$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: xjQUkwHjyiMpsXt8f/p+MZlOP+z9DftOXOZhcLlPmHI= Subject key identifier: 38:2C:C8:6D:7A:1D:4E:A6:CD:79:34:94:07:17:BE:5B:A6:4A:6B:6B Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: 0106 Signing time: Thu 03 Jul 2025 05:22:10 +0000 Manifest this update: Thu 03 Jul 2025 05:22:10 +0000 Manifest next update: Thu 10 Jul 2025 05:22:10 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: O+sRRO5SCW38g6TXm14GwlAp5UYLAnFZzX2F6Qfz80Y=) 2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: Jul 3 05:22:10 2025 GMT Not After : Jul 10 05:22:10 2025 GMT Subject: CN=68661382-db45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:77:51:ab:93:80:dd:d7:23:08:f8:f2:cf:9d: 46:97:ee:59:24:45:16:99:be:ee:ae:63:4b:ec:59: d8:c4:44:c3:90:2d:22:b7:3e:85:75:7f:6e:9c:25: 72:25:8d:4b:39:17:fb:ad:e9:25:dd:08:92:5f:98: c8:7f:18:3d:2d:b1:67:e2:3b:3c:58:30:bf:df:14: 9a:c8:c1:93:cd:64:49:4f:6d:1e:a3:3f:a6:3e:c5: cb:6c:73:5a:52:47:5b:23:2f:ca:0f:0b:a4:aa:f2: 30:29:82:d6:c3:ce:20:e9:e9:5a:59:2a:e8:69:8e: 43:97:6e:58:b5:6e:a1:1f:95:87:d9:84:52:57:f6: 4a:49:f6:d9:1a:92:37:45:b6:ad:6a:5b:a0:b7:aa: 95:8b:63:de:10:f8:a9:d4:2f:ef:fd:81:57:96:ea: bb:27:2a:45:3d:ff:09:48:e6:c2:de:e7:b5:00:70: 00:a8:c8:1f:74:0d:1d:9b:e2:79:22:ed:55:16:5b: 41:f9:23:84:ac:44:7d:e3:2c:d5:b1:02:d5:60:6d: cf:00:fe:2e:95:39:e3:53:81:4a:c4:23:51:3e:6c: d0:c4:70:e7:23:b6:21:ab:ae:a5:69:0c:f9:d1:c8: b3:0c:b7:bc:a6:07:9e:b3:67:12:09:c5:91:b4:24: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2C:C8:6D:7A:1D:4E:A6:CD:79:34:94:07:17:BE:5B:A6:4A:6B:6B X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f3:c4:f3:44:b7:d5:8e:53:ed:5d:2e:c0:5f:aa:62:d4:84: cb:63:bf:51:74:54:ea:88:38:5b:ec:be:d8:60:2b:93:ee:fa: 56:51:01:0c:ed:66:71:2a:c6:fc:55:fd:9a:5e:be:21:9b:de: 11:60:9f:5b:ca:ff:3b:6f:d7:07:89:3e:7b:dc:4e:ff:4a:a0: ad:e3:c7:7e:43:38:02:b6:1a:2e:1f:76:c2:f4:fd:32:8f:1b: fe:f7:0f:cc:f2:54:ee:85:c4:9c:a5:1a:51:9d:7a:ef:e8:a9: 35:5d:33:55:21:26:68:86:86:8e:b0:4c:e4:cf:8b:07:5a:db: f3:89:9a:4c:c2:d3:fe:98:67:35:d0:9f:a1:4c:7f:2b:7c:a1: db:0a:5f:35:18:29:8f:62:45:38:fd:e9:f1:de:91:6f:41:e7: 24:44:a1:52:9b:24:b8:3f:da:91:71:81:5c:09:50:11:10:93: 73:81:8b:64:71:b2:60:3a:eb:08:98:66:8e:09:29:0d:50:b6: ac:23:f3:54:60:52:f8:7c:6c:ee:ee:d2:da:f3:3c:bf:f8:0f: c3:45:48:13:35:1d:bd:64:05:60:27:e4:bf:04:8c:53:ba:9e: 0e:8d:1b:85:f4:66:d4:de:e9:d5:d6:82:fe:7c:aa:98:73:28: bf:e1:2d:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB QTczMUI1NTIwHhcNMjUwNzAzMDUyMjEwWhcNMjUwNzEwMDUyMjEwWjAYMRYwFAYD VQQDEw02ODY2MTM4Mi1kYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XdRq5OA3dcjCPjyz51Gl+5ZJEUWmb7urmNL7FnYxETDkC0itz6FdX9unCVy JY1LORf7rekl3QiSX5jIfxg9LbFn4js8WDC/3xSayMGTzWRJT20eoz+mPsXLbHNa UkdbIy/KDwukqvIwKYLWw84g6elaWSroaY5Dl25YtW6hH5WH2YRSV/ZKSfbZGpI3 Rbatalugt6qVi2PeEPip1C/v/YFXluq7JypFPf8JSObC3ue1AHAAqMgfdA0dm+J5 Iu1VFltB+SOErER94yzVsQLVYG3PAP4ulTnjU4FKxCNRPmzQxHDnI7Yhq66laQz5 0cizDLe8pgees2cSCcWRtCT6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgsyG16 HU6mzXk0lAcXvlumSmtrMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5 RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT88TzRLfVjlPtXS7AX6pi1ITLY79RdFTqiDhb7L7YYCuT7vpWUQEM 7WZxKsb8Vf2aXr4hm94RYJ9byv87b9cHiT573E7/SqCt48d+QzgCthouH3bC9P0y jxv+9w/M8lTuhcScpRpRnXrv6Kk1XTNVISZohoaOsEzkz4sHWtvziZpMwtP+mGc1 0J+hTH8rfKHbCl81GCmPYkU4/enx3pFvQeckRKFSmyS4P9qRcYFcCVAREJNzgYtk cbJgOusImGaOCSkNULasI/NUYFL4fGzu7tLa8zy/+A/DRUgTNR29ZAVgJ+S/BIxT up4OjRuF9GbU3unV1oL+fKqYcyi/4S3P -----END CERTIFICATE-----Generated at Thu Jul 3 14:46:40 2025 by rpki-client