$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json) Hash identifier: Wk41mYYy9DgYk8bEkmkbxfCazHFohz32v2x7jKN5yz8= Subject key identifier: 3E:F4:C8:87:65:B7:66:E3:75:3E:53:2D:89:3E:0E:BF:C3:E6:D6:B8 Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 Certificate issuer: /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft Manifest number: 93 Signing time: Tue 01 Jul 2025 07:07:50 +0000 Manifest this update: Tue 01 Jul 2025 07:07:50 +0000 Manifest next update: Tue 08 Jul 2025 07:07:50 +0000 Files and hashes: 1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: x/txt9P1LGHEueakMr2zRaTKsULVpEwNFT9NDVK+Iqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Validity Not Before: Jul 1 07:07:50 2025 GMT Not After : Jul 8 07:07:50 2025 GMT Subject: CN=68638946-3471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:fc:0d:17:09:1f:e1:58:b1:6e:02:91:73: 70:95:43:71:bd:ff:f1:3c:81:77:0d:7d:37:d7:68: 1e:83:6e:30:8a:65:4b:e6:01:f4:3c:97:8c:ed:08: 12:89:6a:9a:1c:e7:63:c3:a2:71:15:b6:4b:b0:f8: 05:c2:2a:d5:a1:80:fb:d1:f9:69:a5:e0:cd:9d:80: cb:68:92:b9:29:9f:7c:38:04:04:d1:f6:ba:ae:08: 6e:bc:70:1c:1a:af:d7:a1:51:4c:2a:a1:54:52:48: 41:29:39:3d:1b:a3:3e:40:ed:01:3b:40:e3:1f:6e: 41:18:99:d1:36:ca:73:df:4c:67:fe:14:69:cc:34: 58:f2:84:83:05:dc:ac:0b:6d:14:92:e5:1a:5b:fb: 81:1b:d1:d0:f6:63:d1:6b:36:2a:70:e9:3e:dc:ed: ba:38:c4:61:76:d2:ce:fb:63:72:c2:84:58:a0:d1: 4e:5f:73:a0:29:d8:50:a3:34:ec:f7:6a:65:3f:f9: 0f:a8:e2:2b:54:62:37:59:52:8a:16:2e:51:95:85: 7a:8e:f9:bc:81:06:c2:63:af:da:ba:56:24:20:57: b4:17:ae:46:ff:ee:8b:32:ad:9a:9a:c9:b3:2c:8a: 39:05:ad:f4:d2:f9:92:0a:a4:30:85:d2:96:87:ec: cd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F4:C8:87:65:B7:66:E3:75:3E:53:2D:89:3E:0E:BF:C3:E6:D6:B8 X509v3 Authority Key Identifier: keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f6:7d:1f:55:12:01:d2:e7:5b:43:58:cd:8b:c8:c1:94:58: 41:f2:59:b5:db:ea:9d:3d:8f:41:cf:be:77:75:c9:50:2e:b5: 2f:ee:85:ae:a1:e9:b5:f1:86:86:1f:39:df:63:28:f7:fb:a3: 9b:2d:43:0f:b0:98:5d:97:e1:42:48:6b:41:c9:56:5a:f0:9f: 96:cc:ae:b3:6e:63:88:c1:ed:a4:51:ca:16:69:22:8a:e9:56: 9e:ed:08:ca:0a:84:f1:b5:db:08:18:0e:a2:72:50:e1:4e:78: 10:3a:16:48:30:92:c1:6a:c2:f2:11:cf:ae:18:c3:5e:89:8d: 69:3f:a4:f0:c6:2c:a2:f1:2b:64:ac:2e:fe:c6:cc:e2:96:b7: c1:82:0f:3a:1c:87:4f:ee:5a:b6:04:6f:74:a0:4d:df:6f:bb: cf:93:9d:da:4a:d0:74:ad:d2:d4:6e:95:42:57:f3:09:d7:63: 7c:65:a0:84:35:2d:5d:eb:e9:0e:01:dc:a8:e9:05:30:89:9d: 8d:f1:95:e9:30:dd:85:30:5d:75:79:69:3e:ab:99:d2:5c:29: 7e:c9:c4:c8:91:75:e5:a2:ed:24:08:d3:20:7c:cf:35:70:ec: d0:f1:8b:f8:8e:79:4b:b1:b1:81:0e:ad:41:73:eb:b1:93:1a: ff:d1:82:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzRjAxMTAvBgNVBAUTKEJEOTI2MjZCNDAwQkIxNERFNDFBNTA1MzlEOTYwRkM1 REQ2MURDMzcwHhcNMjUwNzAxMDcwNzUwWhcNMjUwNzA4MDcwNzUwWjAYMRYwFAYD VQQDEw02ODYzODk0Ni0zNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn38DRcJH+FYsW4CkXNwlUNxvf/xPIF3DX0312geg24wimVL5gH0PJeM7QgS iWqaHOdjw6JxFbZLsPgFwirVoYD70flppeDNnYDLaJK5KZ98OAQE0fa6rghuvHAc Gq/XoVFMKqFUUkhBKTk9G6M+QO0BO0DjH25BGJnRNspz30xn/hRpzDRY8oSDBdys C20UkuUaW/uBG9HQ9mPRazYqcOk+3O26OMRhdtLO+2NywoRYoNFOX3OgKdhQozTs 92plP/kPqOIrVGI3WVKKFi5RlYV6jvm8gQbCY6/aulYkIFe0F65G/+6LMq2amsmz LIo5Ba300vmSCqQwhdKWh+zNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD70yIdl t2bjdT5TLYk+Dr/D5ta4MB8GA1UdIwQYMBaAFL2SYmtAC7FN5BpQU52WD8XdYdw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDNGMC9DQTZCOTRDQzc0 RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNVM2tHbEJUblpZUHhkMWgz RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDNGMC9DQTZCOTRDQzc0RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNV M2tHbEJUblpZUHhkMWgzRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA89n0fVRIB0udbQ1jNi8jBlFhB8lm12+qdPY9Bz753dclQLrUv7oWu oem18YaGHznfYyj3+6ObLUMPsJhdl+FCSGtByVZa8J+WzK6zbmOIwe2kUcoWaSKK 6Vae7QjKCoTxtdsIGA6iclDhTngQOhZIMJLBasLyEc+uGMNeiY1pP6Twxiyi8Stk rC7+xszilrfBgg86HIdP7lq2BG90oE3fb7vPk53aStB0rdLUbpVCV/MJ12N8ZaCE NS1d6+kOAdyo6QUwiZ2N8ZXpMN2FMF11eWk+q5nSXCl+ycTIkXXlou0kCNMgfM81 cOzQ8Yv4jnlLsbGBDq1Bc+uxkxr/0YIS -----END CERTIFICATE-----Generated at Wed Jul 2 12:23:53 2025 by rpki-client