$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: dc9MwaQ82+YaaxqoUUf369291B8o8nod28sXgVnNoc4= Subject key identifier: DA:C4:07:31:B0:EF:97:97:28:95:30:B2:0F:72:07:C9:EC:F5:22:C7 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 8C Signing time: Tue 01 Jul 2025 07:12:47 +0000 Manifest this update: Tue 01 Jul 2025 07:12:46 +0000 Manifest next update: Tue 08 Jul 2025 07:12:46 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: D2+cBK95qeqzVuyo6HXLPYUWmq/kDV/A/ocB2uH8dT0=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Jul 1 07:12:46 2025 GMT Not After : Jul 8 07:12:46 2025 GMT Subject: CN=68638a6e-d6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:9b:d4:a2:a2:f0:f3:38:93:71:df:fe:36: 74:6e:89:9e:b4:51:84:07:80:42:7b:4f:10:ea:76: 41:69:b5:1c:7c:fb:71:11:c7:41:4f:c6:88:74:09: 91:40:50:1c:d4:06:5a:8e:5b:5c:25:10:5c:23:5c: cc:ef:30:71:a2:38:5f:c2:07:8c:0f:ef:68:f7:27: a5:e4:78:52:fa:72:e7:77:16:bc:df:75:d8:9c:24: cd:6e:d1:1c:b0:5a:45:ae:b4:24:f8:09:c9:4d:32: cf:f3:2f:48:ab:c4:61:c1:8d:87:31:69:61:96:53: a4:55:ba:2a:2d:a5:e2:75:14:05:c7:8a:59:b0:e8: 25:86:10:56:9c:54:f2:60:18:83:1c:04:d5:45:1b: e1:2a:ec:3c:53:13:36:3c:af:1f:5e:98:df:c3:e2: 77:0e:e6:ea:b7:1c:7a:66:79:6c:16:6d:26:0d:45: 58:fc:a7:37:c7:78:00:43:b0:9e:bc:54:e8:dc:c6: d1:9d:ba:d4:57:64:50:18:0a:83:f1:b3:a9:f6:af: 35:7c:64:a7:91:4d:b7:45:47:26:19:3f:64:e4:6c: 50:8a:bb:fe:89:24:64:43:d9:a7:f7:6a:9b:5a:a8: eb:41:81:04:a1:95:00:95:49:7c:cc:1e:8b:60:cc: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C4:07:31:B0:EF:97:97:28:95:30:B2:0F:72:07:C9:EC:F5:22:C7 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:aa:14:00:4b:42:80:65:56:b2:c9:2b:97:6e:b2:49:f5:70: 07:43:d5:d8:fe:ef:54:67:2b:d7:b8:07:fa:8f:c7:dc:a6:cf: d5:d4:60:a4:b2:ab:e9:8d:73:95:4b:04:8a:ce:fd:3f:b0:1c: 44:31:ef:ff:ca:61:d8:52:98:0e:37:cc:bf:07:c0:f3:47:c6: e6:cb:c0:f2:75:38:70:3a:5c:2f:52:23:3a:3a:fd:d3:07:35: 8c:53:43:cf:49:23:45:70:35:b8:e6:b9:2c:66:ac:21:1a:aa: 36:d7:59:11:cf:33:32:0e:4e:b5:84:1c:ab:33:2d:2d:90:6a: d8:2a:9f:c6:3e:0f:51:b8:e4:db:c9:56:ea:0f:e2:f9:9f:3e: 2b:95:35:6c:de:42:b9:2c:88:69:59:8a:c7:cb:e1:0f:a1:2e: 64:c2:1d:90:91:4d:a1:a8:a7:ed:81:d5:5d:e8:77:e7:38:0d: dd:87:80:73:2b:4a:98:b4:73:66:ad:73:07:04:35:c1:85:31: 44:1a:54:3f:2f:05:41:f6:b2:c5:23:24:bc:53:af:a8:96:72: 88:40:d0:e2:00:89:32:a3:56:1f:52:7f:81:05:05:cd:26:a1: e5:6a:d5:4d:27:f2:be:17:ca:c4:37:9c:3f:4f:84:81:8e:65: 66:e4:7c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjUwNzAxMDcxMjQ2WhcNMjUwNzA4MDcxMjQ2WjAYMRYwFAYD VQQDEw02ODYzOGE2ZS1kNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKyb1KKi8PM4k3Hf/jZ0bometFGEB4BCe08Q6nZBabUcfPtxEcdBT8aIdAmR QFAc1AZajltcJRBcI1zM7zBxojhfwgeMD+9o9yel5HhS+nLndxa833XYnCTNbtEc sFpFrrQk+AnJTTLP8y9Iq8RhwY2HMWlhllOkVboqLaXidRQFx4pZsOglhhBWnFTy YBiDHATVRRvhKuw8UxM2PK8fXpjfw+J3Dubqtxx6ZnlsFm0mDUVY/Kc3x3gAQ7Ce vFTo3MbRnbrUV2RQGAqD8bOp9q81fGSnkU23RUcmGT9k5GxQirv+iSRkQ9mn92qb WqjrQYEEoZUAlUl8zB6LYMyQmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrEBzGw 75eXKJUwsg9yB8ns9SLHMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwqhQAS0KAZVayySuXbrJJ9XAHQ9XY/u9UZyvXuAf6j8fcps/V1GCk sqvpjXOVSwSKzv0/sBxEMe//ymHYUpgON8y/B8DzR8bmy8DydThwOlwvUiM6Ov3T BzWMU0PPSSNFcDW45rksZqwhGqo211kRzzMyDk61hByrMy0tkGrYKp/GPg9RuOTb yVbqD+L5nz4rlTVs3kK5LIhpWYrHy+EPoS5kwh2QkU2hqKftgdVd6HfnOA3dh4Bz K0qYtHNmrXMHBDXBhTFEGlQ/LwVB9rLFIyS8U6+olnKIQNDiAIkyo1YfUn+BBQXN JqHlatVNJ/K+F8rEN5w/T4SBjmVm5Hz6 -----END CERTIFICATE-----Generated at Thu Jul 3 06:29:24 2025 by rpki-client