$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: My5tu40kk2bbivvs3e0y4ADRgmXMW31wuozpKOCts/Y= Subject key identifier: A5:20:80:C8:62:84:55:DF:94:A8:2A:6D:77:83:D8:5F:F1:B0:FA:8B Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 7A Signing time: Sat 05 Jul 2025 07:04:16 +0000 Manifest this update: Sat 05 Jul 2025 07:04:15 +0000 Manifest next update: Sat 12 Jul 2025 07:04:15 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: NGmzq7XgNEzpxADpQAAEsk+9kHA4KZBH8DBgXGI/6Ak=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: pAKMszCIjt6MmJA/GOLnpRTl7JGqEZooCz2JSaSabrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Jul 5 07:04:15 2025 GMT Not After : Jul 12 07:04:15 2025 GMT Subject: CN=6868ce70-82a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:78:16:de:99:e3:ef:d7:19:ee:79:12:8f: a8:ad:08:6a:34:d1:81:ca:d3:b2:75:98:35:a5:1a: 8c:8f:89:4a:b1:91:7b:a7:75:1a:1c:fd:c0:ab:60: 59:a9:8e:cc:ff:cf:72:10:b7:d5:04:1d:87:89:15: ce:4a:6b:ac:06:ed:f2:17:98:53:57:d7:05:1d:63: 6f:12:d1:92:fd:08:31:7e:5a:c6:01:e7:ce:aa:88: d7:67:50:c4:da:ad:9d:72:7e:71:46:23:43:47:9c: 9d:38:95:02:6e:c8:31:3a:f7:07:5b:e9:93:78:a7: 2b:3a:0c:f0:00:9d:f6:d3:50:c4:25:9c:93:08:1c: b0:f1:b4:8c:8b:0d:41:cb:78:f0:eb:18:01:cd:cd: 2a:f2:7f:ef:90:24:81:be:c2:2e:6e:68:3a:6c:35: 49:d7:f6:f7:c1:e6:ba:a3:89:e1:36:a1:91:66:07: 29:6e:fd:5e:96:47:74:66:53:58:ee:5f:3e:66:33: 0e:e4:02:cc:24:dc:83:7c:66:e3:67:55:86:90:b1: c9:60:17:36:4a:eb:ca:28:db:e6:0a:40:20:b4:bf: 45:79:0b:74:a9:a6:0a:d7:01:27:e0:7b:ca:1e:29: ee:ac:f7:fe:93:09:e9:e1:9f:90:a8:6b:3c:9e:75: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:20:80:C8:62:84:55:DF:94:A8:2A:6D:77:83:D8:5F:F1:B0:FA:8B X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:82:90:39:19:2f:f5:c9:7c:80:9e:a7:0d:e6:3d:ed:8e:19: a9:e1:21:81:a3:97:9b:ef:a8:68:c0:72:f6:1e:fa:63:eb:c6: cd:ac:d2:6b:e7:13:f1:05:a2:98:08:d6:44:01:44:20:dd:54: 1b:57:59:f0:a9:93:6f:e8:42:5a:0a:a4:02:f3:97:90:12:bf: 24:79:31:d1:1d:01:f3:d3:8b:e6:ad:44:86:c4:dd:4e:1c:e4: 5c:9a:8b:d5:a2:09:8e:da:12:8b:26:40:a4:8a:f8:b6:2a:3c: 47:c6:eb:f8:c4:4d:08:32:56:e2:c5:3c:27:e8:c6:4a:05:74: db:be:b8:fb:b3:db:9c:76:6e:0d:10:6e:63:1c:77:84:48:4c: 90:e6:6f:b0:32:67:bc:a3:fb:dc:2a:ea:d8:fd:f6:56:8b:37: 1b:8d:36:7e:f3:f2:5e:04:c3:ab:11:7b:73:02:1f:e3:b3:42: a6:92:46:ea:f0:c8:f1:63:0c:56:39:a8:a2:a8:a6:36:21:7f: c1:f0:90:50:0d:bc:e7:a1:e8:c2:5b:da:b5:5c:c9:c3:3d:04: a8:be:a1:18:ac:84:b1:c3:06:1c:1e:e7:75:38:ca:86:e7:bf: 9a:02:28:b2:b5:98:e6:ed:79:79:73:02:2b:eb:28:6a:93:72: 0b:19:bf:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTg3RTExMC8GA1UEBRMoQ0Y3OUM2NUY0QjU1MDEwRkIyNUNFNkM0NUI4QzkxOURC MDkzQTMyRDAeFw0yNTA3MDUwNzA0MTVaFw0yNTA3MTIwNzA0MTVaMBgxFjAUBgNV BAMTDTY4NjhjZTcwLTgyYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC51ngW3pnj79cZ7nkSj6itCGo00YHK07J1mDWlGoyPiUqxkXundRoc/cCrYFmp jsz/z3IQt9UEHYeJFc5Ka6wG7fIXmFNX1wUdY28S0ZL9CDF+WsYB586qiNdnUMTa rZ1yfnFGI0NHnJ04lQJuyDE69wdb6ZN4pys6DPAAnfbTUMQlnJMIHLDxtIyLDUHL ePDrGAHNzSryf++QJIG+wi5uaDpsNUnX9vfB5rqjieE2oZFmBylu/V6WR3RmU1ju Xz5mMw7kAswk3IN8ZuNnVYaQsclgFzZK68oo2+YKQCC0v0V5C3SppgrXASfge8oe Ke6s9/6TCenhn5CoazyedQxJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpSCAyGKE Vd+UqCptd4PYX/Gw+oswHwYDVR0jBBgwFoAUz3nGX0tVAQ+yXObEW4yRnbCToy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODdFLzg0MjhCOUU2QTFD RjExRUY4NzhFNjA2MUM0RjlBRTAyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejNuR1gwdFZBUS15WE9iRVc0eVJuYkNUb3kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF ODdFLzg0MjhCOUU2QTFDRjExRUY4NzhFNjA2MUM0RjlBRTAyL3ozbkdYMHRWQVEt eVhPYkVXNHlSbmJDVG95MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+CkDkZL/XJfICepw3mPe2OGanhIYGjl5vvqGjAcvYe+mPrxs2s0mvn E/EFopgI1kQBRCDdVBtXWfCpk2/oQloKpALzl5ASvyR5MdEdAfPTi+atRIbE3U4c 5Fyai9WiCY7aEosmQKSK+LYqPEfG6/jETQgyVuLFPCfoxkoFdNu+uPuz25x2bg0Q bmMcd4RITJDmb7AyZ7yj+9wq6tj99laLNxuNNn7z8l4Ew6sRe3MCH+OzQqaSRurw yPFjDFY5qKKopjYhf8HwkFANvOeh6MJb2rVcycM9BKi+oRishLHDBhwe53U4yobn v5oCKLK1mObteXlzAivrKGqTcgsZvzk= -----END CERTIFICATE-----Generated at Sun Jul 6 00:56:05 2025 by rpki-client