$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft File: f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json) Hash identifier: 4MfAxNB9tPbab3/EDZDLmbY3miZlZJOkMo66BrxF+eY= Subject key identifier: BB:0C:DB:C2:2B:BF:B7:3F:3E:1B:20:EE:3C:8B:A0:04:CC:81:90:C7 Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75 Certificate issuer: /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft Manifest number: 01B2 Signing time: Tue 01 Jul 2025 03:35:08 +0000 Manifest this update: Tue 01 Jul 2025 03:35:08 +0000 Manifest next update: Tue 08 Jul 2025 03:35:08 +0000 Files and hashes: 1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: /hWo2V6HYPWyJPzEdefsOrEmU8/nTBMosCk81rwTFqo=) 2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: bJ0v83C66Egxm5Wkl4eVEIZVTUzpH+tAcrHqbaRE6ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75 Validity Not Before: Jul 1 03:35:08 2025 GMT Not After : Jul 8 03:35:08 2025 GMT Subject: CN=6863576c-2174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:db:78:54:38:e3:fb:e1:6a:2e:f5:bd:da:75: cb:10:81:f1:51:5a:70:ca:2e:47:fb:95:c9:02:13: 78:5a:66:5e:38:1e:de:6b:7b:0c:5d:d0:d6:6a:a7: db:f6:3a:32:70:61:02:af:cf:f2:7d:10:b5:35:a7: f2:67:4a:c4:dc:d0:a3:37:ed:0d:17:19:8a:77:8e: 87:4e:18:56:36:61:f1:c8:e1:ff:cd:27:cd:0e:3b: 7c:c4:ba:00:9e:2a:85:2a:46:57:11:c2:5b:31:2e: d1:5b:40:ec:1d:d2:c6:dc:cb:5e:3f:c2:14:54:2a: 6a:11:61:1b:5f:dc:9c:bc:ad:6a:70:de:c3:76:bd: bc:21:27:dc:2d:c5:82:6a:18:3f:2a:3f:75:b9:bb: 21:2c:9d:ad:c4:ab:40:94:b5:c5:93:f0:76:be:88: 6d:a2:2a:0b:dc:45:fa:e2:73:88:f2:7d:4b:43:1b: 00:30:1b:7c:a3:cd:93:43:71:eb:a3:b5:be:00:56: 79:f8:89:ac:9d:9a:77:a2:d8:8c:c1:b4:47:90:da: 3b:02:22:a8:07:81:ef:d8:1c:56:25:7a:33:1e:5e: b7:51:31:33:fc:b3:75:45:d1:69:ab:c1:bd:b5:49: f0:d6:90:b5:bc:03:d1:f5:22:5a:c7:c4:5e:9a:79: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0C:DB:C2:2B:BF:B7:3F:3E:1B:20:EE:3C:8B:A0:04:CC:81:90:C7 X509v3 Authority Key Identifier: keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:74:eb:ed:03:b0:69:b9:f6:cf:be:67:11:a1:72:b7:7a:27: 54:4e:ac:4e:cf:9b:40:19:ea:cd:50:c1:ec:9a:21:e7:e6:ae: 7d:a0:05:a7:00:35:2d:4a:39:f8:e7:96:9c:3b:a5:76:44:0a: 8d:74:3f:5b:d4:f6:e6:a7:98:27:1f:ab:7e:62:07:4d:11:bb: 74:b3:aa:a8:a5:ea:66:eb:7b:5c:07:65:3d:cb:5a:e9:b6:46: 07:62:3f:53:15:c2:28:af:a2:18:e7:f7:b3:15:45:59:9e:50: f4:a2:ad:ef:c5:d7:7f:36:2d:91:d7:0a:b9:12:71:ad:a6:36: 6c:96:26:69:f3:8e:d7:31:aa:f3:5e:e1:2f:37:85:4f:94:2e: 0a:94:69:fc:22:bd:e8:ff:f4:fe:e6:24:fb:7f:21:74:97:db: 67:89:0e:07:66:73:76:0d:f0:0f:f8:23:50:9d:e6:5b:43:a4: e9:4b:af:29:23:08:91:ed:1d:32:9e:c5:36:d5:e8:2a:d2:e7: 61:8f:a9:c6:9b:d2:72:32:97:dc:a2:c8:4a:65:58:08:4f:28: 88:a1:9f:39:fb:38:02:77:a2:90:98:0f:93:e6:92:98:fd:c2: 55:39:07:ad:c1:f8:f5:9f:f5:13:c1:e2:69:cc:37:bc:98:28: 39:13:7c:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEzQzMxMTAvBgNVBAUTKDdGRjY1NjVCNzkzRDc1RTE0RTcyREM3N0Q4MjgyNkJE NDNCN0ZFNzUwHhcNMjUwNzAxMDMzNTA4WhcNMjUwNzA4MDMzNTA4WjAYMRYwFAYD VQQDEw02ODYzNTc2Yy0yMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59t4VDjj++FqLvW92nXLEIHxUVpwyi5H+5XJAhN4WmZeOB7ea3sMXdDWaqfb 9joycGECr8/yfRC1NafyZ0rE3NCjN+0NFxmKd46HThhWNmHxyOH/zSfNDjt8xLoA niqFKkZXEcJbMS7RW0DsHdLG3MteP8IUVCpqEWEbX9ycvK1qcN7Ddr28ISfcLcWC ahg/Kj91ubshLJ2txKtAlLXFk/B2vohtoioL3EX64nOI8n1LQxsAMBt8o82TQ3Hr o7W+AFZ5+ImsnZp3otiMwbRHkNo7AiKoB4Hv2BxWJXozHl63UTEz/LN1RdFpq8G9 tUnw1pC1vAPR9SJax8RemnnFuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsM28Ir v7c/Phsg7jyLoATMgZDHMB8GA1UdIwQYMBaAFH/2Vlt5PXXhTnLcd9goJr1Dt/51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTNDMy9DNTUwQTkyNEMz Q0QxMUVEOTkyMjc0ODFDNEY5QUUwMi9mX1pXVzNrOWRlRk9jdHgzMkNnbXZVTzNf blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfWldXM2s5ZGVGT2N0eDMyQ2dtdlVPM19uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTNDMy9DNTUwQTkyNEMzQ0QxMUVEOTkyMjc0ODFDNEY5QUUwMi9mX1pXVzNrOWRl Rk9jdHgzMkNnbXZVTzNfblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfdOvtA7BpufbPvmcRoXK3eidUTqxOz5tAGerNUMHsmiHn5q59oAWn ADUtSjn455acO6V2RAqNdD9b1Pbmp5gnH6t+YgdNEbt0s6qopepm63tcB2U9y1rp tkYHYj9TFcIor6IY5/ezFUVZnlD0oq3vxdd/Ni2R1wq5EnGtpjZsliZp847XMarz XuEvN4VPlC4KlGn8Ir3o//T+5iT7fyF0l9tniQ4HZnN2DfAP+CNQneZbQ6TpS68p IwiR7R0ynsU21egq0udhj6nGm9JyMpfcoshKZVgITyiIoZ85+zgCd6KQmA+T5pKY /cJVOQetwfj1n/UTweJpzDe8mCg5E3xb -----END CERTIFICATE-----Generated at Wed Jul 2 19:16:59 2025 by rpki-client