$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: 9SN9B7QjgckpX+VYZwW+fppJ2omearJT3jYnpuOrrMc= Subject key identifier: 22:0A:CB:D8:56:97:E8:B6:BF:63:A8:D4:1E:BE:8B:A6:7F:65:50:0C Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 63 Signing time: Sun 15 Jun 2025 06:09:05 +0000 Manifest this update: Sun 15 Jun 2025 06:09:04 +0000 Manifest next update: Sun 22 Jun 2025 06:09:04 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: jN4GuRo/GGkd8TImgWCGM06AcoxYT0WjMm3F46DIe0c=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Jun 15 06:09:04 2025 GMT Not After : Jun 22 06:09:04 2025 GMT Subject: CN=684e6380-3232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:d0:2b:82:68:39:db:ca:6a:e4:b2:c0:d2: 9b:8c:43:f5:2b:4e:ad:32:5a:5d:46:c6:f8:f1:94: cc:9c:49:11:73:c5:a6:a2:d7:56:1e:b8:76:7d:7c: e5:82:55:90:8a:b6:6d:9c:63:92:0b:91:4f:5d:5a: 9c:ba:e9:f4:f0:28:3e:9d:d8:71:dc:da:3b:ef:1f: c7:d9:6e:49:9b:e3:4e:b3:20:04:3d:fe:b6:4e:9d: 01:1b:60:bd:0b:6d:75:95:77:20:cd:61:3b:01:12: c8:83:d9:9c:2b:1f:4a:f6:3b:b3:7a:6b:e2:dc:9e: 5f:31:93:42:03:b3:5f:49:ab:50:38:89:2e:79:8b: 0f:9b:bf:2e:73:37:3a:60:3c:27:ae:33:e6:8a:d5: 9a:0e:7c:26:46:39:83:c1:3e:93:31:18:57:1c:9c: 02:94:3b:76:5f:26:e3:9f:32:b5:97:e7:2b:b3:dd: 66:0a:3b:f2:99:96:6c:ff:53:62:e7:dd:1d:d1:9c: f3:78:da:a5:34:4b:3d:db:7a:ad:c6:f2:af:fd:65: 00:7c:87:f1:17:86:78:b7:6a:73:a3:6d:b5:80:04: e4:be:6e:1c:fb:25:14:f9:e4:22:14:32:c4:ea:aa: a9:6d:8b:3a:72:12:57:2f:fd:b8:0a:d4:7b:6b:6f: 05:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:CB:D8:56:97:E8:B6:BF:63:A8:D4:1E:BE:8B:A6:7F:65:50:0C X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:1a:2f:6f:05:11:2a:35:3f:aa:cd:e7:3a:b5:96:59:18:c8: 99:8b:6e:f4:7a:7c:06:af:e4:d5:af:c5:6c:a0:99:4a:8c:f6: 46:e4:5d:d7:9e:57:58:70:10:76:76:bd:2c:ec:db:35:14:73: 75:01:17:0a:cb:f4:6e:ae:a6:94:99:9c:22:44:b0:d3:2f:22: 9f:99:db:86:aa:c2:9c:dc:e6:12:a4:d8:85:15:e3:e4:84:7c: 0a:eb:e8:5f:59:29:3b:b1:50:9a:f2:42:9c:68:5d:ef:ab:a2: 42:e5:b1:13:d7:c2:37:9d:49:1e:98:49:05:2d:a3:c2:9b:6c: a1:85:91:c3:97:33:d7:41:d8:39:8c:d6:7a:4d:b8:b3:4c:62: 4b:b0:e4:d1:07:8b:c8:c6:51:0a:e0:b4:4e:2a:10:3e:60:ad: a3:79:5b:db:d8:49:06:11:31:ae:d8:f7:f7:09:8e:47:4f:91: 1a:de:a0:1b:69:ad:18:b6:89:42:1d:18:9d:27:0e:27:b9:65: d2:4b:1f:bc:99:1e:de:05:bb:2f:ce:c6:49:2c:2d:7a:1c:17: ad:cf:bd:a8:2c:89:a3:cb:68:50:fc:49:01:f9:d0:76:37:6e: 9f:6f:ad:21:dd:e5:28:f3:ba:e4:2a:9d:a3:c6:71:b3:54:7b: d0:df:21:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNTA2MTUwNjA5MDRaFw0yNTA2MjIwNjA5MDRaMBgxFjAUBgNV BAMTDTY4NGU2MzgwLTMyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPK9Argmg528pq5LLA0puMQ/UrTq0yWl1GxvjxlMycSRFzxaai11YeuHZ9fOWC VZCKtm2cY5ILkU9dWpy66fTwKD6d2HHc2jvvH8fZbkmb406zIAQ9/rZOnQEbYL0L bXWVdyDNYTsBEsiD2ZwrH0r2O7N6a+Lcnl8xk0IDs19Jq1A4iS55iw+bvy5zNzpg PCeuM+aK1ZoOfCZGOYPBPpMxGFccnAKUO3ZfJuOfMrWX5yuz3WYKO/KZlmz/U2Ln 3R3RnPN42qU0Sz3beq3G8q/9ZQB8h/EXhni3anOjbbWABOS+bhz7JRT55CIUMsTq qqltizpyElcv/bgK1HtrbwUBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIgrL2FaX 6La/Y6jUHr6Lpn9lUAwwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIQaL28FESo1P6rN5zq1llkYyJmLbvR6fAav5NWvxWygmUqM9kbkXdee V1hwEHZ2vSzs2zUUc3UBFwrL9G6uppSZnCJEsNMvIp+Z24aqwpzc5hKk2IUV4+SE fArr6F9ZKTuxUJryQpxoXe+rokLlsRPXwjedSR6YSQUto8KbbKGFkcOXM9dB2DmM 1npNuLNMYkuw5NEHi8jGUQrgtE4qED5graN5W9vYSQYRMa7Y9/cJjkdPkRreoBtp rRi2iUIdGJ0nDie5ZdJLH7yZHt4Fuy/OxkksLXocF63PvagsiaPLaFD8SQH50HY3 bp9vrSHd5SjzuuQqnaPGcbNUe9DfIY8= -----END CERTIFICATE-----Generated at Mon Jun 16 10:01:08 2025 by rpki-client