$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft File: ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json) Hash identifier: 5oBlMjInJaAOucGbu7NT4AoiupsPB90se0V3O7mbNQ4= Subject key identifier: 78:31:19:50:FD:E3:CC:69:F1:9A:E0:13:BB:A9:EE:57:93:D3:17:18 Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47 Certificate issuer: /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47 Certificate serial: 171D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft Manifest number: 1711 Signing time: Fri 04 Jul 2025 16:54:09 +0000 Manifest this update: Fri 04 Jul 2025 16:54:08 +0000 Manifest next update: Fri 11 Jul 2025 16:54:08 +0000 Files and hashes: 1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: 54/vVgXqIKX8oubXBkIA9nkOI1JxSYf3FQfRWYl3SfU=) 2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: PelwRr9hgP7dCYd5KU90WVUNYfa/KyN0aFEd88yUz4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5917 (0x171d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47 Validity Not Before: Jul 4 16:54:08 2025 GMT Not After : Jul 11 16:54:08 2025 GMT Subject: CN=68680730-b370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:0b:00:dd:66:98:dc:96:bb:e0:d1:30:1f: 8a:06:57:08:d7:c4:0b:38:af:f2:ab:4d:e4:85:03: e7:f1:76:82:5a:d7:bb:8b:de:0e:98:f5:f4:8a:0a: 64:e1:f6:5b:93:50:43:40:fa:88:b5:ef:b4:dc:52: 4f:52:c2:0c:4a:ba:fc:27:9b:36:78:0f:0a:33:f9: 7a:77:d5:58:70:ed:37:54:af:f6:82:ad:6f:af:a9: ae:67:83:c3:6f:31:fe:3b:d2:91:2f:69:bc:54:8c: a1:44:e3:cd:cf:93:8e:14:14:94:a7:c9:05:83:b9: 52:57:21:af:9c:5e:64:ea:1d:0d:d9:fc:99:13:03: 26:79:03:8e:88:1c:19:3d:8c:fe:e5:3b:95:4c:04: 59:ff:9f:35:33:f4:b2:a5:23:02:eb:3d:51:a2:25: fc:81:d4:96:3e:a2:23:fd:1f:2d:80:26:08:72:df: 8b:5f:3e:7f:3a:51:33:d7:b1:cc:d9:f8:71:c3:c4: 8d:8d:0e:1c:68:0e:cd:38:2d:e1:cb:53:39:d0:fe: 97:2d:4b:8f:53:e3:c4:f8:36:0c:c7:36:6f:bb:56: bf:d9:04:d3:83:c5:4d:72:bc:c7:c5:27:3e:38:da: 45:7d:3e:76:50:6a:09:e4:be:df:7a:93:0a:c4:fb: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:31:19:50:FD:E3:CC:69:F1:9A:E0:13:BB:A9:EE:57:93:D3:17:18 X509v3 Authority Key Identifier: keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:19:b7:18:64:6d:34:87:80:ef:8d:6e:f9:5e:df:2b:2b:97: 05:9a:55:e3:9b:79:eb:19:ce:09:10:68:c6:7a:c8:e6:fe:e5: bd:91:dd:29:da:15:ce:4c:9a:40:22:5d:6f:46:c6:83:a7:f1: 96:dd:26:7b:48:7d:60:b3:b8:4d:9c:ab:2a:22:46:ce:14:28: 6c:20:86:e6:72:fe:bc:96:2e:c0:fb:4b:dd:24:6c:fb:19:2e: 5f:a1:40:15:6c:8d:f2:c2:9a:04:32:0a:79:e2:f0:1e:86:87: d5:9e:a6:14:70:9e:9e:e2:a1:50:a4:26:47:2e:92:0d:ab:b5: 57:69:ef:7e:5c:36:20:76:74:94:e5:cb:09:b0:81:50:0e:88: 2a:36:0c:7e:c1:e2:9a:48:1f:25:e9:45:8c:55:ef:e7:db:7f: d4:6d:99:d6:86:a2:62:95:da:41:a8:49:4d:07:e2:5a:11:9a: 75:14:f8:ec:4b:80:fa:45:e7:17:28:49:24:73:d5:4b:ae:f1: cf:a0:e7:68:2a:40:61:67:b7:27:4e:7e:6f:5f:e6:59:97:13: 5a:66:1c:c8:95:e9:d1:42:ab:64:ae:3d:ee:b7:2e:06:6d:8c: 32:13:82:d9:51:b7:82:fb:92:9b:cd:cb:db:40:db:da:8a:28: 72:83:a2:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMTkxMTAvBgNVBAUTKDY1NTNDM0MyMTgwQjk3RTJFQjM3Q0I3MUY2QTFDRUFB N0I5NUNBNDcwHhcNMjUwNzA0MTY1NDA4WhcNMjUwNzExMTY1NDA4WjAYMRYwFAYD VQQDEw02ODY4MDczMC1iMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1wLAN1mmNyWu+DRMB+KBlcI18QLOK/yq03khQPn8XaCWte7i94OmPX0igpk 4fZbk1BDQPqIte+03FJPUsIMSrr8J5s2eA8KM/l6d9VYcO03VK/2gq1vr6muZ4PD bzH+O9KRL2m8VIyhROPNz5OOFBSUp8kFg7lSVyGvnF5k6h0N2fyZEwMmeQOOiBwZ PYz+5TuVTARZ/581M/SypSMC6z1RoiX8gdSWPqIj/R8tgCYIct+LXz5/OlEz17HM 2fhxw8SNjQ4caA7NOC3hy1M50P6XLUuPU+PE+DYMxzZvu1a/2QTTg8VNcrzHxSc+ ONpFfT52UGoJ5L7fepMKxPsdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgxGVD9 48xp8ZrgE7up7leT0xcYMB8GA1UdIwQYMBaAFGVTw8IYC5fi6zfLcfahzqp7lcpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIxOS9FQzBBNzBGOEVB ODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwtTHJOOHR4OXFIT3FudVZ5 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUER3aGdMbC1Mck44dHg5cUhPcW51VnlrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIxOS9FQzBBNzBGOEVBODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwt THJOOHR4OXFIT3FudVZ5a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7GbcYZG00h4DvjW75Xt8rK5cFmlXjm3nrGc4JEGjGesjm/uW9kd0p 2hXOTJpAIl1vRsaDp/GW3SZ7SH1gs7hNnKsqIkbOFChsIIbmcv68li7A+0vdJGz7 GS5foUAVbI3ywpoEMgp54vAehofVnqYUcJ6e4qFQpCZHLpINq7VXae9+XDYgdnSU 5csJsIFQDogqNgx+weKaSB8l6UWMVe/n23/UbZnWhqJildpBqElNB+JaEZp1FPjs S4D6RecXKEkkc9VLrvHPoOdoKkBhZ7cnTn5vX+ZZlxNaZhzIlenRQqtkrj3uty4G bYwyE4LZUbeC+5KbzcvbQNvaiihyg6IP -----END CERTIFICATE-----Generated at Sat Jul 5 22:25:12 2025 by rpki-client