$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: N73J45PNtUHk2l3G3Y1enOYgPvKnnAypPFW8+G58m5c= Subject key identifier: 6C:CF:C1:C1:14:9A:05:12:E3:BE:53:CC:73:B0:22:80:6B:06:0C:6B Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 5B Signing time: Tue 01 Jul 2025 08:03:16 +0000 Manifest this update: Tue 01 Jul 2025 08:03:15 +0000 Manifest next update: Tue 08 Jul 2025 08:03:15 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: wFDryYdXOu4L5BnfAwvjuZqIA9MNHWRa7L2aMZEsxhE=) 2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=) 4: CAB9B360E20211EF80FC810DC4F9AE02.roa (hash: 65X5sPIhdKM1lp6V7hevZEuaDbWujUAm7MoeXT80kOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Jul 1 08:03:15 2025 GMT Not After : Jul 8 08:03:15 2025 GMT Subject: CN=68639644-fb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:ce:36:aa:81:c0:cf:eb:87:76:ef:89:d8: 9f:3d:38:93:1d:bb:90:d4:5a:87:1e:2e:9a:64:37: c3:2b:f9:47:d1:4f:bd:48:f6:46:c4:42:1b:1f:6d: 9a:51:90:7e:5e:3b:a7:58:39:88:1d:21:c6:57:f4: 89:78:59:66:ff:74:43:77:15:ea:d0:fd:ba:4a:95: a2:10:8d:37:b2:f5:26:c6:fb:b3:d0:45:b8:a9:09: 95:28:bb:7c:0c:20:1d:e1:47:2b:d3:e2:94:0b:64: 6a:f0:d4:1f:1b:83:0f:45:43:5f:0e:bd:78:ac:6d: 41:da:13:d3:9e:58:f7:a3:f4:e2:bf:8d:28:4c:31: 96:f6:15:78:0e:cb:07:c9:79:c9:ca:58:7d:2c:46: f5:6c:0c:8a:b9:e3:09:0c:25:ec:ec:0b:ce:ef:83: fa:4c:28:d6:c4:e6:d2:e7:e9:c9:aa:86:3d:3a:f3: 60:2a:f0:ba:6a:81:8a:f0:19:af:4b:ab:8c:02:8c: d9:95:5c:90:4f:2e:94:6c:da:e1:3b:f9:76:0d:09: 6e:6f:9d:04:7f:f8:f5:a6:c5:1f:c3:42:56:00:b0: e0:65:33:c7:01:5a:62:c9:23:12:99:19:60:ee:2f: 11:e8:cf:ac:4e:8e:a2:fc:6c:d4:fc:46:39:69:9c: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CF:C1:C1:14:9A:05:12:E3:BE:53:CC:73:B0:22:80:6B:06:0C:6B X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f4:8b:6d:02:83:98:bb:1a:0d:0d:95:a3:d6:52:46:a3:b6: f6:98:e1:86:ff:ca:3b:36:58:87:b2:f3:01:27:a4:8f:b5:06: ad:99:dd:8a:ef:6a:80:79:4c:45:3c:b2:26:56:a1:c0:b4:d4: ed:cd:e3:70:a8:de:6a:82:f3:df:8a:06:58:db:81:ca:42:3b: 1c:af:db:42:d1:d4:44:d4:d5:76:2c:6f:58:5c:5a:18:94:42: f6:99:14:97:97:5d:48:e6:4a:e6:04:b3:95:98:27:fa:ca:20: d5:ec:49:83:51:ac:93:2f:4c:31:39:8c:fe:35:e3:f4:dc:9f: 84:5d:72:02:b0:6a:b5:19:62:b8:1c:b6:2c:12:31:30:15:d5: 04:de:85:a8:66:38:f0:2d:8d:d3:d9:75:4d:93:59:9b:f4:db: a3:bd:a7:4c:2a:e2:2f:d3:cc:35:41:de:d1:a3:c1:8d:01:98: c5:04:cf:8d:29:44:cd:b1:8c:94:e0:c4:52:2a:a0:37:e0:38: e9:0d:3a:e2:1b:37:d5:80:aa:a5:70:4b:4b:80:b6:b9:32:4b: d2:50:ab:4c:a4:d0:94:7a:3e:9a:92:d3:d2:64:56:dd:b4:e3: 53:7f:52:08:d3:25:c6:2e:19:1e:b7:7a:29:c1:01:e9:45:7f: aa:50:aa:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RDM0QjExMC8GA1UEBRMoNjRDQjZFQTdEN0QwRTUxRjRENDJCMkQ2ODQ3Mjc0QUJC MDczNjU5ODAeFw0yNTA3MDEwODAzMTVaFw0yNTA3MDgwODAzMTVaMBgxFjAUBgNV BAMTDTY4NjM5NjQ0LWZiNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYX842qoHAz+uHdu+J2J89OJMdu5DUWoceLppkN8Mr+UfRT71I9kbEQhsfbZpR kH5eO6dYOYgdIcZX9Il4WWb/dEN3FerQ/bpKlaIQjTey9SbG+7PQRbipCZUou3wM IB3hRyvT4pQLZGrw1B8bgw9FQ18OvXisbUHaE9OeWPej9OK/jShMMZb2FXgOywfJ ecnKWH0sRvVsDIq54wkMJezsC87vg/pMKNbE5tLn6cmqhj0682Aq8LpqgYrwGa9L q4wCjNmVXJBPLpRs2uE7+XYNCW5vnQR/+PWmxR/DQlYAsOBlM8cBWmLJIxKZGWDu LxHoz6xOjqL8bNT8RjlpnG0bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbM/BwRSa BRLjvlPMc7AigGsGDGswHwYDVR0jBBgwFoAUZMtup9fQ5R9NQrLWhHJ0q7BzZZgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEMzRCL0IzREI1MUQyREYz NTExRUZBNThENjUzQkM0RjlBRTAyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpa Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk10dXA5ZlE1UjlOUXJMV2hISjBxN0J6WlpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE MzRCL0IzREI1MUQyREYzNTExRUZBNThENjUzQkM0RjlBRTAyL1pNdHVwOWZRNVI5 TlFyTFdoSEowcTdCelpaZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABb0i20Cg5i7Gg0NlaPWUkajtvaY4Yb/yjs2WIey8wEnpI+1Bq2Z3Yrv aoB5TEU8siZWocC01O3N43Co3mqC89+KBljbgcpCOxyv20LR1ETU1XYsb1hcWhiU QvaZFJeXXUjmSuYEs5WYJ/rKINXsSYNRrJMvTDE5jP414/Tcn4RdcgKwarUZYrgc tiwSMTAV1QTehahmOPAtjdPZdU2TWZv026O9p0wq4i/TzDVB3tGjwY0BmMUEz40p RM2xjJTgxFIqoDfgOOkNOuIbN9WAqqVwS0uAtrkyS9JQq0yk0JR6PpqS09JkVt20 41N/UgjTJcYuGR63einBAelFf6pQqnc= -----END CERTIFICATE-----Generated at Wed Jul 2 21:13:24 2025 by rpki-client