$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: yjyw1nRk0Zj5Kjqd4kjTxQ8jrKmX/KzKBGx8FrZ8Cj8= Subject key identifier: 95:9F:53:01:1F:1C:6F:4C:9E:A3:33:FF:3D:72:09:24:AE:D0:4B:43 Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 092A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 0923 Signing time: Wed 02 Jul 2025 20:31:20 +0000 Manifest this update: Wed 02 Jul 2025 20:31:19 +0000 Manifest next update: Wed 09 Jul 2025 20:31:19 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: qUDHc2DSLrVC3kBqIlDrXpaiOHV5jB1mIrHB1RQDjKg=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2346 (0x92a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: Jul 2 20:31:19 2025 GMT Not After : Jul 9 20:31:19 2025 GMT Subject: CN=68659718-6ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:92:b2:c2:d6:5a:f9:d6:c9:17:ae:47:74: 80:6e:ce:c8:e0:8b:80:bc:cb:ed:ab:1e:64:34:7d: 4d:51:ea:e7:ab:94:db:a4:98:61:db:d4:2d:e6:2c: f1:4d:2d:df:e6:92:a5:83:6e:41:5c:cc:05:2d:1e: 85:df:63:c5:4d:bc:6f:3b:c5:18:54:c3:64:54:5a: 59:47:5f:16:98:a1:dc:1f:08:66:5d:a2:aa:b4:81: 6b:35:cd:fe:dd:86:93:eb:46:f1:81:37:34:41:3a: e2:bd:9c:af:c5:2c:37:b4:6b:cf:b7:e4:f3:64:94: 21:ba:59:b3:52:c6:57:9a:41:92:a4:d2:9a:5a:d8: 53:79:7f:c9:ef:35:ce:66:a3:61:22:78:45:f1:95: e4:5e:69:8d:bd:04:ab:0b:e6:f0:75:4d:7a:5c:8d: 86:92:54:41:fc:99:09:de:1a:56:61:4f:b1:c5:e6: fc:e4:1a:65:58:25:ab:61:02:be:53:22:65:fa:58: df:e4:19:a4:66:d1:04:4b:f8:c8:62:43:06:07:ec: 8a:7c:c7:4d:61:9f:e8:ff:fc:76:61:bc:7a:cd:55: 4c:b4:32:a2:ed:6b:9b:10:ac:8b:1c:13:5d:c1:02: 7f:11:43:dc:32:b7:4a:da:04:8a:bb:50:5f:5c:c9: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9F:53:01:1F:1C:6F:4C:9E:A3:33:FF:3D:72:09:24:AE:D0:4B:43 X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:43:e2:49:c4:e2:49:32:01:3a:8e:ca:2d:c9:91:22:20:c6: 80:10:53:b8:7e:76:0e:79:36:73:49:3f:f7:50:6a:5d:3d:bd: ed:e3:fd:a9:b1:d4:17:38:03:9b:88:83:44:28:93:45:21:a6: 4d:41:26:70:9b:9d:53:0c:5e:fb:9d:26:5a:2d:c0:50:ca:77: 9a:c0:4d:05:11:a4:b9:d2:f1:5b:3c:65:91:8f:29:30:f9:f6: 53:d1:e6:bf:90:c2:e2:eb:13:d2:44:33:6b:35:2d:e9:8b:d6: fa:1b:92:c6:ae:c3:4b:92:f1:a8:88:a9:b0:3b:bc:cf:72:9f: 84:ef:16:45:e2:b9:d0:4a:33:9b:a6:1a:a5:a4:4a:d4:07:bb: 40:40:f6:41:18:6d:57:14:28:28:cd:e9:bb:90:cc:98:49:73: d5:d1:7a:05:2b:09:f2:46:db:ba:d4:8c:95:02:14:c1:fe:43: 51:fe:30:58:a7:e4:4a:26:c6:cb:1a:a9:59:f1:e8:0c:c7:0f: 67:1a:2f:33:2b:18:de:d7:e6:13:50:c7:dc:39:b3:86:ea:bf: b6:db:ed:2d:44:f0:54:23:fd:50:1b:01:83:55:ec:d7:f8:4b: 47:5b:ea:4d:e8:06:d6:10:18:d7:75:ab:c3:4f:4d:8b:2c:0d: e9:98:30:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjUwNzAyMjAzMTE5WhcNMjUwNzA5MjAzMTE5WjAYMRYwFAYD VQQDEw02ODY1OTcxOC02ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ziSssLWWvnWyReuR3SAbs7I4IuAvMvtqx5kNH1NUernq5TbpJhh29Qt5izx TS3f5pKlg25BXMwFLR6F32PFTbxvO8UYVMNkVFpZR18WmKHcHwhmXaKqtIFrNc3+ 3YaT60bxgTc0QTrivZyvxSw3tGvPt+TzZJQhulmzUsZXmkGSpNKaWthTeX/J7zXO ZqNhInhF8ZXkXmmNvQSrC+bwdU16XI2GklRB/JkJ3hpWYU+xxeb85BplWCWrYQK+ UyJl+ljf5BmkZtEES/jIYkMGB+yKfMdNYZ/o//x2Ybx6zVVMtDKi7WubEKyLHBNd wQJ/EUPcMrdK2gSKu1BfXMlUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWfUwEf HG9MnqMz/z1yCSSu0EtDMB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Q+JJxOJJMgE6jsotyZEiIMaAEFO4fnYOeTZzST/3UGpdPb3t4/2p sdQXOAObiINEKJNFIaZNQSZwm51TDF77nSZaLcBQyneawE0FEaS50vFbPGWRjykw +fZT0ea/kMLi6xPSRDNrNS3pi9b6G5LGrsNLkvGoiKmwO7zPcp+E7xZF4rnQSjOb phqlpErUB7tAQPZBGG1XFCgozem7kMyYSXPV0XoFKwnyRtu61IyVAhTB/kNR/jBY p+RKJsbLGqlZ8egMxw9nGi8zKxje1+YTUMfcObOG6r+22+0tRPBUI/1QGwGDVezX +EtHW+pN6AbWEBjXdavDT02LLA3pmDAR -----END CERTIFICATE-----Generated at Thu Jul 3 14:51:48 2025 by rpki-client