$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json) Hash identifier: F7u7uRUJnea/B0pLQm/7joxlEn12qZXDfDGqP3jI8YQ= Subject key identifier: 8C:FD:F1:72:63:1C:E4:B2:94:5C:6C:2D:AF:5E:B3:DA:8F:F8:A6:F7 Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft Manifest number: 62 Signing time: Thu 19 Jun 2025 06:26:24 +0000 Manifest this update: Thu 19 Jun 2025 06:26:24 +0000 Manifest next update: Thu 26 Jun 2025 06:26:24 +0000 Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: /fG564RgbPPM5b6QzSqv9fV+sqpmC0RMPtb8qHN/30E=) 2: 9C532970B72311EFBA17AB72C4F9AE02.roa (hash: V8Oi/Zt9u9c7P3V5ZEct3r3+92oknInn9a1C4JSyxzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Jun 19 06:26:24 2025 GMT Not After : Jun 26 06:26:24 2025 GMT Subject: CN=6853ad90-23b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:14:57:13:df:1b:f1:5b:63:37:a3:b4:38: dd:51:a4:f5:f1:21:7f:df:12:a5:fc:de:f9:85:c9: 01:a2:dd:07:16:4a:f5:01:b9:47:3f:20:da:1b:ce: 76:da:ea:c8:7a:c4:e5:c4:d9:73:0c:f5:a4:09:ec: b3:7f:5b:25:21:2f:0d:1a:92:88:be:3a:9f:6d:33: ff:09:84:ea:a4:ce:04:8e:7b:16:45:f9:5f:bd:01: 35:55:ce:98:a1:02:91:dc:5c:85:be:c5:9c:40:10: 81:2b:8d:3c:c0:82:e5:64:65:f0:1a:77:1b:e0:1d: 78:43:ec:e0:73:e2:46:4c:4c:f4:70:6e:77:f5:7f: 07:1a:dc:54:2c:d7:b5:49:07:5c:fa:67:13:21:50: f9:e1:b5:6c:f5:8e:de:1e:70:aa:e9:4e:a8:00:25: d2:c6:cd:5f:a8:c5:db:60:13:c4:ec:af:33:85:8f: fe:4f:c8:00:27:fb:ae:6a:3f:ea:73:84:0e:5c:b6: e2:a1:71:b2:fc:e8:e0:7a:34:0a:61:fb:e4:f2:9f: dc:77:4c:ce:01:fd:67:a1:b2:33:1f:38:70:9a:89: 42:22:a7:a5:76:ab:25:e7:b4:84:3c:d8:30:6b:1e: 38:37:c6:fc:ce:cf:86:3d:de:94:32:b0:77:0a:7b: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FD:F1:72:63:1C:E4:B2:94:5C:6C:2D:AF:5E:B3:DA:8F:F8:A6:F7 X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ce:67:ca:3f:33:5d:cb:c3:6f:b9:8f:af:c5:54:df:74:28: da:fc:a8:49:a7:3a:55:3f:ac:6f:c5:40:3b:1a:6c:3f:e3:7e: ef:4f:bc:e7:ff:d4:37:ea:1c:4e:16:47:e3:e1:e3:06:69:89: c6:62:c6:d4:49:a2:69:64:66:b9:61:fe:8b:95:34:da:7f:2c: 21:7d:f9:42:cf:3a:c0:85:69:89:b7:c1:65:c5:64:63:bc:6b: 85:0e:74:6b:17:26:32:6b:d5:38:e9:16:e8:df:43:ec:75:ce: e5:55:b9:9f:75:cb:2d:cc:b6:af:53:3f:31:5c:ea:a0:9c:e4: 6f:e9:0e:bf:43:2c:f1:0a:f7:06:c0:55:27:c6:bd:e2:94:25: e6:8a:68:73:c3:12:7f:a0:e9:0f:96:24:df:7f:0f:ea:49:67: c5:29:58:b4:4a:97:3f:b8:b6:72:9a:d0:fb:47:e0:54:a3:b9: 19:16:c0:c9:df:d0:5a:50:e1:a6:6d:1b:9b:d2:c2:ad:23:c0: d7:16:77:51:50:75:13:f6:24:0a:80:52:0a:b2:ec:16:da:3b: c8:7a:5d:88:10:58:f0:2f:06:21:28:0b:d9:8b:ee:81:a8:be: 4c:b1:cf:51:70:c2:65:c3:8d:7f:b0:6c:c2:80:ac:7d:02:a1: 2a:de:bd:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoNjcwRTNBMDY3MjE2ODRBQjQ3M0JCQkU1Q0MyMkNGMDVE MDI0QkY2RDAeFw0yNTA2MTkwNjI2MjRaFw0yNTA2MjYwNjI2MjRaMBgxFjAUBgNV BAMTDTY4NTNhZDkwLTIzYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7mxRXE98b8VtjN6O0ON1RpPXxIX/fEqX83vmFyQGi3QcWSvUBuUc/INobznba 6sh6xOXE2XMM9aQJ7LN/WyUhLw0akoi+Op9tM/8JhOqkzgSOexZF+V+9ATVVzpih ApHcXIW+xZxAEIErjTzAguVkZfAadxvgHXhD7OBz4kZMTPRwbnf1fwca3FQs17VJ B1z6ZxMhUPnhtWz1jt4ecKrpTqgAJdLGzV+oxdtgE8TsrzOFj/5PyAAn+65qP+pz hA5ctuKhcbL86OB6NAph++Tyn9x3TM4B/WehsjMfOHCaiUIip6V2qyXntIQ82DBr Hjg3xvzOz4Y93pQysHcKe389AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjP3xcmMc 5LKUXGwtr16z2o/4pvcwHwYDVR0jBBgwFoAUZw46BnIWhKtHO7vlzCLPBdAkv20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0RBRjZENzM2Qjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3Yy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnc0NkJuSVdoS3RITzd2bHpDTFBCZEFrdjIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0RBRjZENzM2QjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0 SE83dmx6Q0xQQmRBa3YyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHfOZ8o/M13Lw2+5j6/FVN90KNr8qEmnOlU/rG/FQDsabD/jfu9PvOf/ 1DfqHE4WR+Ph4wZpicZixtRJomlkZrlh/ouVNNp/LCF9+ULPOsCFaYm3wWXFZGO8 a4UOdGsXJjJr1TjpFujfQ+x1zuVVuZ91yy3Mtq9TPzFc6qCc5G/pDr9DLPEK9wbA VSfGveKUJeaKaHPDEn+g6Q+WJN9/D+pJZ8UpWLRKlz+4tnKa0PtH4FSjuRkWwMnf 0FpQ4aZtG5vSwq0jwNcWd1FQdRP2JAqAUgqy7BbaO8h6XYgQWPAvBiEoC9mL7oGo vkyxz1FwwmXDjX+wbMKArH0CoSrevSI= -----END CERTIFICATE-----Generated at Fri Jun 20 20:49:08 2025 by rpki-client