07:c1:e8:67:91:5f:b2:4a:b0:9e:90:8d:a0:57:85: a8:fa:d4:37:e2:5f:5e:02:13:44:34:97:a2:a1:a4:aa:e5:9f: ed:4f:c4:1c:8b:67:47:72:41:7a:4a:76:f7:12:87:8b:43:1d: 60:a1:d8:d1:77:90:7d:f5:a0:d1:59:91:c9:b8:71:f1:bf:c5: 7b:0f:fb:9f:63:f8:26:ab:ce:6a:96:c1:20:70:bb:29:fc:9d: e0:65:88:d0:56:da:1a:36:34:10:eb:af:74:98:8c:12:ca:52: 61:31:1d:1d:52:b0:98:bf:3d:ce:2f:4c:6d:03:84:8e:8d:a3: 22:3c:21:c7:ac:ba:3d:8a:38:70:4e:ec:bd:75:16:cd:b3:de: 19:88:74:21:3f:c7:a2:20:84:89:b8:13:8c:76:5b:e6:e6:8b: c7:6b:f3:1e:74:d5:20:c2:cd:d4:e2:2b:1b:fc:49:72:96:42: 2d:d2:6b:80:58:b8:aa:3f:1c:1d:c4:1d:b6:8d:b7:37:54:72: 35:e4:81:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUwNjE0MjAzMTI4WhcNMjUwNjIxMjAzMTI4WjAYMRYwFAYD VQQDEw02ODRkZGMyMC1mZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qt4rJajxkr3NS+VwpNRe68GmHtMd3Mfrz1poDWgOu5/iGTqLiCFgUZIciCf 7rUMrv3yK1ERhFSY6WXb2YEOqifGtAQ+shh91gwWagBHUe01OXNOCLLTdTG61ZoK RoLlmL2Xj/AfWi2qOae8ZnkO7x2D08cycPOZGTDtD1LUOqvTI5Bcx0vU8yEQzPQf MAcM7fGk/7iWT5Quts5zOAO/v3/OR+v6FD5Ydc2ObT7vcbrTiNei/gaxtj4DaGow B54wDM5EauLCykWRKQsSFynCbEp+rufS2FNGqE9BlHUfvbdSypIVySneSZROi+al wO1SD1lq43hUeAXSVTaa9mYzfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuoH9MK HLcnc3FfCUflLj5Xa6vyMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN2neLcWQBeDzv7qzh2nVS8cjCtiBvt4/aVJ5Z2USQg6+zqaUoJefJ 2bd5zGDI2NPEEy5V46bjRaoHwehnkV+ySrCekI2gV4Wo+tQ34l9eAhNENJeioaSq 5Z/tT8Qci2dHckF6Snb3EoeLQx1godjRd5B99aDRWZHJuHHxv8V7D/ufY/gmq85q lsEgcLsp/J3gZYjQVtoaNjQQ6690mIwSylJhMR0dUrCYvz3OL0xtA4SOjaMiPCHH rLo9ijhwTuy9dRbNs94ZiHQhP8eiIISJuBOMdlvm5ovHa/MedNUgws3U4isb/Ely lkIt0muAWLiqPxwdxB22jbc3VHI15IE5 -----END CERTIFICATE-----Generated at Mon Jun 16 19:26:19 2025 by rpki-client