$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json) Hash identifier: H45cwfV4N94WSRJty4hwwPola11c3Ls+CIEzcJA8kk4= Subject key identifier: D0:3A:F0:A5:92:CB:1A:A9:2F:7D:70:26:46:46:CA:BD:A1:C7:71:75 Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft Manifest number: 0680 Signing time: Wed 02 Jul 2025 22:42:24 +0000 Manifest this update: Wed 02 Jul 2025 22:42:24 +0000 Manifest next update: Wed 09 Jul 2025 22:42:24 +0000 Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: od3guynXq+KF3phnFffsVxJvV/8TDCz6JmX96u3LWb4=) 2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: Lz3W/TkDVHeZx5YYagD6lr1rtN4/8q3JKJK/D1U5/sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: Jul 2 22:42:24 2025 GMT Not After : Jul 9 22:42:24 2025 GMT Subject: CN=6865b5d0-c3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:ec:82:4f:cf:bf:86:f0:8d:83:a2:2f:62: 0e:44:42:00:da:b5:07:a8:78:78:0f:81:0f:cc:24: 82:3b:22:eb:c6:57:7a:d8:d6:88:ae:e4:53:2c:a5: 8f:21:92:79:a6:79:51:32:5b:a4:81:42:37:60:77: 77:87:60:61:ce:fc:cf:0c:76:ea:ce:42:fa:4e:8f: ea:eb:47:15:89:f9:fa:52:d9:43:c1:f8:ae:6c:27: af:43:3f:93:3a:96:f9:17:8d:16:6e:0a:a8:df:89: 05:f2:26:58:f8:22:48:d5:ba:34:bc:f6:eb:98:3a: 6f:33:4c:67:d8:66:cd:d6:3f:b2:c7:14:e7:80:a6: 56:f3:dc:2a:7f:06:4b:ad:94:fc:e9:c8:8d:9e:d9: df:be:59:f3:e7:52:b4:27:ef:52:4f:10:3d:e3:8b: 9a:07:62:dd:b6:87:2a:57:44:aa:85:1f:cc:48:e1: 05:d1:c8:07:13:16:c9:59:5c:d7:0e:7f:dc:ee:98: c7:de:ea:e7:84:7e:9c:f8:ca:32:8f:e0:bc:d7:23: be:ee:44:9c:25:ff:7f:3d:ea:2f:6d:73:99:6f:0e: ff:54:84:63:80:88:0f:49:58:18:d6:d3:d1:e4:f5: cc:eb:15:1c:4f:78:e1:f3:5a:a9:aa:67:28:ec:6b: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3A:F0:A5:92:CB:1A:A9:2F:7D:70:26:46:46:CA:BD:A1:C7:71:75 X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6e:5d:43:88:ce:e1:a5:b9:ab:75:71:0a:52:46:3a:b3:fd: 70:5d:d3:2a:2d:c5:48:b8:7f:04:e1:66:a6:81:ec:b0:be:ae: 46:58:d7:db:eb:e4:3e:84:fc:c2:00:3a:c0:7c:55:50:ba:04: 07:2a:95:26:6f:3e:67:1a:74:fd:e1:41:28:30:72:3e:df:32: 62:24:10:63:21:ba:51:ba:a2:59:11:20:5c:b1:63:41:3f:04: cb:dc:a0:fe:22:c7:49:58:76:29:33:9d:b2:7b:f3:45:89:d5: 8c:fc:fa:23:1b:1e:d0:12:f7:73:e3:6a:c9:fd:e5:a3:d6:2c: 49:59:08:ac:57:e0:70:6f:13:8f:f2:de:03:f6:2e:5c:b3:ee: 64:78:e9:74:1a:d0:9f:87:2c:36:5f:34:97:12:25:ea:98:02: f9:8d:d3:58:fe:5e:74:dc:21:3f:71:90:ba:c3:ea:21:5c:20: 76:46:69:c5:46:f3:b1:39:7d:07:bd:a8:ab:d9:42:0e:69:d7: 7d:65:28:e4:e2:fa:8c:8f:52:e8:02:dd:3c:f6:75:b2:38:92: d8:0b:88:cc:6e:37:54:40:2f:93:13:fd:dc:66:cf:39:8e:83: e4:23:f5:54:a2:71:79:57:1c:cb:6f:14:3a:f4:24:78:bf:bc: a2:66:c2:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjUwNzAyMjI0MjI0WhcNMjUwNzA5MjI0MjI0WjAYMRYwFAYD VQQDEw02ODY1YjVkMC1jM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBLsgk/Pv4bwjYOiL2IOREIA2rUHqHh4D4EPzCSCOyLrxld62NaIruRTLKWP IZJ5pnlRMlukgUI3YHd3h2BhzvzPDHbqzkL6To/q60cVifn6UtlDwfiubCevQz+T Opb5F40Wbgqo34kF8iZY+CJI1bo0vPbrmDpvM0xn2GbN1j+yxxTngKZW89wqfwZL rZT86ciNntnfvlnz51K0J+9STxA944uaB2LdtocqV0SqhR/MSOEF0cgHExbJWVzX Dn/c7pjH3urnhH6c+Moyj+C81yO+7kScJf9/PeovbXOZbw7/VIRjgIgPSVgY1tPR 5PXM6xUcT3jh81qpqmco7Guj1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA68KWS yxqpL31wJkZGyr2hx3F1MB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE Mk0yeERiaGtwTWNaTTgya0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAobl1DiM7hpbmrdXEKUkY6s/1wXdMqLcVIuH8E4Wamgeywvq5GWNfb 6+Q+hPzCADrAfFVQugQHKpUmbz5nGnT94UEoMHI+3zJiJBBjIbpRuqJZESBcsWNB PwTL3KD+IsdJWHYpM52ye/NFidWM/PojGx7QEvdz42rJ/eWj1ixJWQisV+BwbxOP 8t4D9i5cs+5keOl0GtCfhyw2XzSXEiXqmAL5jdNY/l503CE/cZC6w+ohXCB2RmnF RvOxOX0Hvair2UIOadd9ZSjk4vqMj1LoAt089nWyOJLYC4jMbjdUQC+TE/3cZs85 joPkI/VUonF5VxzLbxQ69CR4v7yiZsIJ -----END CERTIFICATE-----Generated at Thu Jul 3 12:28:50 2025 by rpki-client