$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: csi7ymPRek1KolJYGSBqO1i+NW/f9Wt0lwstksLZNC0= Subject key identifier: 4E:5A:76:94:3E:D0:0A:56:75:88:23:F2:08:2A:EC:68:F9:D3:F8:97 Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 08BA Signing time: Wed 18 Jun 2025 20:21:18 +0000 Manifest this update: Wed 18 Jun 2025 20:21:17 +0000 Manifest next update: Wed 25 Jun 2025 20:21:17 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: EkICcMAH7SdWQeDeNjozhyWsePfCRYms9hFtLBAYsqE=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: j0i0jOhZZOWP9s/TIb9RjR+IPetIqCuM8Ixx2VI3fzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Jun 18 20:21:17 2025 GMT Not After : Jun 25 20:21:17 2025 GMT Subject: CN=68531fbe-d571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:18:12:b9:20:20:71:00:d7:5e:48:ea:45: dc:4e:a6:02:da:10:45:47:43:fe:a9:09:73:19:df: 43:1f:e5:b5:1f:fd:ca:cf:9e:7b:fe:64:da:e1:dd: a4:79:aa:f4:b2:02:4a:92:62:d0:d5:9f:61:73:a0: 75:86:54:f3:0f:30:1f:eb:66:6e:e9:ec:8a:7d:94: b8:d2:aa:c1:3b:93:e4:a1:0b:bf:19:77:41:18:42: 54:9e:da:a5:72:0c:43:5b:86:ac:ad:14:bf:35:62: fa:b9:25:13:4c:ad:71:f4:19:2d:28:58:e6:23:5b: 8a:29:56:8f:62:3a:7b:67:77:e8:32:15:1f:b1:92: 24:71:84:cb:75:d4:15:6c:f8:05:f3:b8:19:09:47: 1a:16:cc:aa:9b:75:de:79:dd:ab:38:e4:a7:b8:f7: 62:b8:92:42:ce:db:1a:cf:83:e6:e8:23:59:28:b2: 59:a7:90:be:55:5a:fc:fd:79:e3:44:b2:ef:f7:cc: af:42:f8:fd:b4:cd:85:70:77:04:94:a7:d6:7f:a5: d9:5a:9e:db:0a:55:aa:50:3e:38:96:78:60:4c:3d: ed:e0:7e:cf:ad:d5:bc:c4:d0:43:5b:09:0d:1c:d4: 19:9d:51:af:f1:c5:25:79:0b:e4:9a:19:d8:66:91: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5A:76:94:3E:D0:0A:56:75:88:23:F2:08:2A:EC:68:F9:D3:F8:97 X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2c:7c:85:0e:ff:2b:0a:9f:df:16:91:f1:21:ce:ef:fd:ef: 49:01:d7:80:6c:32:17:a1:f6:56:3c:cc:0b:03:ed:98:e3:b1: 18:57:88:dc:fb:69:f0:26:bb:e6:26:03:5a:0f:46:06:63:ac: 2d:61:e3:42:9e:5e:f6:d7:c5:57:ac:54:fc:e7:ec:c6:29:c4: e4:3a:35:4f:13:bb:fc:8a:6a:20:ef:ee:40:f6:a9:69:c0:1b: 28:38:a3:15:4c:44:be:53:ca:22:74:11:1e:18:fc:89:48:55: 94:d6:0a:3d:de:0a:1a:1f:60:c6:a7:c2:19:6b:f7:2b:ce:69: 59:3a:fd:3d:76:62:4a:3c:23:c2:cf:4a:9e:4d:79:c0:18:88: 49:78:91:b9:a4:f0:e0:e2:90:5d:89:4c:75:36:e0:26:4d:f6: db:f3:73:aa:74:30:2a:cb:14:80:89:de:ac:a3:41:70:3e:df: f1:88:2e:e0:06:32:d4:37:5a:3a:48:8a:9f:d8:da:5b:9d:39: 8a:a2:24:85:d8:1f:82:ff:9d:4d:a3:55:f1:be:e4:db:ce:f6: 0f:74:94:21:ef:05:62:62:3f:d0:4b:6c:97:d2:e5:fc:2b:e0: 79:8a:d8:9f:65:85:4c:68:da:fa:fb:0f:4d:c7:54:4f:ad:45: 1e:61:65:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjUwNjE4MjAyMTE3WhcNMjUwNjI1MjAyMTE3WjAYMRYwFAYD VQQDEw02ODUzMWZiZS1kNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpQYErkgIHEA115I6kXcTqYC2hBFR0P+qQlzGd9DH+W1H/3Kz557/mTa4d2k ear0sgJKkmLQ1Z9hc6B1hlTzDzAf62Zu6eyKfZS40qrBO5PkoQu/GXdBGEJUntql cgxDW4asrRS/NWL6uSUTTK1x9BktKFjmI1uKKVaPYjp7Z3foMhUfsZIkcYTLddQV bPgF87gZCUcaFsyqm3Xeed2rOOSnuPdiuJJCztsaz4Pm6CNZKLJZp5C+VVr8/Xnj RLLv98yvQvj9tM2FcHcElKfWf6XZWp7bClWqUD44lnhgTD3t4H7PrdW8xNBDWwkN HNQZnVGv8cUleQvkmhnYZpHjPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5adpQ+ 0ApWdYgj8ggq7Gj50/iXMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlLHyFDv8rCp/fFpHxIc7v/e9JAdeAbDIXofZWPMwLA+2Y47EYV4jc +2nwJrvmJgNaD0YGY6wtYeNCnl7218VXrFT85+zGKcTkOjVPE7v8imog7+5A9qlp wBsoOKMVTES+U8oidBEeGPyJSFWU1go93goaH2DGp8IZa/crzmlZOv09dmJKPCPC z0qeTXnAGIhJeJG5pPDg4pBdiUx1NuAmTfbb83OqdDAqyxSAid6so0FwPt/xiC7g BjLUN1o6SIqf2NpbnTmKoiSF2B+C/51No1XxvuTbzvYPdJQh7wViYj/QS2yX0uX8 K+B5itifZYVMaNr6+w9Nx1RPrUUeYWXJ -----END CERTIFICATE-----Generated at Fri Jun 20 20:43:31 2025 by rpki-client