$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: flssJA8qqij9Z/GjtuzSy/Y/ko6WUFqu2CcZY8acUWs= Subject key identifier: 9F:0A:57:16:76:69:3C:41:6B:2A:7D:78:9A:46:E1:B4:77:95:6B:A8 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 027D Signing time: Thu 03 Jul 2025 03:51:30 +0000 Manifest this update: Thu 03 Jul 2025 03:51:29 +0000 Manifest next update: Thu 10 Jul 2025 03:51:29 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: m+UAVPixmGEF8/Sb4T34bbgyFvIh74NVT2iVPWXi2xA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Jul 3 03:51:29 2025 GMT Not After : Jul 10 03:51:29 2025 GMT Subject: CN=6865fe41-ad6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:64:e3:7f:54:8f:cd:89:14:9d:31:8f:8f: 6d:69:8b:a0:a9:b6:2c:e6:c5:53:12:df:b8:fb:a9: f8:4d:62:fe:b8:99:f8:5c:e5:96:1a:4f:7c:42:77: 0c:10:99:6b:16:73:cc:0f:92:16:02:9d:be:10:d0: 29:43:fe:1c:ae:e0:08:a4:8e:ea:6d:e9:b3:bd:83: ae:2a:7e:aa:47:a0:04:e5:be:14:19:59:6b:3c:c4: 60:78:9e:5a:d6:31:6f:2f:c7:2f:a9:88:3a:ea:1d: 7d:28:36:29:ab:10:00:92:43:8c:7d:9c:84:33:dc: 95:e8:bd:47:c5:3b:68:a3:bb:92:58:cd:be:d6:f2: 4a:f8:4b:3f:03:a4:37:81:29:b8:3e:82:18:ed:89: 1b:74:6d:68:e9:6c:22:bd:1c:5f:52:fa:39:e9:f1: ed:94:81:64:fb:97:2a:f0:2d:0c:7f:5d:ce:20:b1: 30:3b:6b:71:ca:16:6d:9b:e6:d3:2e:eb:b0:08:c2: ac:aa:52:d4:73:b7:9d:4f:92:92:f7:81:c5:bd:41: 05:d6:7f:ce:9e:a6:b0:fb:55:08:73:72:de:d2:0c: 25:8a:58:19:24:32:82:88:51:fb:e6:5f:63:e8:c9: 62:a3:3d:32:71:7e:e4:70:66:44:11:29:a9:cf:97: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0A:57:16:76:69:3C:41:6B:2A:7D:78:9A:46:E1:B4:77:95:6B:A8 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9f:91:a6:dc:01:4b:d6:ad:e4:45:5e:27:b9:66:93:d1:95: 50:37:bd:e9:9f:78:12:bb:d4:71:e3:48:0a:c3:6f:b1:50:4c: cb:cd:5c:15:e4:af:a7:55:b0:e3:ff:b5:47:82:e8:db:2a:74: a1:c7:ab:ce:5c:95:21:05:ae:e2:52:8c:97:10:9c:fb:32:e5: fe:df:26:54:fa:92:b2:37:56:61:37:76:be:c5:02:83:32:6a: 8d:a0:ad:bd:e8:52:f3:b3:de:b6:e0:6c:a0:71:c6:5e:d7:59: 58:ed:fb:bf:a8:7f:ce:35:65:ee:93:eb:27:35:98:da:08:0c: d8:c4:88:0d:bf:04:8a:bf:99:5f:11:78:25:1c:25:45:43:2d: 6d:10:6a:c7:16:6d:25:6d:78:7f:dd:5a:69:49:80:1d:6c:34: 58:67:69:4d:37:94:15:4e:ca:bd:e5:5e:cc:14:82:49:31:b3: 4c:1f:ca:bd:4a:9b:20:01:d7:5d:f4:db:68:9b:02:bc:a7:ca: d4:61:fc:1a:74:28:1c:d4:39:fa:26:95:49:ee:5a:bb:61:4e: c8:68:77:b4:ba:82:34:98:7c:57:0c:a6:d7:c7:62:83:5b:28: 5f:f2:a4:7a:9f:28:5d:41:6c:ac:cc:eb:5a:38:8f:0c:b6:12: 88:3e:d7:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUwNzAzMDM1MTI5WhcNMjUwNzEwMDM1MTI5WjAYMRYwFAYD VQQDEw02ODY1ZmU0MS1hZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0Nk439Uj82JFJ0xj49taYugqbYs5sVTEt+4+6n4TWL+uJn4XOWWGk98QncM EJlrFnPMD5IWAp2+ENApQ/4cruAIpI7qbemzvYOuKn6qR6AE5b4UGVlrPMRgeJ5a 1jFvL8cvqYg66h19KDYpqxAAkkOMfZyEM9yV6L1HxTtoo7uSWM2+1vJK+Es/A6Q3 gSm4PoIY7YkbdG1o6WwivRxfUvo56fHtlIFk+5cq8C0Mf13OILEwO2txyhZtm+bT LuuwCMKsqlLUc7edT5KS94HFvUEF1n/Onqaw+1UIc3Le0gwlilgZJDKCiFH75l9j 6Mlioz0ycX7kcGZEESmpz5fANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8KVxZ2 aTxBayp9eJpG4bR3lWuoMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbn5Gm3AFL1q3kRV4nuWaT0ZVQN73pn3gSu9Rx40gKw2+xUEzLzVwV 5K+nVbDj/7VHgujbKnShx6vOXJUhBa7iUoyXEJz7MuX+3yZU+pKyN1ZhN3a+xQKD MmqNoK296FLzs9624GygccZe11lY7fu/qH/ONWXuk+snNZjaCAzYxIgNvwSKv5lf EXglHCVFQy1tEGrHFm0lbXh/3VppSYAdbDRYZ2lNN5QVTsq95V7MFIJJMbNMH8q9 SpsgAddd9NtomwK8p8rUYfwadCgc1Dn6JpVJ7lq7YU7IaHe0uoI0mHxXDKbXx2KD Wyhf8qR6nyhdQWyszOtaOI8MthKIPte+ -----END CERTIFICATE-----Generated at Fri Jul 4 11:40:26 2025 by rpki-client