$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: QqjfG/YNIvHN6J4lXHaC3GjeU9M9HokcMNrlS9JBNdA= Subject key identifier: D4:CA:63:27:CD:F9:1D:8E:7C:BD:E9:17:BD:38:B3:EF:3E:2E:46:AE Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 236B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 235A Signing time: Fri 04 Jul 2025 16:02:51 +0000 Manifest this update: Fri 04 Jul 2025 16:02:50 +0000 Manifest next update: Fri 11 Jul 2025 16:02:50 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: SyUhcpLb4AHCcZ5TA8FRaGtjEJAeKtzQVlXn4I9JMtY=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9067 (0x236b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Jul 4 16:02:50 2025 GMT Not After : Jul 11 16:02:50 2025 GMT Subject: CN=6867fb2a-81e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:30:de:39:1e:43:ab:ca:47:be:d3:6e:f4: dc:81:63:f3:96:48:e1:51:97:4e:86:cd:1d:22:6b: 4b:47:6f:cb:da:06:76:98:7c:f5:6b:f9:d4:49:da: d2:03:58:e5:a8:99:e4:e6:85:2e:64:30:b3:6c:88: d6:10:3e:65:17:5a:e7:e2:bf:ea:7b:7a:f9:3b:cf: 87:1a:e7:f4:ac:43:de:2f:df:2b:c6:e9:e7:ff:fc: 54:ea:d5:5e:ba:56:31:22:0d:71:06:e5:bb:3e:3f: 41:26:8a:ad:d6:15:3f:8c:4a:52:89:bd:bf:5a:fd: 0c:98:2a:cd:69:f5:cb:6b:29:60:d1:a4:d4:72:bf: e7:f3:95:75:e3:42:56:fd:53:bc:66:d2:13:10:b0: b3:13:30:8a:5e:fe:ec:2b:38:11:9e:e1:a6:26:98: 71:3d:af:a8:20:f8:fd:66:be:e9:f5:02:21:f7:ca: 20:26:49:66:db:60:df:d8:e5:e6:08:b6:0e:34:7f: 87:5a:ea:ac:7b:57:ca:26:5a:dd:10:b4:b5:ca:e2: 81:c1:f8:99:7e:e4:c1:b9:7e:5b:71:82:29:66:8e: 43:49:7a:66:2d:8a:47:9a:e4:0d:02:8e:4f:02:2f: c6:6d:44:49:dc:c4:89:02:68:ee:b8:9d:20:a4:e9: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CA:63:27:CD:F9:1D:8E:7C:BD:E9:17:BD:38:B3:EF:3E:2E:46:AE X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1a:37:5e:4d:9b:29:43:71:60:a4:1c:01:ad:fb:61:e4:33: 26:1f:51:34:34:7f:e8:8f:30:fd:e1:0d:06:d5:2e:50:67:de: 82:8d:af:b6:15:6c:5c:b5:f3:e1:3c:18:f9:e5:b8:3a:04:7d: 6f:37:d0:ab:bf:ec:50:82:d4:36:9d:c3:f7:41:ae:b8:99:ee: e3:69:a0:19:f2:8f:61:1a:62:2b:1e:65:1f:f1:cd:a2:c6:1b: 4a:74:63:dc:ec:18:56:ad:0b:a1:dc:ef:31:5f:41:8d:5e:d1: b7:46:85:ed:ad:e9:5e:fc:4d:a3:46:42:09:ac:e9:69:7a:e9: 3f:4d:0f:60:0c:92:27:cc:c4:66:57:d5:8c:af:0d:61:08:ee: 31:6b:ad:35:53:5d:69:7c:1f:71:fe:3a:b9:89:11:1d:16:f0: 0d:6a:58:78:8d:a1:79:0c:88:f5:e7:ce:3e:6a:41:97:a9:73: e7:83:80:8b:db:dc:92:d9:8a:63:78:7d:06:75:38:60:55:bb: 13:df:08:c0:b0:0b:3d:6c:71:d8:86:7b:54:fd:32:d7:77:86: a9:45:8b:c1:e1:6b:27:70:d2:fb:f4:36:71:41:60:7e:ca:da: 86:07:53:ed:dc:e1:33:08:65:90:ce:b2:38:96:ae:da:79:86: e0:65:26:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUwNzA0MTYwMjUwWhcNMjUwNzExMTYwMjUwWjAYMRYwFAYD VQQDEw02ODY3ZmIyYS04MWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkUw3jkeQ6vKR77TbvTcgWPzlkjhUZdOhs0dImtLR2/L2gZ2mHz1a/nUSdrS A1jlqJnk5oUuZDCzbIjWED5lF1rn4r/qe3r5O8+HGuf0rEPeL98rxunn//xU6tVe ulYxIg1xBuW7Pj9BJoqt1hU/jEpSib2/Wv0MmCrNafXLaylg0aTUcr/n85V140JW /VO8ZtITELCzEzCKXv7sKzgRnuGmJphxPa+oIPj9Zr7p9QIh98ogJklm22Df2OXm CLYONH+HWuqse1fKJlrdELS1yuKBwfiZfuTBuX5bcYIpZo5DSXpmLYpHmuQNAo5P Ai/GbURJ3MSJAmjuuJ0gpOnoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTKYyfN +R2OfL3pF704s+8+LkauMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTGjdeTZspQ3FgpBwBrfth5DMmH1E0NH/ojzD94Q0G1S5QZ96Cja+2 FWxctfPhPBj55bg6BH1vN9Crv+xQgtQ2ncP3Qa64me7jaaAZ8o9hGmIrHmUf8c2i xhtKdGPc7BhWrQuh3O8xX0GNXtG3RoXtrele/E2jRkIJrOlpeuk/TQ9gDJInzMRm V9WMrw1hCO4xa601U11pfB9x/jq5iREdFvANalh4jaF5DIj1584+akGXqXPng4CL 29yS2YpjeH0GdThgVbsT3wjAsAs9bHHYhntU/TLXd4apRYvB4WsncNL79DZxQWB+ ytqGB1Pt3OEzCGWQzrI4lq7aeYbgZSak -----END CERTIFICATE-----Generated at Sat Jul 5 05:18:04 2025 by rpki-client