$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json) Hash identifier: ESLCZr2JkoKL9MpJewsk0lpWqX4INGTFAfVkngmoC+E= Subject key identifier: 6A:ED:66:C9:40:6C:D9:89:AE:E6:73:87:CC:BA:E6:FE:08:2F:00:5C Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Certificate serial: 2923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft Manifest number: 2903 Signing time: Wed 02 Jul 2025 15:42:57 +0000 Manifest this update: Wed 02 Jul 2025 15:42:57 +0000 Manifest next update: Wed 09 Jul 2025 15:42:57 +0000 Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: 0z6u4XDzz46aUxKIuSuogUQwAZpmGyZwhzt+js9GK34=) 2: F4246CDA561811E98A165872C4F9AE02.roa (hash: C/PaFQfpTy7SRBE+0XzPzL+bck/ugVag2KSCjWGbACs=) 3: 5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa (hash: NPaRLQzlfeRDFfVjFZGdCoMjhFrE57rsZhCE/YcIOww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10531 (0x2923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Validity Not Before: Jul 2 15:42:57 2025 GMT Not After : Jul 9 15:42:57 2025 GMT Subject: CN=68655381-2095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:47:40:41:92:a3:2c:0e:8d:53:a1:b5:83: f6:a3:4a:1b:23:0e:52:85:9c:b0:1b:93:16:b0:3d: ff:52:1d:7c:18:66:c2:b1:65:19:1c:5b:12:5f:98: 36:1e:b9:90:ff:38:97:55:6a:b6:85:50:61:59:0f: ae:c4:37:78:8c:74:4b:11:57:45:32:8e:d6:88:6c: 2a:ce:a1:c4:cc:b7:6f:c1:db:df:bf:93:d4:41:26: 4d:3f:ff:35:c3:00:c1:9b:6e:cf:0d:75:ec:55:21: 32:a2:91:63:f4:44:95:bd:ba:8e:9a:4e:f1:01:0a: e3:a7:a4:d8:07:e7:71:6a:b6:bc:15:56:db:81:ad: 05:45:6f:90:f0:00:b5:52:31:d4:dd:28:c6:3b:69: 1c:99:0d:cc:d2:55:7c:0e:0c:56:e0:e6:4b:75:ac: cc:a5:ab:c1:bc:37:b3:64:7e:1e:e4:35:fb:cf:5a: c7:64:b7:73:34:13:57:ba:c3:eb:93:39:25:f5:a7: fd:85:ce:00:b5:80:ab:a3:87:c9:39:cc:c8:02:62: 4b:4d:5f:d3:d3:c6:cb:29:33:4e:21:fe:fe:59:f8: 26:fa:be:1c:00:d7:61:ce:0a:06:54:7e:85:49:58: fd:a5:b2:7c:4c:85:3b:15:c2:23:ca:9f:76:e6:56: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:ED:66:C9:40:6C:D9:89:AE:E6:73:87:CC:BA:E6:FE:08:2F:00:5C X509v3 Authority Key Identifier: keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:06:10:62:e6:2b:45:d0:ec:25:f5:d3:10:9f:84:43:2b:75: 8a:97:61:f1:ac:36:76:74:46:b9:f2:19:76:7e:09:9d:36:94: 97:f8:77:3c:54:78:eb:e4:8c:a9:0e:68:03:6b:b8:1d:9a:04: fc:0b:73:77:e7:75:d7:69:79:16:84:b6:c5:28:6c:74:27:b6: 70:66:7b:f3:80:4d:99:67:d4:b9:fc:16:73:f5:e2:cb:e7:77: 84:06:c9:c2:eb:d6:39:15:f9:f5:77:74:af:38:8b:27:b4:17: 40:bf:28:99:7e:70:eb:bb:4e:af:d6:34:6e:32:dd:ec:f3:44: f6:da:53:88:f0:c1:02:67:95:83:84:87:9f:25:cc:72:b4:d3: af:e4:25:17:c0:41:2f:d8:6d:f4:4a:ce:1d:ae:34:1c:16:a0: a3:f0:69:54:b4:8b:e0:24:b2:b4:2a:21:06:d3:4a:93:bf:a5: 01:12:0c:21:ac:2b:da:65:26:cb:e5:dc:4e:b3:5d:79:67:8d: 14:4b:47:48:db:1d:dc:c8:33:14:d8:be:da:e4:36:8f:11:94: b3:46:9e:56:4a:38:6c:8f:77:5f:35:f8:3b:c5:86:dd:94:1d: 07:45:4e:64:c6:7e:b8:25:a0:f2:7b:e0:a8:37:15:ab:42:86: 5d:d3:af:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1MTcxMTAvBgNVBAUTKDY3NUYzQkExRjk2QTlFMUVDMkIwMTM3NjYyQzc1NERC MUQxRTAwNzMwHhcNMjUwNzAyMTU0MjU3WhcNMjUwNzA5MTU0MjU3WjAYMRYwFAYD VQQDEw02ODY1NTM4MS0yMDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4dHQEGSoywOjVOhtYP2o0obIw5ShZywG5MWsD3/Uh18GGbCsWUZHFsSX5g2 HrmQ/ziXVWq2hVBhWQ+uxDd4jHRLEVdFMo7WiGwqzqHEzLdvwdvfv5PUQSZNP/81 wwDBm27PDXXsVSEyopFj9ESVvbqOmk7xAQrjp6TYB+dxara8FVbbga0FRW+Q8AC1 UjHU3SjGO2kcmQ3M0lV8DgxW4OZLdazMpavBvDezZH4e5DX7z1rHZLdzNBNXusPr kzkl9af9hc4AtYCro4fJOczIAmJLTV/T08bLKTNOIf7+Wfgm+r4cANdhzgoGVH6F SVj9pbJ8TIU7FcIjyp925lYLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrtZslA bNmJruZzh8y65v4ILwBcMB8GA1UdIwQYMBaAFGdfO6H5ap4ewrATdmLHVNsdHgBz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDUxNy80MDZGOTA0QzZB RTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5oN0NzQk4yWXNkVTJ4MGVB SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxODdvZmxxbmg3Q3NCTjJZc2RVMngwZUFITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDUxNy80MDZGOTA0QzZBRTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5o N0NzQk4yWXNkVTJ4MGVBSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0BhBi5itF0Owl9dMQn4RDK3WKl2HxrDZ2dEa58hl2fgmdNpSX+Hc8 VHjr5IypDmgDa7gdmgT8C3N353XXaXkWhLbFKGx0J7ZwZnvzgE2ZZ9S5/BZz9eLL 53eEBsnC69Y5Ffn1d3SvOIsntBdAvyiZfnDru06v1jRuMt3s80T22lOI8MECZ5WD hIefJcxytNOv5CUXwEEv2G30Ss4drjQcFqCj8GlUtIvgJLK0KiEG00qTv6UBEgwh rCvaZSbL5dxOs115Z40US0dI2x3cyDMU2L7a5DaPEZSzRp5WSjhsj3dfNfg7xYbd lB0HRU5kxn64JaDye+CoNxWrQoZd06/w -----END CERTIFICATE-----Generated at Fri Jul 4 03:53:18 2025 by rpki-client