$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json) Hash identifier: S4AVFoJhlq92Eju2m3Ag/K7xYxbU/JbN1KdFFPeLeQY= Subject key identifier: 1B:F4:86:2F:AD:EE:70:C6:08:71:B4:D5:66:C9:84:81:DD:8C:44:42 Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft Manifest number: 0492 Signing time: Tue 01 Jul 2025 00:30:59 +0000 Manifest this update: Tue 01 Jul 2025 00:30:59 +0000 Manifest next update: Tue 08 Jul 2025 00:30:59 +0000 Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: srbsJnAKjgr9wmhQEUWjKPLHROr+X7NFVH9Sd+Y8Cq4=) 2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: /ooE2VFwIyhJ0GDoQeohGtb0l3eCORZIYsK88m8yo4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Validity Not Before: Jul 1 00:30:59 2025 GMT Not After : Jul 8 00:30:59 2025 GMT Subject: CN=68632c43-1395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:ee:e8:fd:ec:9c:a5:8d:b1:fc:a2:bc:3d: f9:3e:04:35:02:5c:ac:f3:6c:6b:98:c7:95:5c:3f: 63:ce:10:01:87:9c:0d:d3:b2:d7:41:f5:79:4f:c8: a6:12:22:9b:bf:e7:cc:10:92:b2:5a:f9:c4:d4:75: 3c:81:3f:ae:69:ce:74:98:77:fd:7c:0d:3b:9c:cb: bb:c4:59:00:68:c9:ef:80:a7:1c:26:e7:75:08:4b: f6:f8:90:f4:09:8d:c7:eb:1f:37:c6:cf:ab:93:b9: 60:b6:b7:6f:ab:a5:cf:93:7b:09:5c:19:77:f9:94: 65:e3:e3:fe:0b:76:6e:15:fa:3f:66:4c:6d:a3:89: 52:83:f9:ad:c7:c5:e5:21:08:5e:fc:29:7a:5e:14: b8:94:12:5b:c0:df:31:b9:bc:b6:8f:1c:e9:04:2d: 47:92:d9:50:ae:94:06:0e:75:13:76:fc:f3:96:f8: 77:74:11:8e:4b:b9:22:29:12:22:31:81:b4:03:10: 10:f5:48:1e:49:61:b5:b4:db:ce:3e:3d:d9:88:75: a0:ae:8b:3c:b5:73:f8:06:d9:ec:9b:aa:78:d1:57: 48:e0:25:1f:29:8a:a5:76:14:78:e7:c2:77:1f:25: e4:06:8c:35:4c:09:d3:e6:52:fb:54:c9:2a:7d:3c: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F4:86:2F:AD:EE:70:C6:08:71:B4:D5:66:C9:84:81:DD:8C:44:42 X509v3 Authority Key Identifier: keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a9:54:33:9c:8b:73:36:3e:54:91:bb:e7:96:99:a6:b1:14: 0b:7c:06:7c:c9:99:95:7a:8e:18:f0:f7:01:26:ca:be:0c:21: fe:f6:73:0d:63:5a:eb:db:26:93:0f:d9:98:1a:5a:44:45:a1: 53:5f:f7:3f:07:8b:3e:c3:d6:48:4d:f2:09:96:a0:00:4a:e8: 18:47:cc:9c:d4:01:bf:98:59:b4:fc:ef:76:12:59:6f:09:a3: 8e:79:6d:26:d0:75:be:49:48:08:3d:d7:12:3c:89:8d:10:d3: 49:d8:d2:a9:ba:67:5f:1d:59:c2:b4:37:fb:9e:2b:39:01:37: 19:75:3b:58:c1:de:44:b8:b1:95:25:59:70:9d:b2:d3:8f:0c: 1c:32:3f:56:13:c1:91:45:fe:5d:bd:d2:12:36:06:0c:7a:76: ff:c7:c2:2c:a8:40:c3:9b:51:d4:15:ff:17:43:55:47:9c:31: 25:fb:37:ae:83:43:e5:a0:31:f3:c5:ff:da:1b:e6:9a:0b:c1: c4:99:95:73:67:23:61:7c:54:5a:fb:f7:cf:06:fc:86:9e:ad: f4:a7:1a:f5:d7:8d:f3:3f:b9:aa:2e:d9:bf:81:05:9f:0c:b4: de:f3:d1:06:a9:62:14:a6:6d:f8:0a:22:49:d7:80:22:01:5c: 64:5a:e0:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxRkYxMTAvBgNVBAUTKDY3NUU2M0E0QzE3OEM2RjU2NjAyNjQwMjQ0NzI0NjRF Qjk4RTFCNUQwHhcNMjUwNzAxMDAzMDU5WhcNMjUwNzA4MDAzMDU5WjAYMRYwFAYD VQQDEw02ODYzMmM0My0xMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydTu6P3snKWNsfyivD35PgQ1Alys82xrmMeVXD9jzhABh5wN07LXQfV5T8im EiKbv+fMEJKyWvnE1HU8gT+uac50mHf9fA07nMu7xFkAaMnvgKccJud1CEv2+JD0 CY3H6x83xs+rk7lgtrdvq6XPk3sJXBl3+ZRl4+P+C3ZuFfo/Zkxto4lSg/mtx8Xl IQhe/Cl6XhS4lBJbwN8xuby2jxzpBC1HktlQrpQGDnUTdvzzlvh3dBGOS7kiKRIi MYG0AxAQ9UgeSWG1tNvOPj3ZiHWgros8tXP4Btnsm6p40VdI4CUfKYqldhR458J3 HyXkBow1TAnT5lL7VMkqfTxaUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv0hi+t 7nDGCHG01WbJhIHdjERCMB8GA1UdIwQYMBaAFGdeY6TBeMb1ZgJkAkRyRk65jhtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFGRi9COEMxRTdENDQx MjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2Vm1BbVFDUkhKR1RybU9H MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxNWpwTUY0eHZWbUFtUUNSSEpHVHJtT0cxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFGRi9COEMxRTdENDQxMjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2 Vm1BbVFDUkhKR1RybU9HMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkqVQznItzNj5UkbvnlpmmsRQLfAZ8yZmVeo4Y8PcBJsq+DCH+9nMN Y1rr2yaTD9mYGlpERaFTX/c/B4s+w9ZITfIJlqAASugYR8yc1AG/mFm0/O92Ellv CaOOeW0m0HW+SUgIPdcSPImNENNJ2NKpumdfHVnCtDf7nis5ATcZdTtYwd5EuLGV JVlwnbLTjwwcMj9WE8GRRf5dvdISNgYMenb/x8IsqEDDm1HUFf8XQ1VHnDEl+zeu g0PloDHzxf/aG+aaC8HEmZVzZyNhfFRa+/fPBvyGnq30pxr1143zP7mqLtm/gQWf DLTe89EGqWIUpm34CiJJ14AiAVxkWuAw -----END CERTIFICATE-----Generated at Tue Jul 1 05:44:22 2025 by rpki-client