$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: bNIY4BouAKjiARuAVpyH4QCnkuOmWbObtuV7sgLaH3Q= Subject key identifier: 31:FA:12:17:FA:FE:7D:68:66:C1:E4:C8:A1:A4:98:7F:50:89:26:62 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 34B7 Signing time: Sat 14 Jun 2025 14:44:30 +0000 Manifest this update: Sat 14 Jun 2025 14:44:29 +0000 Manifest next update: Sat 21 Jun 2025 14:44:29 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: 8SjJJ+PvCKRJELU9DLvPLBg+UABOqllUyACjm3LxwHY=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Jun 14 14:44:29 2025 GMT Not After : Jun 21 14:44:29 2025 GMT Subject: CN=684d8ace-9961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:f7:2f:ed:2c:4e:2c:ff:a5:9f:db:8e:fc: bd:bc:d8:0b:7d:5f:74:79:04:54:c1:3d:e6:4c:65: d7:0c:72:20:54:2d:05:cc:47:ac:04:1e:c7:12:af: 20:0a:68:d1:a5:ff:9b:15:17:08:6b:e2:5e:a3:2d: 51:16:60:df:9a:bf:90:57:51:49:8b:b2:23:97:17: 37:2e:a2:fd:af:a3:a6:5d:29:aa:f8:1b:13:9a:98: 49:87:ce:31:e4:75:27:2e:48:d1:a8:f9:81:b7:0f: 6d:83:cf:4b:f7:6f:c9:d5:7e:ae:6a:30:be:fb:19: f9:96:e7:85:2f:75:e9:51:43:4a:e1:6d:b0:32:44: f0:b2:4a:e5:74:b0:4c:cd:db:d0:9f:17:9c:86:f4: 8c:20:76:d2:b6:0a:14:d1:ac:a9:7e:55:1b:ce:df: 56:75:1a:bc:4d:3d:51:f5:0d:4e:a9:5b:cb:89:85: 9f:b8:a2:f8:f5:0f:91:24:fa:66:3c:9b:29:bb:c4: 34:3e:d9:14:92:e6:c7:72:ac:1d:d8:96:80:06:04: 59:a6:90:ab:1b:ff:5e:d5:e8:2c:6c:5c:b2:e4:0c: cf:12:4f:29:50:43:fa:69:09:79:b8:6d:86:b3:bd: 3b:8e:14:d9:2d:49:d0:74:61:5c:8c:c3:05:5b:b5: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FA:12:17:FA:FE:7D:68:66:C1:E4:C8:A1:A4:98:7F:50:89:26:62 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2c:f5:69:af:a3:d2:b8:cd:a3:c8:8b:29:b8:fe:f0:78:fd: 82:3c:a2:04:4f:f0:ba:b8:6f:2c:93:87:a6:77:64:fa:da:b2: 04:48:27:c7:50:99:59:69:5d:2e:e3:89:74:5e:0d:6e:11:ac: 1a:32:79:0e:63:10:f7:d0:26:d9:45:c9:6b:2a:3b:67:96:ac: 17:64:13:c5:87:f6:75:64:d9:c0:68:49:2d:0c:bd:cd:06:99: 7b:9b:51:5a:47:e5:b4:13:f2:b7:c9:0a:75:1f:c2:71:75:32: 21:e4:8a:c5:25:72:e8:11:dd:be:04:fb:60:2c:4e:d8:db:5e: 65:e3:b9:9a:f8:b7:ec:0d:e0:94:c5:e6:1d:91:53:aa:db:ef: 07:ba:a0:97:7e:52:3d:d3:34:79:d0:cf:53:59:61:5f:ff:62: 28:e5:3e:cf:73:e3:36:3b:03:bd:2a:25:55:3b:5a:c8:07:20: c9:85:35:4e:89:4e:17:bd:51:3a:75:8d:2c:e2:78:9d:a0:81: c2:0e:79:6a:26:9c:97:c5:18:07:47:01:cc:46:c7:96:c8:39: 46:b7:2e:6f:6a:74:da:4b:9a:a1:33:e2:1f:ba:ba:2a:51:60: e1:1d:7c:af:45:6f:a8:3b:ca:ac:f6:ce:66:52:2d:50:49:d2: a9:3c:fd:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUwNjE0MTQ0NDI5WhcNMjUwNjIxMTQ0NDI5WjAYMRYwFAYD VQQDEw02ODRkOGFjZS05OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1D3L+0sTiz/pZ/bjvy9vNgLfV90eQRUwT3mTGXXDHIgVC0FzEesBB7HEq8g CmjRpf+bFRcIa+Jeoy1RFmDfmr+QV1FJi7Ijlxc3LqL9r6OmXSmq+BsTmphJh84x 5HUnLkjRqPmBtw9tg89L92/J1X6uajC++xn5lueFL3XpUUNK4W2wMkTwskrldLBM zdvQnxechvSMIHbStgoU0aypflUbzt9WdRq8TT1R9Q1OqVvLiYWfuKL49Q+RJPpm PJspu8Q0PtkUkubHcqwd2JaABgRZppCrG/9e1egsbFyy5AzPEk8pUEP6aQl5uG2G s707jhTZLUnQdGFcjMMFW7XLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH6Ehf6 /n1oZsHkyKGkmH9QiSZiMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArLPVpr6PSuM2jyIspuP7weP2CPKIET/C6uG8sk4emd2T62rIESCfH UJlZaV0u44l0Xg1uEawaMnkOYxD30CbZRclrKjtnlqwXZBPFh/Z1ZNnAaEktDL3N Bpl7m1FaR+W0E/K3yQp1H8JxdTIh5IrFJXLoEd2+BPtgLE7Y215l47ma+LfsDeCU xeYdkVOq2+8HuqCXflI90zR50M9TWWFf/2Io5T7Pc+M2OwO9KiVVO1rIByDJhTVO iU4XvVE6dY0s4nidoIHCDnlqJpyXxRgHRwHMRseWyDlGty5vanTaS5qhM+Ifuroq UWDhHXyvRW+oO8qs9s5mUi1QSdKpPP1n -----END CERTIFICATE-----Generated at Sun Jun 15 05:01:05 2025 by rpki-client