$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: nOcHIFWVHh9uANhnL77PJeO9CLhpBlLrUmHtSsOVHrA= Subject key identifier: 95:D2:70:B5:D8:DE:E1:0D:5C:86:1C:40:58:11:34:4A:CC:78:C9:9B Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: DA Signing time: Thu 03 Jul 2025 06:00:32 +0000 Manifest this update: Thu 03 Jul 2025 06:00:31 +0000 Manifest next update: Thu 10 Jul 2025 06:00:31 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: kG+p/D0AjXNGoQtZKk+wY7RnAADbQZEiZTUoiKQ5LdE=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Jul 3 06:00:31 2025 GMT Not After : Jul 10 06:00:31 2025 GMT Subject: CN=68661c7f-57c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:5c:2d:2f:0a:48:9e:5c:b0:da:36:4e:e2: 12:2e:9a:88:f3:37:c8:9e:68:30:32:2c:68:ad:21: 83:3b:ff:b9:e4:63:3c:ac:1d:04:17:5b:5c:f2:bb: 59:04:a9:02:e8:6e:09:a8:f8:c5:e5:98:70:b5:ac: 5b:07:fd:fc:42:85:22:96:f8:66:c2:9a:b6:7d:f1: 6a:38:c6:45:99:da:43:48:30:9e:82:b7:76:e4:5c: dd:6c:8d:13:19:cd:61:f6:8c:2c:5d:8f:fb:60:93: 4e:16:4a:73:69:b7:a3:73:52:96:ec:da:97:08:d2: 2a:94:68:99:4f:65:95:b8:43:e1:7f:67:0d:0f:38: 8e:a6:8c:7a:af:83:b7:48:06:a0:6f:1c:bd:c0:c5: df:05:e2:fe:fa:04:61:7e:c5:33:a9:01:1a:a4:f7: 83:59:6e:47:fb:5c:15:31:8f:8f:f5:b1:cb:da:7d: bb:62:dc:e9:b8:14:38:50:9b:3d:9c:7a:b6:90:f9: 82:b4:3a:e6:66:e7:13:93:39:34:00:d5:a4:75:73: 74:45:5c:ca:e0:e8:d4:89:f1:70:2e:0a:ce:08:26: 9b:31:f3:6d:5b:dd:5c:78:a5:3c:19:80:c7:da:9d: f5:05:b5:da:f8:9b:8d:44:a8:ce:74:4d:db:ca:ec: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D2:70:B5:D8:DE:E1:0D:5C:86:1C:40:58:11:34:4A:CC:78:C9:9B X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cf:95:f6:c7:21:ee:dd:21:0b:e7:14:02:c1:28:4a:52:4e: 03:10:ed:8e:be:a6:07:2b:e4:88:5c:96:ee:15:77:e3:09:c9: 12:a2:94:76:50:f9:2b:a7:cb:b1:56:ff:56:8c:e7:a5:13:9c: 22:08:dd:da:95:0e:35:ee:a4:ce:ae:24:cb:b0:c4:5a:93:21: 4b:de:07:c6:c9:80:7a:ab:f5:10:0a:2a:91:13:4a:b6:6f:32: 65:e9:cf:f2:77:9e:57:00:de:7e:ca:04:02:8d:13:4c:6b:5f: 94:ab:d4:2e:e3:90:21:12:6b:72:11:00:d9:97:d3:ca:c4:76: 1e:33:7c:a7:23:64:06:9a:56:72:d4:49:1c:49:54:60:ee:1b: d4:23:16:8e:eb:56:1a:30:6a:5f:96:92:ba:2a:62:4e:ae:d0: ba:3a:10:92:3d:be:25:58:d1:69:41:3d:bb:93:84:ab:08:b4: 3d:61:78:65:a0:fd:d7:cd:f2:a9:74:1f:74:f2:87:d5:aa:23: 8f:41:30:c1:4e:1b:5d:d3:6f:87:95:77:dc:9f:f8:f7:db:b9: 58:22:3a:da:5d:fc:6c:8a:e1:b7:2f:d2:96:da:57:65:a9:23: c3:69:24:48:6f:fe:e5:4a:c1:5f:84:fa:35:18:ab:7f:e1:9c: 7c:b1:31:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwNzAzMDYwMDMxWhcNMjUwNzEwMDYwMDMxWjAYMRYwFAYD VQQDEw02ODY2MWM3Zi01N2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+FcLS8KSJ5csNo2TuISLpqI8zfInmgwMixorSGDO/+55GM8rB0EF1tc8rtZ BKkC6G4JqPjF5ZhwtaxbB/38QoUilvhmwpq2ffFqOMZFmdpDSDCegrd25FzdbI0T Gc1h9owsXY/7YJNOFkpzabejc1KW7NqXCNIqlGiZT2WVuEPhf2cNDziOpox6r4O3 SAagbxy9wMXfBeL++gRhfsUzqQEapPeDWW5H+1wVMY+P9bHL2n27YtzpuBQ4UJs9 nHq2kPmCtDrmZucTkzk0ANWkdXN0RVzK4OjUifFwLgrOCCabMfNtW91ceKU8GYDH 2p31BbXa+JuNRKjOdE3byuxPswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXScLXY 3uENXIYcQFgRNErMeMmbMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuz5X2xyHu3SEL5xQCwShKUk4DEO2OvqYHK+SIXJbuFXfjCckSopR2 UPkrp8uxVv9WjOelE5wiCN3alQ417qTOriTLsMRakyFL3gfGyYB6q/UQCiqRE0q2 bzJl6c/yd55XAN5+ygQCjRNMa1+Uq9Qu45AhEmtyEQDZl9PKxHYeM3ynI2QGmlZy 1EkcSVRg7hvUIxaO61YaMGpflpK6KmJOrtC6OhCSPb4lWNFpQT27k4SrCLQ9YXhl oP3XzfKpdB908ofVqiOPQTDBThtd02+HlXfcn/j327lYIjraXfxsiuG3L9KW2ldl qSPDaSRIb/7lSsFfhPo1GKt/4Zx8sTFV -----END CERTIFICATE-----Generated at Thu Jul 3 21:55:13 2025 by rpki-client