$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft File: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json) Hash identifier: uJrvfB3R9sYjomJrpi0SRAz6ExsqM8UnmTivRd3xUsc= Subject key identifier: F5:58:AD:7D:7C:D2:46:02:11:BB:09:12:70:BF:97:A7:00:F8:4B:85 Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft Manifest number: 74 Signing time: Sun 15 Jun 2025 05:55:16 +0000 Manifest this update: Sun 15 Jun 2025 05:55:15 +0000 Manifest next update: Sun 22 Jun 2025 05:55:15 +0000 Files and hashes: 1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: isS9aJ9pnxkpdjWc+hqZnPkMkiPKh/8pC7dX9I3mvpY=) 2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: 0M5YhxGhV5QHRGKOQlvw9XsWvMIjTk3A7Z1MV3xW494=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: Jun 15 05:55:15 2025 GMT Not After : Jun 22 05:55:15 2025 GMT Subject: CN=684e6043-cfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:9d:93:1f:b5:ea:36:62:25:d9:3b:d3:54: 3e:42:3e:b8:b5:65:8d:55:b7:73:e5:ef:ee:64:f7: 2e:9f:3b:f0:9f:05:a1:fb:51:7e:13:f3:00:07:98: c4:92:fb:10:b3:b7:ce:5d:c8:38:1e:fc:d8:e5:71: 49:da:29:de:47:d4:d8:02:c2:20:49:6f:4b:a8:0a: 88:cc:af:07:3c:b9:5b:1e:16:70:4a:ad:87:9c:70: 54:28:03:c3:45:14:aa:7b:3a:23:67:5e:5d:1f:56: c7:ed:c2:fe:ec:9c:99:db:99:da:d1:c0:bc:b6:e9: 40:e6:2f:59:38:72:fa:f7:d3:99:0a:bf:ca:f2:80: 33:41:4b:e3:19:2a:2f:36:00:1d:4c:82:98:c1:24: 36:ba:85:89:aa:1a:dc:d5:c5:b6:9c:62:c4:75:9e: cd:49:d3:2e:9f:72:5a:80:0c:5b:95:e2:94:15:65: 59:f4:58:e5:62:0b:c3:19:f4:2f:32:2c:e1:fc:cc: 8a:19:9c:99:fd:6b:ac:a4:75:6b:78:64:0e:f4:2e: 7d:04:d9:00:2e:6b:46:da:67:f3:2e:63:5b:e2:71: 05:99:08:1c:eb:31:db:2d:74:a1:84:c1:ac:8a:13: ee:fc:d4:a8:f6:56:90:62:88:b6:59:56:f5:29:2a: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:58:AD:7D:7C:D2:46:02:11:BB:09:12:70:BF:97:A7:00:F8:4B:85 X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:33:4e:ec:ca:ba:9e:70:60:2a:f3:dd:25:a2:60:a1:39:f0: dd:c3:38:48:2a:8f:85:ee:ad:5e:aa:7a:a1:3f:4a:f3:d7:ab: 2e:c7:be:fe:b9:f3:23:7b:00:63:9d:83:a2:3f:11:fd:eb:f0: 78:fb:c9:1b:b1:1b:e2:c5:ed:ae:8d:da:44:8d:76:65:a6:af: 65:93:d7:89:a7:1e:c3:2f:48:1a:1b:9e:d0:c1:4e:1c:a0:db: 96:7f:bd:cb:75:49:0a:41:56:d3:cc:b7:ed:31:62:b2:17:a0: 42:83:39:23:30:2d:ff:f9:69:2e:ea:d3:b3:3d:57:a3:fd:f5: 76:2e:ec:7e:ca:31:82:6d:15:b6:77:ff:38:0c:ae:4b:02:46: ce:8d:59:59:b0:81:95:73:06:97:8f:57:96:2f:61:f8:e2:bb: 8e:01:5e:d8:63:d6:6a:75:0d:f3:20:f9:ed:96:3a:2c:47:d2: ad:a4:68:40:0f:96:3c:43:b9:4d:ab:d2:1d:67:a4:61:38:07: e9:2d:87:ee:d1:81:32:2f:d4:4f:f0:55:09:d4:77:bc:7c:84: c5:db:bd:20:d1:1a:29:99:ff:74:25:2f:07:0f:39:08:ef:4b: 9c:2b:26:ef:e4:ea:74:61:26:c1:18:eb:78:58:a9:06:77:98: 43:6c:36:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDlGRTExMC8GA1UEBRMoNjRDQ0MxNjZDNThDMzhGRThDQzE5NzZGNUNGMDdDMURE MDZGNjgxNDAeFw0yNTA2MTUwNTU1MTVaFw0yNTA2MjIwNTU1MTVaMBgxFjAUBgNV BAMTDTY4NGU2MDQzLWNmZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjh52TH7XqNmIl2TvTVD5CPri1ZY1Vt3Pl7+5k9y6fO/CfBaH7UX4T8wAHmMSS +xCzt85dyDge/NjlcUnaKd5H1NgCwiBJb0uoCojMrwc8uVseFnBKrYeccFQoA8NF FKp7OiNnXl0fVsftwv7snJnbmdrRwLy26UDmL1k4cvr305kKv8rygDNBS+MZKi82 AB1MgpjBJDa6hYmqGtzVxbacYsR1ns1J0y6fclqADFuV4pQVZVn0WOViC8MZ9C8y LOH8zIoZnJn9a6ykdWt4ZA70Ln0E2QAua0baZ/MuY1vicQWZCBzrMdstdKGEwayK E+781Kj2VpBiiLZZVvUpKsczAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9VitfXzS RgIRuwkScL+XpwD4S4UwHwYDVR0jBBgwFoAUZMzBZsWMOP6MwZdvXPB8HdBvaBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOUZFLzM4MDNBQTFDOUIx MjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk16QlpzV01PUDZNd1pkdlhQQjhIZEJ2YUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OUZFLzM4MDNBQTFDOUIxMjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2 TXdaZHZYUEI4SGRCdmFCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIkzTuzKup5wYCrz3SWiYKE58N3DOEgqj4XurV6qeqE/SvPXqy7Hvv65 8yN7AGOdg6I/Ef3r8Hj7yRuxG+LF7a6N2kSNdmWmr2WT14mnHsMvSBobntDBThyg 25Z/vct1SQpBVtPMt+0xYrIXoEKDOSMwLf/5aS7q07M9V6P99XYu7H7KMYJtFbZ3 /zgMrksCRs6NWVmwgZVzBpePV5YvYfjiu44BXthj1mp1DfMg+e2WOixH0q2kaEAP ljxDuU2r0h1npGE4B+kth+7RgTIv1E/wVQnUd7x8hMXbvSDRGimZ/3QlLwcPOQjv S5wrJu/k6nRhJsEY63hYqQZ3mENsNr4= -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:19 2025 by rpki-client