$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: VYigHRug2A+eMnsslct+p6TwKwT40qWdiS9U4///DBM= Subject key identifier: 3F:B3:6A:FF:8A:69:4F:AC:47:6F:C0:23:05:D1:4F:17:EB:D7:FB:B3 Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 2A Signing time: Sun 29 Jun 2025 06:47:35 +0000 Manifest this update: Sun 29 Jun 2025 06:47:34 +0000 Manifest next update: Sun 06 Jul 2025 06:47:34 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: oSpzbZgH75XBFA3Fi07T+3I8BX/+8VcX7OMyNrJWI/s=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Jun 29 06:47:34 2025 GMT Not After : Jul 6 06:47:34 2025 GMT Subject: CN=6860e186-19cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:7c:a0:6d:e9:38:e5:6b:a2:6c:68:94:3f: 19:ce:3f:09:da:6b:b5:43:75:68:06:d3:96:b8:f4: a6:ed:28:4d:ee:41:c1:61:9d:d8:31:2e:08:da:6d: f3:30:eb:ce:cd:08:20:45:b5:19:cc:49:58:4c:30: d1:aa:a3:d1:55:66:02:e8:fc:3a:3e:97:87:54:e6: e2:30:8d:08:0f:e9:01:e5:17:fb:80:82:a6:6c:14: e4:76:05:21:29:4e:f8:39:02:1a:e0:a7:1e:5c:64: 50:8c:f8:d7:cf:f0:f9:c7:62:78:ed:ba:82:7f:60: 56:6b:de:f4:63:f2:9e:cc:e2:cc:de:2d:85:d9:7a: 66:12:b3:dc:28:41:07:35:1c:b1:22:55:c0:e3:64: bb:0a:4f:e5:41:1f:31:e4:c6:79:92:6e:32:32:f6: bb:7c:9d:1b:48:b5:7a:61:ea:11:84:7d:b1:ec:72: ab:97:ac:12:f4:87:bb:82:81:66:90:06:3c:67:ed: da:f6:62:01:04:93:ce:f1:2e:31:c5:24:69:96:a1: 20:5f:d6:25:c5:70:b7:66:e1:f0:c1:6a:48:90:7f: da:03:e2:79:2f:00:35:36:52:4d:75:1d:98:fa:2e: c0:62:62:f3:29:d6:4d:1e:06:d3:fa:6b:23:f3:d6: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B3:6A:FF:8A:69:4F:AC:47:6F:C0:23:05:D1:4F:17:EB:D7:FB:B3 X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1d:72:52:10:0c:3b:44:19:11:6c:59:ee:9a:55:98:d2:7f: 3f:73:b2:1e:a5:28:2e:e9:09:86:1f:7a:8d:6c:d1:bb:f8:31: 19:52:ac:d3:99:48:67:0e:98:b1:52:ee:80:cb:38:24:40:02: a0:28:dc:2d:25:c2:65:cb:51:9d:a3:02:f0:3c:25:96:78:70: fa:af:be:fb:15:22:c8:cd:bd:c4:a1:63:ad:3d:f2:bf:a2:a1: e9:6d:23:3e:1e:55:92:4b:81:a3:a7:4c:d3:40:d6:37:c5:fa: c8:67:c1:aa:f8:71:99:70:2c:02:98:fc:33:e8:d2:ef:5d:df: ac:72:0e:50:56:1f:dc:be:87:b2:0e:14:00:5c:23:aa:ac:0f: 80:76:39:05:27:37:35:02:e0:3d:54:76:39:df:0f:b0:26:78: 49:64:3a:72:04:44:01:d3:98:8c:df:2c:95:53:71:c3:0b:51: d0:db:62:86:41:47:a4:b2:20:49:ab:e8:47:88:2d:63:02:6e: d5:96:e6:d2:e4:54:76:92:38:e1:4c:bd:08:7f:60:f9:be:64: 29:ac:bb:9a:bd:fd:33:58:b3:b5:fb:d9:a7:2b:d4:70:a6:85: dc:06:17:fe:de:1b:15:7f:08:c2:52:c7:d2:5c:8a:d5:1c:06: 40:74:88:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTA2MjkwNjQ3MzRaFw0yNTA3MDYwNjQ3MzRaMBgxFjAUBgNV BAMTDTY4NjBlMTg2LTE5Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo5Xygbek45WuibGiUPxnOPwnaa7VDdWgG05a49KbtKE3uQcFhndgxLgjabfMw 687NCCBFtRnMSVhMMNGqo9FVZgLo/Do+l4dU5uIwjQgP6QHlF/uAgqZsFOR2BSEp Tvg5Ahrgpx5cZFCM+NfP8PnHYnjtuoJ/YFZr3vRj8p7M4szeLYXZemYSs9woQQc1 HLEiVcDjZLsKT+VBHzHkxnmSbjIy9rt8nRtItXph6hGEfbHscquXrBL0h7uCgWaQ Bjxn7dr2YgEEk87xLjHFJGmWoSBf1iXFcLdm4fDBakiQf9oD4nkvADU2Uk11HZj6 LsBiYvMp1k0eBtP6ayPz1nYxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP7Nq/4pp T6xHb8AjBdFPF+vX+7MwHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEdclIQDDtEGRFsWe6aVZjSfz9zsh6lKC7pCYYfeo1s0bv4MRlSrNOZ SGcOmLFS7oDLOCRAAqAo3C0lwmXLUZ2jAvA8JZZ4cPqvvvsVIsjNvcShY6098r+i oeltIz4eVZJLgaOnTNNA1jfF+shnwar4cZlwLAKY/DPo0u9d36xyDlBWH9y+h7IO FABcI6qsD4B2OQUnNzUC4D1UdjnfD7AmeElkOnIERAHTmIzfLJVTccMLUdDbYoZB R6SyIEmr6EeILWMCbtWW5tLkVHaSOOFMvQh/YPm+ZCmsu5q9/TNYs7X72acr1HCm hdwGF/7eGxV/CMJSx9JcitUcBkB0iKo= -----END CERTIFICATE-----Generated at Mon Jun 30 20:19:25 2025 by rpki-client