$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: Vn6/iNKbkEECvby/zHXhkJC9igsKcvn4d2ORXYtVwoY= Subject key identifier: 54:7F:F4:70:41:7B:37:E3:CC:45:07:70:BC:9C:80:8A:77:E7:8A:55 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 1727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 171D Signing time: Fri 20 Jun 2025 16:39:11 +0000 Manifest this update: Fri 20 Jun 2025 16:39:11 +0000 Manifest next update: Fri 27 Jun 2025 16:39:11 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: 3EhToRqELjEwJBUpF+l9k/NDGwFkQqzJ+eTiPeOHlhg=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5927 (0x1727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Jun 20 16:39:11 2025 GMT Not After : Jun 27 16:39:11 2025 GMT Subject: CN=68558eaf-3266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:be:5e:bd:48:2a:42:63:8b:4f:25:51:75:88: 03:bc:48:f8:46:ac:50:af:f8:43:88:8a:d5:ad:e6: d9:7d:93:46:0f:cb:78:9c:ba:f0:19:d0:69:0b:cb: 8a:47:28:dc:84:c1:b0:e6:e2:70:1e:26:d5:0c:f4: 54:2b:6e:bd:70:08:f2:2f:d6:ab:86:6c:df:5d:94: 62:8d:18:4e:72:08:af:ce:83:59:e3:03:8f:b9:ff: 52:fb:22:48:78:c8:39:ce:b0:68:e8:af:df:56:7f: a9:8d:9b:75:b9:75:43:ea:58:d5:78:4e:44:e3:f9: 2d:84:82:55:93:74:8b:79:cb:cb:34:1b:13:c9:c7: a6:a7:c5:84:01:f0:e6:16:b9:93:2d:6f:f8:85:91: 51:30:f4:9b:b5:b4:09:c5:a2:3b:1d:95:35:f6:95: 1f:13:a5:9e:b6:de:84:6e:53:bb:19:db:43:da:10: 61:9e:6b:04:56:de:62:8d:a2:af:12:63:c1:a8:87: bc:56:b6:98:41:24:1e:a4:f0:dc:9d:25:25:ca:f9: 25:50:e2:45:0c:a6:a0:6b:ca:5c:7d:eb:4e:5e:98: 32:8f:59:59:95:e8:60:d1:14:95:a6:be:d7:75:c7: c2:e8:3a:33:7f:bd:a9:2f:48:63:df:2a:f6:ee:91: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7F:F4:70:41:7B:37:E3:CC:45:07:70:BC:9C:80:8A:77:E7:8A:55 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4c:6d:c0:0f:43:c5:e9:2f:b3:9e:f3:7b:11:f5:75:61:c9: 75:4b:a8:2b:50:c8:a5:27:2d:b8:58:12:7e:d1:14:e3:ec:55: 6a:52:20:84:91:92:14:8f:e8:09:8a:34:f4:63:5b:d0:44:a6: cd:d2:45:5c:77:b4:f8:5c:a6:74:b2:b4:2b:bb:94:30:e2:d8: 5f:38:5a:c7:15:9d:00:53:8d:95:f3:c1:fd:c0:1f:b7:00:ad: 75:07:79:8d:3b:3e:e7:77:ec:62:4c:c8:9c:c8:a6:7b:72:be: 24:ee:f6:18:45:28:08:12:a5:11:6b:c7:31:15:d3:ec:24:da: 0d:db:b7:e9:11:05:16:36:c0:e8:4a:b5:ae:a3:d6:65:0d:e0: d6:3a:59:de:79:4d:07:b5:6f:2a:dc:f7:cb:3f:f8:21:db:dc: e6:1b:eb:5a:36:01:fd:c3:ba:8b:bf:43:d0:95:3b:7b:9d:1b: 68:30:3d:77:62:ad:17:e7:5d:03:75:ae:b0:89:44:7b:21:c7: f7:5b:d9:73:72:62:53:b9:6f:62:ad:0b:47:e4:d4:e7:99:5b: ab:f6:79:12:7e:c1:c6:5d:a0:32:eb:e9:63:d8:5a:eb:2c:43: 04:20:b7:69:f6:88:92:61:a0:8d:af:9e:bc:7b:ad:e5:ee:86: 35:94:69:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjUwNjIwMTYzOTExWhcNMjUwNjI3MTYzOTExWjAYMRYwFAYD VQQDEw02ODU1OGVhZi0zMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6L5evUgqQmOLTyVRdYgDvEj4RqxQr/hDiIrVrebZfZNGD8t4nLrwGdBpC8uK RyjchMGw5uJwHibVDPRUK269cAjyL9arhmzfXZRijRhOcgivzoNZ4wOPuf9S+yJI eMg5zrBo6K/fVn+pjZt1uXVD6ljVeE5E4/kthIJVk3SLecvLNBsTycemp8WEAfDm FrmTLW/4hZFRMPSbtbQJxaI7HZU19pUfE6Wett6EblO7GdtD2hBhnmsEVt5ijaKv EmPBqIe8VraYQSQepPDcnSUlyvklUOJFDKaga8pcfetOXpgyj1lZlehg0RSVpr7X dcfC6Dozf72pL0hj3yr27pFatwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR/9HBB ezfjzEUHcLycgIp354pVMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACTG3AD0PF6S+znvN7EfV1Ycl1S6grUMilJy24WBJ+0RTj7FVqUiCE kZIUj+gJijT0Y1vQRKbN0kVcd7T4XKZ0srQru5Qw4thfOFrHFZ0AU42V88H9wB+3 AK11B3mNOz7nd+xiTMicyKZ7cr4k7vYYRSgIEqURa8cxFdPsJNoN27fpEQUWNsDo SrWuo9ZlDeDWOlneeU0HtW8q3PfLP/gh29zmG+taNgH9w7qLv0PQlTt7nRtoMD13 Yq0X510Dda6wiUR7Icf3W9lzcmJTuW9irQtH5NTnmVur9nkSfsHGXaAy6+lj2Frr LEMEILdp9oiSYaCNr568e63l7oY1lGmp -----END CERTIFICATE-----Generated at Sat Jun 21 09:48:42 2025 by rpki-client