$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: aylgOlwIyzKb2KvEN2/DKUStE4V+GwUFBMlusB6WoOA= Subject key identifier: 07:90:04:02:49:37:4E:C1:35:E4:B8:B1:13:F4:B0:3B:9B:45:81:E8 Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: EC Signing time: Sun 29 Jun 2025 04:36:16 +0000 Manifest this update: Sun 29 Jun 2025 04:36:15 +0000 Manifest next update: Sun 06 Jul 2025 04:36:15 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: LbsBW1RvjZQzuhsZ0NwdN9OQAUTUZ42CW6mhPjDIKe4=) 2: 33FB0E48FD2211EFA419DA72C4F9AE02.roa (hash: hGFJA7vbBE7czUFInCqw+SAQ5MusDF01ceEYN+8+xgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Jun 29 04:36:15 2025 GMT Not After : Jul 6 04:36:15 2025 GMT Subject: CN=6860c2bf-1204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:9f:26:88:56:b9:06:d7:6b:5b:25:67:61: 64:b4:ba:e2:fd:85:1c:3c:e2:d2:b0:ab:45:13:45: ea:6e:92:f7:2c:6e:18:73:6c:f6:7e:98:78:6d:19: a1:fc:b1:be:ba:b5:f7:dd:02:d2:e5:d5:dc:fc:30: ea:2e:7d:15:eb:1e:83:3d:98:a3:0d:a8:84:14:e7: 89:10:f6:55:2f:da:bd:1a:15:94:76:24:18:f1:43: 48:2f:ed:32:a6:bc:89:59:00:fd:85:83:f2:9f:8e: 4c:3f:37:5d:99:2e:40:2b:fe:22:6e:b7:1a:66:2a: 9c:72:fb:4a:9a:c0:87:9e:27:41:25:e5:20:0f:2f: fe:08:54:4b:00:59:ce:3b:d8:f4:2f:6b:88:84:e0: fc:c8:81:2f:d3:b7:c7:64:e8:16:24:89:3c:78:d2: af:22:ab:ce:12:4e:6f:c8:3f:95:ef:0b:69:e9:57: a8:fd:6a:11:75:f8:dc:2b:c7:c7:b2:7e:80:d7:bb: 96:a6:d6:4e:02:62:14:f7:2b:d3:2a:13:ce:8e:c5: 5e:9e:3b:2d:a2:41:9b:57:9b:06:ca:bf:8e:12:c9: d0:31:dd:ca:20:8e:6c:07:c5:97:4e:21:06:94:c3: 69:bb:a9:d5:0f:03:5c:7c:35:e6:18:b5:48:69:77: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:90:04:02:49:37:4E:C1:35:E4:B8:B1:13:F4:B0:3B:9B:45:81:E8 X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:88:f7:74:70:83:ff:a5:8d:64:df:ca:d6:52:3a:ad:0a:a2: 76:a0:1f:78:fb:54:ec:3c:8a:d4:4a:25:f3:ee:9f:57:f8:15: 7d:3a:f6:73:51:4f:9a:b0:68:51:32:34:f1:c1:d2:4e:aa:33: 17:ff:39:56:f6:fe:d1:ed:11:92:e4:71:97:a4:df:c5:ea:bf: f0:ed:bf:27:78:63:3d:3e:21:75:5f:fc:e9:b8:4f:f6:2c:8c: 30:3f:27:77:f0:f4:38:c5:0b:08:44:b4:86:97:da:6c:cc:64: 7c:ca:c1:41:be:ea:fc:da:71:62:21:62:14:6a:84:6d:13:fa: 53:e4:b1:87:0e:bc:8e:9d:88:3e:1f:e1:cc:4b:e3:d7:17:cd: 39:41:69:da:52:c3:00:21:60:b3:79:48:1d:e0:b8:a5:53:90: 74:0f:b1:43:1f:0d:a7:ba:7c:54:63:f5:80:dd:54:1f:6c:3b: 2e:ee:38:6c:5b:c0:22:7d:cb:01:8b:ba:40:68:20:ac:20:91: a2:51:99:4e:30:5a:f4:2f:eb:77:35:ba:3d:b0:70:9b:f7:04: 21:e9:08:30:f1:be:cc:66:ac:96:a4:d2:8b:eb:36:ba:7d:a8: 1b:99:53:3d:b5:16:de:b8:e3:be:18:81:a2:84:2c:49:d3:0e: 49:df:4f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjUwNjI5MDQzNjE1WhcNMjUwNzA2MDQzNjE1WjAYMRYwFAYD VQQDEw02ODYwYzJiZi0xMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEOfJohWuQbXa1slZ2FktLri/YUcPOLSsKtFE0XqbpL3LG4Yc2z2fph4bRmh /LG+urX33QLS5dXc/DDqLn0V6x6DPZijDaiEFOeJEPZVL9q9GhWUdiQY8UNIL+0y pryJWQD9hYPyn45MPzddmS5AK/4ibrcaZiqccvtKmsCHnidBJeUgDy/+CFRLAFnO O9j0L2uIhOD8yIEv07fHZOgWJIk8eNKvIqvOEk5vyD+V7wtp6Veo/WoRdfjcK8fH sn6A17uWptZOAmIU9yvTKhPOjsVenjstokGbV5sGyr+OEsnQMd3KII5sB8WXTiEG lMNpu6nVDwNcfDXmGLVIaXdwuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeQBAJJ N07BNeS4sRP0sDubRYHoMB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi9GRTQ4QUJGNDA2QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtu Z1RuU09XQlFRLXpHdmIweUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+iPd0cIP/pY1k38rWUjqtCqJ2oB94+1TsPIrUSiXz7p9X+BV9OvZz UU+asGhRMjTxwdJOqjMX/zlW9v7R7RGS5HGXpN/F6r/w7b8neGM9PiF1X/zpuE/2 LIwwPyd38PQ4xQsIRLSGl9pszGR8ysFBvur82nFiIWIUaoRtE/pT5LGHDryOnYg+ H+HMS+PXF805QWnaUsMAIWCzeUgd4LilU5B0D7FDHw2nunxUY/WA3VQfbDsu7jhs W8AifcsBi7pAaCCsIJGiUZlOMFr0L+t3Nbo9sHCb9wQh6Qgw8b7MZqyWpNKL6za6 fagbmVM9tRbeuOO+GIGihCxJ0w5J308D -----END CERTIFICATE-----Generated at Mon Jun 30 22:29:31 2025 by rpki-client