$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json) Hash identifier: rzfzvwFtGVNjMVPbxNae+IeCRkGhR1irbzOXBNnp6RM= Subject key identifier: 1D:25:C0:77:58:E5:A1:A7:A3:39:36:9E:9B:59:26:DC:47:80:8F:3B Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft Manifest number: 99 Signing time: Tue 01 Jul 2025 07:04:00 +0000 Manifest this update: Tue 01 Jul 2025 07:03:59 +0000 Manifest next update: Tue 08 Jul 2025 07:03:59 +0000 Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: Z1Yd0Bzm1PaugI+bI7gYdNQI6iMJNWxQDzIflzQXykk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Validity Not Before: Jul 1 07:03:59 2025 GMT Not After : Jul 8 07:03:59 2025 GMT Subject: CN=68638860-79ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6c:a9:1b:8f:95:b5:23:71:fd:93:09:6c:6f: 23:99:57:ed:a9:d4:5f:1b:30:4c:7b:a6:08:ab:4c: ce:56:82:ef:88:e1:69:75:62:17:cc:d5:e8:0a:ec: d5:9c:b6:22:98:cf:6c:a6:8d:e9:bc:93:ad:e0:71: 8d:f1:dc:21:f0:eb:0b:f3:d8:25:0f:37:92:f9:32: 4d:72:4b:3f:46:bf:a6:fb:f9:c6:dd:ae:f4:e4:6a: 54:ce:6e:9f:6e:a9:cc:4f:ea:57:9b:2c:19:7a:cc: be:89:e8:cf:95:69:da:07:1b:b9:fb:1c:b2:8d:07: 35:00:87:f1:b7:d5:99:65:8f:26:02:cc:43:09:48: ab:cf:5c:05:d1:7e:70:4b:e5:23:63:c2:65:0a:69: ab:be:39:b4:e1:6d:1a:ef:a3:c1:1e:a1:d5:1e:f5: a4:dd:42:b3:5b:38:00:22:a9:5b:f1:0a:4a:cd:95: d9:03:85:2e:be:31:87:a0:6b:4b:13:19:22:83:83: 55:fe:f6:ec:2d:c6:33:31:8d:ce:d5:c2:ee:f9:0c: 66:be:a7:32:4a:bd:46:be:fd:e8:66:70:95:eb:64: c2:d8:05:68:58:a8:8c:08:f8:12:7a:6d:b7:01:bc: 54:dd:91:65:66:cc:78:5e:b2:9b:ed:8f:e2:90:d1: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:25:C0:77:58:E5:A1:A7:A3:39:36:9E:9B:59:26:DC:47:80:8F:3B X509v3 Authority Key Identifier: keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:55:3c:fc:1f:ca:d4:6f:3a:7c:e7:dd:32:9b:aa:0b:2d:00: c3:03:ad:01:29:07:ca:b5:1a:4a:7b:9c:fa:8e:e0:29:c6:ec: 20:a2:85:d3:d7:4c:fa:24:c0:4e:45:b4:5e:9e:a5:0c:c9:40: 97:89:a5:0d:04:14:17:c0:f8:a3:8d:af:cb:50:51:66:55:10: 18:4e:87:cd:31:6e:41:f8:bd:e9:9d:f1:47:1a:bb:89:4d:c8: ee:6a:13:26:4c:69:ee:53:5e:1b:7a:03:40:28:ca:8d:6b:e2: 24:cd:18:c1:8e:03:93:6e:32:44:5f:51:84:62:e5:49:10:a6: db:ed:22:7c:61:ba:46:79:2a:fd:46:c3:78:b0:ee:fe:15:6e: 21:93:7d:fb:b5:57:0a:d6:e3:fb:78:99:5d:10:67:72:e0:bc: e6:4d:80:0d:60:1c:78:4c:e8:6c:66:d8:c1:91:7b:6c:e4:f2: 66:f8:2f:09:14:68:08:fa:69:bc:41:c8:e0:74:2a:ab:39:da: 31:0f:52:63:d6:f7:66:2e:d2:52:5b:43:0e:26:f3:8b:b3:4c: 43:c5:f9:35:13:df:49:7e:bb:63:65:aa:20:7d:e9:e1:89:d9: 7e:12:27:90:d6:a4:0d:1f:d9:09:52:3e:7e:d7:85:f1:04:1f: 97:05:3d:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyQzQxMTAvBgNVBAUTKDY2QzVCMTkwNEIzNUM0N0Q5NDUwOEVDMEExQUNEQTgz NjhERUY0QTkwHhcNMjUwNzAxMDcwMzU5WhcNMjUwNzA4MDcwMzU5WjAYMRYwFAYD VQQDEw02ODYzODg2MC03OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGypG4+VtSNx/ZMJbG8jmVftqdRfGzBMe6YIq0zOVoLviOFpdWIXzNXoCuzV nLYimM9spo3pvJOt4HGN8dwh8OsL89glDzeS+TJNcks/Rr+m+/nG3a705GpUzm6f bqnMT+pXmywZesy+iejPlWnaBxu5+xyyjQc1AIfxt9WZZY8mAsxDCUirz1wF0X5w S+UjY8JlCmmrvjm04W0a76PBHqHVHvWk3UKzWzgAIqlb8QpKzZXZA4UuvjGHoGtL Exkig4NV/vbsLcYzMY3O1cLu+QxmvqcySr1Gvv3oZnCV62TC2AVoWKiMCPgSem23 AbxU3ZFlZsx4XrKb7Y/ikNHRzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0lwHdY 5aGnozk2nptZJtxHgI87MB8GA1UdIwQYMBaAFGbFsZBLNcR9lFCOwKGs2oNo3vSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GQkYxNEU3MjZD MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhIMlVVSTdBb2F6YWcyamU5 S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTJDNC9GQkYxNEU3MjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhI MlVVSTdBb2F6YWcyamU5S2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5VTz8H8rUbzp8590ym6oLLQDDA60BKQfKtRpKe5z6juApxuwgooXT 10z6JMBORbRenqUMyUCXiaUNBBQXwPijja/LUFFmVRAYTofNMW5B+L3pnfFHGruJ TcjuahMmTGnuU14begNAKMqNa+IkzRjBjgOTbjJEX1GEYuVJEKbb7SJ8YbpGeSr9 RsN4sO7+FW4hk337tVcK1uP7eJldEGdy4LzmTYANYBx4TOhsZtjBkXts5PJm+C8J FGgI+mm8QcjgdCqrOdoxD1Jj1vdmLtJSW0MOJvOLs0xDxfk1E99JfrtjZaogfenh idl+EieQ1qQNH9kJUj5+14XxBB+XBT2q -----END CERTIFICATE-----Generated at Tue Jul 1 19:39:24 2025 by rpki-client