$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: tJAodltU3sjvfRdTjP3ot7XN5DTAuICRqT50VD2Mr5k= Subject key identifier: 7A:2A:64:DD:28:38:E3:15:D9:1B:57:5D:E8:B0:BB:8A:F9:C6:B0:68 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 3054 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 3045 Signing time: Fri 04 Jul 2025 15:37:15 +0000 Manifest this update: Fri 04 Jul 2025 15:37:14 +0000 Manifest next update: Fri 11 Jul 2025 15:37:14 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: Qlzx9gJwRAKanTWgY10g97+LflgxxrGUcmTAC0a52NU=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: hQKUzdzJskNaUaPGl2kmEUdrCcgwSNhHBQ7D6gtHv6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12372 (0x3054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Jul 4 15:37:14 2025 GMT Not After : Jul 11 15:37:14 2025 GMT Subject: CN=6867f52a-277d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:a8:00:13:d5:f0:b5:f3:73:62:cb:d9:06: 66:9e:7c:94:5f:f7:07:b9:82:26:23:41:27:7b:28: 74:ea:92:47:3f:ff:a7:cd:d6:cc:a0:3b:4f:c1:27: a2:15:90:d5:ba:b0:b3:33:c6:3e:a2:e4:64:24:9f: 0d:bc:30:00:8c:04:6a:62:ac:60:8d:63:77:ed:d6: d7:9e:50:64:f3:59:7f:b3:47:90:a8:87:34:86:45: 3d:26:49:8d:34:b5:a1:1c:a6:36:af:33:d8:96:c8: 0f:64:ab:52:da:ef:72:24:b7:92:16:b4:d3:7c:d3: 16:11:b2:53:54:55:d6:ae:2c:53:e4:7d:4d:ea:03: 9c:57:ea:ae:94:a8:68:d0:59:fa:4d:85:1a:18:82: 5f:b5:87:d0:01:c4:2c:df:c4:65:dd:8b:40:b2:65: 0c:27:e0:34:60:df:af:37:ab:bb:22:92:79:84:72: b6:57:5d:57:5e:7e:3d:96:78:cd:65:82:01:d5:c4: dd:0e:82:d7:56:02:a8:da:3f:90:e1:5f:56:6f:cb: 18:ee:b6:0a:3c:b6:6a:c6:dd:41:48:6e:76:9f:b3: 47:ab:27:d8:89:b3:ce:35:47:7f:b9:21:0d:89:2f: 6a:46:01:e5:f0:80:b7:dc:84:80:94:7f:29:e4:4f: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2A:64:DD:28:38:E3:15:D9:1B:57:5D:E8:B0:BB:8A:F9:C6:B0:68 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:e5:a7:a5:0a:bb:25:3f:26:d8:95:3f:95:0b:ec:c2:03:65: d1:97:36:66:f2:8c:d8:73:b4:18:87:f3:09:a7:a3:6e:ac:ec: 8a:81:b5:cc:c8:5e:14:c7:e8:8c:33:7f:0e:18:70:b8:b9:27: a5:11:68:d0:97:00:26:52:7f:36:ba:bb:f3:1c:4f:81:64:ba: 17:69:f4:78:58:2c:28:c5:87:eb:90:c7:47:50:15:ab:ea:00: 80:7b:19:4a:13:e6:42:47:cd:11:63:03:5d:65:e9:ad:09:47: 5e:21:64:96:6e:64:ca:46:a6:ca:5c:3f:f4:fa:89:8c:68:81: 52:cd:70:46:36:2e:c6:62:35:87:a4:ab:8e:bc:99:13:74:f6: 91:4c:79:79:18:bf:9d:d0:49:3f:a0:0d:f5:ad:b9:a9:ed:8b: c7:70:93:f1:15:1a:af:b9:c6:c4:0b:22:e4:4f:68:46:35:54: 49:62:84:2f:71:81:22:80:bc:7f:c8:95:50:81:f3:57:41:c2: db:ee:15:c0:61:2e:70:03:99:73:ae:58:7d:1d:a8:4e:32:79: 4e:b8:5c:e0:9d:a9:63:68:75:22:6d:29:ea:08:f4:22:be:de: 44:f3:74:16:e0:22:a4:96:49:92:cb:90:87:17:0c:2e:8d:77: 13:8f:95:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUwNzA0MTUzNzE0WhcNMjUwNzExMTUzNzE0WjAYMRYwFAYD VQQDEw02ODY3ZjUyYS0yNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMGoABPV8LXzc2LL2QZmnnyUX/cHuYImI0Eneyh06pJHP/+nzdbMoDtPwSei FZDVurCzM8Y+ouRkJJ8NvDAAjARqYqxgjWN37dbXnlBk81l/s0eQqIc0hkU9JkmN NLWhHKY2rzPYlsgPZKtS2u9yJLeSFrTTfNMWEbJTVFXWrixT5H1N6gOcV+qulKho 0Fn6TYUaGIJftYfQAcQs38Rl3YtAsmUMJ+A0YN+vN6u7IpJ5hHK2V11XXn49lnjN ZYIB1cTdDoLXVgKo2j+Q4V9Wb8sY7rYKPLZqxt1BSG52n7NHqyfYibPONUd/uSEN iS9qRgHl8IC33ISAlH8p5E9eywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoqZN0o OOMV2RtXXeiwu4r5xrBoMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH5aelCrslPybYlT+VC+zCA2XRlzZm8ozYc7QYh/MJp6NurOyKgbXM yF4Ux+iMM38OGHC4uSelEWjQlwAmUn82urvzHE+BZLoXafR4WCwoxYfrkMdHUBWr 6gCAexlKE+ZCR80RYwNdZemtCUdeIWSWbmTKRqbKXD/0+omMaIFSzXBGNi7GYjWH pKuOvJkTdPaRTHl5GL+d0Ek/oA31rbmp7YvHcJPxFRqvucbECyLkT2hGNVRJYoQv cYEigLx/yJVQgfNXQcLb7hXAYS5wA5lzrlh9HahOMnlOuFzgnaljaHUibSnqCPQi vt5E83QW4CKklkmSy5CHFwwujXcTj5Wg -----END CERTIFICATE-----Generated at Fri Jul 4 18:43:53 2025 by rpki-client