$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json) Hash identifier: brteQsWmY3xzDRg86bWnZvS2y/GV4f7RiTorb9spSgQ= Subject key identifier: EB:D9:4F:CF:87:5A:66:E5:84:99:42:35:38:38:8C:4F:5F:DA:A3:51 Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft Manifest number: A1 Signing time: Thu 03 Jul 2025 06:26:45 +0000 Manifest this update: Thu 03 Jul 2025 06:26:44 +0000 Manifest next update: Thu 10 Jul 2025 06:26:44 +0000 Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: dw8/yhuFgB7UQnht6YojvFjxkK7jqguMUe301FzP75Q=) 2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: u4ruZ96aOsEF+VWmoS7WaQkE4RPkVRrBuBKptWViuMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Validity Not Before: Jul 3 06:26:44 2025 GMT Not After : Jul 10 06:26:44 2025 GMT Subject: CN=686622a5-fc77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:b9:31:e0:96:19:01:e8:7c:45:87:81:d2: 51:b8:a7:f9:0e:5c:c2:db:77:f3:14:4a:47:df:55: 35:09:1d:6c:de:ef:f5:3e:70:b8:b9:b2:6e:5f:2a: a1:da:9e:f2:d8:4a:58:94:df:a6:03:c7:3c:e6:89: 6f:52:b3:79:c7:e3:92:0f:a3:43:51:5d:7e:50:19: ec:1e:ef:bd:d4:9a:eb:e1:0b:45:18:3b:f0:27:e7: 48:30:f4:c8:7e:78:73:af:b1:0e:34:41:d2:5c:ec: f7:3d:d2:bc:88:a3:d9:c4:ad:25:8d:95:e0:7f:eb: 16:3d:b4:e0:d9:dd:ff:c5:f3:40:98:1b:13:53:a8: c2:48:e2:34:70:d3:f8:4e:0c:9b:d2:26:b7:41:1b: 00:b6:b0:33:12:f5:08:6d:6e:f2:27:c9:aa:ae:6e: 03:d5:0b:e7:30:65:ce:a8:eb:a1:b4:b8:1d:55:69: a5:30:30:e5:01:3e:70:da:64:64:e8:49:f1:80:22: 5f:29:06:cc:1e:d7:cb:2e:2d:1d:2e:da:de:b8:62: 9d:76:e5:7d:25:86:1f:cc:c0:07:f7:09:a7:a6:3b: c0:9a:8e:9d:61:d2:08:ed:5b:2e:b1:2b:a4:e2:f5: da:54:c5:ce:69:d5:09:47:5e:02:a9:df:d6:65:ce: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D9:4F:CF:87:5A:66:E5:84:99:42:35:38:38:8C:4F:5F:DA:A3:51 X509v3 Authority Key Identifier: keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:21:e7:41:ea:31:46:11:cd:70:3b:24:f7:ea:30:7e:ed:67: b3:db:73:4b:2e:1c:34:53:1c:47:e4:9d:df:7d:31:8b:ff:b8: 1e:66:65:67:39:ea:c6:c6:13:12:9f:e9:c9:bb:cf:5a:a1:e6: 50:d5:03:2f:8f:6f:21:03:ac:0c:a7:e0:0e:b2:11:a4:0c:04: cb:9d:71:f0:b7:f4:0b:3d:09:37:a8:11:42:d2:7a:2d:1a:52: db:44:3e:d0:17:85:f3:fd:b1:0f:01:16:e7:b5:c5:b4:03:30: e6:18:bc:1b:9b:9c:d2:9d:25:a9:d9:7b:70:45:f0:7f:27:0e: ae:29:2f:e4:a4:ed:5e:ad:b6:b1:55:23:f0:f4:1c:1a:7b:44: 45:e0:37:0c:97:a4:39:b1:33:5c:34:ef:e7:e0:2e:f8:1f:af: c7:b2:3f:9d:79:56:21:47:21:c5:b2:fc:56:46:96:3b:cd:59: ab:43:7f:1a:da:12:1b:1a:f9:8b:17:83:e1:90:21:59:16:01: c3:7a:d8:c2:28:66:88:29:5a:22:95:6f:ee:57:72:ac:54:d0: b5:f5:65:16:e4:bf:c9:07:e7:3b:87:a4:4b:6d:7f:6d:9b:f4: e0:17:d1:68:7f:89:0d:e0:eb:d4:f3:3d:71:a2:37:b5:e6:a8: b7:51:3c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKENFRTczQTk1RDVDQ0VFMDYyRTdENUVCQTFCNUExMjcw NTJFMTI1MzgwHhcNMjUwNzAzMDYyNjQ0WhcNMjUwNzEwMDYyNjQ0WjAYMRYwFAYD VQQDEw02ODY2MjJhNS1mYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnK5MeCWGQHofEWHgdJRuKf5DlzC23fzFEpH31U1CR1s3u/1PnC4ubJuXyqh 2p7y2EpYlN+mA8c85olvUrN5x+OSD6NDUV1+UBnsHu+91Jrr4QtFGDvwJ+dIMPTI fnhzr7EONEHSXOz3PdK8iKPZxK0ljZXgf+sWPbTg2d3/xfNAmBsTU6jCSOI0cNP4 Tgyb0ia3QRsAtrAzEvUIbW7yJ8mqrm4D1QvnMGXOqOuhtLgdVWmlMDDlAT5w2mRk 6EnxgCJfKQbMHtfLLi0dLtreuGKdduV9JYYfzMAH9wmnpjvAmo6dYdII7VsusSuk 4vXaVMXOadUJR14Cqd/WZc5wmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvZT8+H WmblhJlCNTg4jE9f2qNRMB8GA1UdIwQYMBaAFM7nOpXVzO4GLn1euhtaEnBS4SU4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9DRjM3MzVEMDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdnWXVmVjY2RzFvU2NGTGhK VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9DRjM3MzVEMDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdn WXVmVjY2RzFvU2NGTGhKVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJIedB6jFGEc1wOyT36jB+7Wez23NLLhw0UxxH5J3ffTGL/7geZmVn OerGxhMSn+nJu89aoeZQ1QMvj28hA6wMp+AOshGkDATLnXHwt/QLPQk3qBFC0not GlLbRD7QF4Xz/bEPARbntcW0AzDmGLwbm5zSnSWp2XtwRfB/Jw6uKS/kpO1erbax VSPw9Bwae0RF4DcMl6Q5sTNcNO/n4C74H6/Hsj+deVYhRyHFsvxWRpY7zVmrQ38a 2hIbGvmLF4PhkCFZFgHDetjCKGaIKVoilW/uV3KsVNC19WUW5L/JB+c7h6RLbX9t m/TgF9Fof4kN4OvU8z1xoje15qi3UTy6 -----END CERTIFICATE-----Generated at Thu Jul 3 23:36:42 2025 by rpki-client