$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: 2G3tojpohIkQXI9T62g3HrZh4SNjQSHag8lWj4gnd10= Subject key identifier: 95:7F:DE:57:BB:C7:0E:0C:9C:5F:5A:95:E1:E8:D0:BA:2C:2C:C7:55 Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: C8 Signing time: Sun 15 Jun 2025 04:51:35 +0000 Manifest this update: Sun 15 Jun 2025 04:51:34 +0000 Manifest next update: Sun 22 Jun 2025 04:51:34 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: BOz7G3qzw69PL3/OpWqvVpgZmlwR1ePhaRAQa9+H2TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Jun 15 04:51:34 2025 GMT Not After : Jun 22 04:51:34 2025 GMT Subject: CN=684e5157-f76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:6b:dc:95:d5:76:fc:82:9d:f0:12:ea:76: 62:6f:78:24:bd:8b:c5:7e:e2:52:85:8e:95:db:5d: 36:90:4f:72:19:f6:e7:13:56:51:7d:bf:5e:c4:50: ce:97:d4:a7:c4:95:25:90:dc:2f:d3:39:d5:82:f1: 9f:44:2d:8d:11:2c:2d:5c:eb:44:8c:c6:1b:f7:ce: 48:d4:05:91:9b:ff:50:b3:c2:d9:c1:97:59:ae:28: 61:d2:b6:93:49:1d:56:31:8b:d5:ef:53:21:33:da: 65:d5:70:5b:5d:2e:6f:47:97:99:59:fe:9c:6b:10: 62:01:18:3a:57:8b:8c:8b:df:93:ae:e6:88:02:c0: 8f:53:9c:e1:48:54:0d:71:89:7f:ac:94:9c:75:ba: 0f:12:3a:db:74:6c:8d:31:c3:db:d9:79:c5:1a:ec: f7:b2:46:6c:9a:41:27:aa:19:01:b9:0c:6f:49:34: d4:14:ce:b0:1b:89:88:eb:ea:4e:c1:0a:79:9b:dd: b3:7f:39:12:a0:dd:64:d0:e6:5b:9a:ad:60:50:da: 0c:ff:73:40:37:8e:12:1e:26:aa:f0:58:16:94:88: de:39:16:34:6e:85:8f:e6:40:e1:25:fa:87:c3:52: 43:23:98:09:5e:f5:71:84:c4:b7:4e:96:fd:57:86: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7F:DE:57:BB:C7:0E:0C:9C:5F:5A:95:E1:E8:D0:BA:2C:2C:C7:55 X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:99:7f:7f:26:d5:ac:89:b7:e9:29:d3:00:7a:c1:d6:1e:e6: 23:c3:5a:11:be:d6:7a:20:5f:fe:bd:c6:d7:d4:78:be:97:5e: 2a:cb:ef:9b:5b:bf:e7:45:c4:7f:2e:6a:53:26:48:f5:c7:4c: b1:f4:a4:43:8c:8f:52:31:35:e5:40:12:6b:30:d1:97:1b:f2: 23:8d:76:5b:e4:1b:77:12:18:f4:5c:94:77:eb:a8:9b:fc:15: dd:46:b0:38:ac:88:66:8e:85:39:4d:4c:34:75:3a:02:72:f0: 97:36:44:77:5f:85:2b:1b:bc:de:3a:10:c9:18:ed:0a:cf:d5: dc:fd:cc:a9:5f:d8:11:ae:3c:02:70:ba:51:85:50:4c:0e:2b: fd:8b:5c:d0:23:a0:b2:3f:fc:17:fe:66:8f:7d:fa:f3:78:63: fb:d3:d8:26:8a:ca:dd:ea:48:2d:22:09:30:45:42:2f:36:45: 19:34:b1:c2:1c:72:2d:63:a4:a8:73:68:09:f6:6d:d5:a6:9a: f7:2b:00:60:38:d0:14:41:0c:a1:21:13:38:8b:26:14:b6:5d: 63:33:dd:7f:4b:49:fb:1a:b0:fb:91:90:30:15:28:03:2b:8f: 77:29:7d:7e:26:02:04:1f:54:f5:c6:78:ab:8e:e6:ca:5c:0c: b6:78:38:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUwNjE1MDQ1MTM0WhcNMjUwNjIyMDQ1MTM0WjAYMRYwFAYD VQQDEw02ODRlNTE1Ny1mNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Utr3JXVdvyCnfAS6nZib3gkvYvFfuJShY6V2102kE9yGfbnE1ZRfb9exFDO l9SnxJUlkNwv0znVgvGfRC2NESwtXOtEjMYb985I1AWRm/9Qs8LZwZdZrihh0raT SR1WMYvV71MhM9pl1XBbXS5vR5eZWf6caxBiARg6V4uMi9+TruaIAsCPU5zhSFQN cYl/rJScdboPEjrbdGyNMcPb2XnFGuz3skZsmkEnqhkBuQxvSTTUFM6wG4mI6+pO wQp5m92zfzkSoN1k0OZbmq1gUNoM/3NAN44SHiaq8FgWlIjeORY0boWP5kDhJfqH w1JDI5gJXvVxhMS3Tpb9V4af9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV/3le7 xw4MnF9aleHo0LosLMdVMB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+mX9/JtWsibfpKdMAesHWHuYjw1oRvtZ6IF/+vcbX1Hi+l14qy++b W7/nRcR/LmpTJkj1x0yx9KRDjI9SMTXlQBJrMNGXG/IjjXZb5Bt3Ehj0XJR366ib /BXdRrA4rIhmjoU5TUw0dToCcvCXNkR3X4UrG7zeOhDJGO0Kz9Xc/cypX9gRrjwC cLpRhVBMDiv9i1zQI6CyP/wX/maPffrzeGP709gmisrd6kgtIgkwRUIvNkUZNLHC HHItY6Soc2gJ9m3Vppr3KwBgONAUQQyhIRM4iyYUtl1jM91/S0n7GrD7kZAwFSgD K493KX1+JgIEH1T1xnirjubKXAy2eDj2 -----END CERTIFICATE-----Generated at Sun Jun 15 10:14:30 2025 by rpki-client