$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: CGStAk/AHuH96HBPKi+flAfjuWYDDJLTabJEZsRlIx4= Subject key identifier: 4C:57:95:CC:46:00:16:41:DE:9F:1B:25:76:A9:4C:55:D9:EA:90:2E Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 63 Signing time: Thu 19 Jun 2025 06:25:58 +0000 Manifest this update: Thu 19 Jun 2025 06:25:58 +0000 Manifest next update: Thu 26 Jun 2025 06:25:58 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: wgJpsfRGzjwdB6U1rXkVWKzrk3N/feYb5IL4djEZc1A=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: BCZ1HJoEZyrIFeiF3ZHLW8BBZXBaO4KH4xqAbBol+hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Jun 19 06:25:58 2025 GMT Not After : Jun 26 06:25:58 2025 GMT Subject: CN=6853ad76-f013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:89:fb:e0:81:a6:2f:c5:be:b5:57:62:68:2b: 01:fc:b9:4a:0d:53:39:30:b4:f4:2f:be:32:26:46: 6d:8d:f1:49:fd:9e:26:cf:31:92:82:c8:c9:b1:f9: 01:bd:30:0d:b2:7f:f6:ac:1d:dd:7e:e5:97:7c:89: 71:a0:d8:b9:40:2b:b3:d3:de:6d:45:94:53:6d:81: d1:d6:93:34:c1:4b:a5:c5:a6:47:a7:e1:80:33:c6: 52:98:a3:3d:da:e8:63:35:19:36:6c:54:bd:5a:0d: 94:1a:71:8a:07:28:55:ff:c3:ff:9a:6b:e6:6b:d0: cf:e8:99:8d:78:4c:b4:82:a7:8e:ea:44:8a:ab:b1: 23:40:05:d3:a6:59:6a:84:25:3a:dc:4f:cb:89:73: 00:2d:17:82:88:bb:3d:8d:6d:ae:20:a3:33:ef:77: d3:c1:22:84:64:da:78:4b:36:6e:35:35:ad:8c:30: 4a:f7:6d:10:fd:95:6f:b5:d4:d3:e8:65:a3:f4:a4: 42:25:9e:2e:52:0d:03:a3:06:5e:85:f4:fa:2a:89: 70:7d:61:b8:c9:b8:7e:95:7b:f1:4e:79:33:ed:2f: 63:f4:94:52:5c:66:29:24:b6:10:b2:b7:a6:73:0f: 53:b9:b8:3d:a7:38:91:e2:0e:5b:b4:75:bf:d8:b6: ba:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:57:95:CC:46:00:16:41:DE:9F:1B:25:76:A9:4C:55:D9:EA:90:2E X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:77:4b:5c:b1:f7:cb:58:af:d1:02:05:16:c5:25:d3:ae:e6: 94:6c:8e:ad:4e:cf:fd:af:09:0b:90:05:b2:3c:25:0a:b5:40: 79:59:04:d0:0d:8c:db:e1:fa:c5:b3:1f:8d:c9:3b:60:28:41: 16:0c:bc:2e:fa:09:03:99:41:d3:66:bb:5c:fc:22:c9:27:49: 7a:18:a4:bc:2e:26:43:11:c6:f9:d5:64:f0:db:b0:3d:1b:21: 01:d3:9a:0b:e4:47:b0:6e:8d:df:9c:44:10:43:2b:f2:0d:47: 81:bc:e7:74:1d:3f:45:05:b4:07:69:54:de:7d:47:2f:bc:a5: 5f:38:aa:0f:23:84:57:3d:f2:e2:2b:8b:c3:e0:78:3f:97:d8: 4b:66:80:2c:44:c8:7e:7d:5c:18:e9:1e:68:1f:f4:a7:ee:1a: 2e:1e:63:d5:49:8c:7d:6a:cb:22:0b:a8:bc:fd:85:5c:77:ab: d5:c4:33:e0:0d:df:a3:0e:86:91:ef:4c:15:dd:6a:76:f8:a8: db:4e:c1:19:b5:57:b7:3f:4b:28:ca:ba:93:05:65:c3:c0:79: bc:02:3a:ab:07:8c:f0:81:27:2a:e3:a2:5b:b5:8f:36:a2:ae: a9:95:9b:ee:5d:01:50:7e:ae:69:19:3f:c2:b5:fb:c6:f0:61: 20:4f:a1:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoNjREMkIzRDY1QTVDNkNDRTREMDhENzhGRkVEQjI4NTZC NjQxRDZBMzAeFw0yNTA2MTkwNjI1NThaFw0yNTA2MjYwNjI1NThaMBgxFjAUBgNV BAMTDTY4NTNhZDc2LWYwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0ifvggaYvxb61V2JoKwH8uUoNUzkwtPQvvjImRm2N8Un9nibPMZKCyMmx+QG9 MA2yf/asHd1+5Zd8iXGg2LlAK7PT3m1FlFNtgdHWkzTBS6XFpken4YAzxlKYoz3a 6GM1GTZsVL1aDZQacYoHKFX/w/+aa+Zr0M/omY14TLSCp47qRIqrsSNABdOmWWqE JTrcT8uJcwAtF4KIuz2Nba4gozPvd9PBIoRk2nhLNm41Na2MMEr3bRD9lW+11NPo ZaP0pEIlni5SDQOjBl6F9PoqiXB9YbjJuH6Ve/FOeTPtL2P0lFJcZikkthCyt6Zz D1O5uD2nOJHiDlu0db/YtrrXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTFeVzEYA FkHenxsldqlMVdnqkC4wHwYDVR0jBBgwFoAUZNKz1lpcbM5NCNeP/tsoVrZB1qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzQ0NkJEN0EyQjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWk5LejFscGNiTTVOQ05lUF90c29WclpCMXFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzQ0NkJEN0EyQjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01 TkNOZVBfdHNvVnJaQjFxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHx3S1yx98tYr9ECBRbFJdOu5pRsjq1Oz/2vCQuQBbI8JQq1QHlZBNAN jNvh+sWzH43JO2AoQRYMvC76CQOZQdNmu1z8IsknSXoYpLwuJkMRxvnVZPDbsD0b IQHTmgvkR7Bujd+cRBBDK/INR4G853QdP0UFtAdpVN59Ry+8pV84qg8jhFc98uIr i8PgeD+X2EtmgCxEyH59XBjpHmgf9KfuGi4eY9VJjH1qyyILqLz9hVx3q9XEM+AN 36MOhpHvTBXdanb4qNtOwRm1V7c/SyjKupMFZcPAebwCOqsHjPCBJyrjolu1jzai rqmVm+5dAVB+rmkZP8K1+8bwYSBPobM= -----END CERTIFICATE-----Generated at Fri Jun 20 06:10:54 2025 by rpki-client