$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: N/x5IBd+GWiSzNkqlHNC/niyaIYiZV/9XP5lC2fk5/g= Subject key identifier: DD:8F:FC:4E:F5:03:97:6F:A2:A8:69:FE:66:08:5C:34:5E:B9:30:33 Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 011D Signing time: Sun 29 Jun 2025 04:00:34 +0000 Manifest this update: Sun 29 Jun 2025 04:00:33 +0000 Manifest next update: Sun 06 Jul 2025 04:00:33 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: x8bRWC0e4VAePrX7n49+S7OBQqXbsBou3hGmfudmyL0=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Jun 29 04:00:33 2025 GMT Not After : Jul 6 04:00:33 2025 GMT Subject: CN=6860ba62-bedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:24:ab:76:55:b0:f9:cf:cd:b1:2c:c2:23: cb:55:83:c8:21:29:98:fe:77:72:87:02:a1:88:33: 08:20:96:3b:40:b9:76:5b:eb:d4:f1:10:d1:04:66: 97:e9:79:7d:da:2b:89:de:4a:c1:1b:bf:c6:ba:09: af:d9:66:82:fc:9b:bc:c1:9a:8a:66:f0:74:30:c3: 4e:ee:2f:70:71:b0:60:e7:45:d6:d0:32:e9:85:55: 29:48:20:c5:3b:38:24:20:f1:b1:6f:d5:c4:e1:19: ea:b5:20:e4:29:72:8b:64:7f:0b:fc:68:12:3d:9b: 67:40:a0:6b:70:24:78:f0:a5:50:b5:48:82:1a:9f: 89:3a:73:25:ca:54:e2:b8:80:36:f2:cd:88:0b:fa: a6:ac:20:60:9e:34:b3:85:97:ae:cd:06:84:52:f4: 46:69:3c:d5:05:c0:18:35:e8:0e:84:63:bd:1c:41: 93:69:2f:1b:9f:3f:ea:2b:b6:fc:7b:8d:e8:89:fd: 5c:22:69:30:d1:9a:b9:1e:3f:54:a9:89:1c:05:d9: 45:18:92:1f:b7:e9:2b:e2:d0:d1:2d:4f:38:da:7c: c2:45:31:6d:91:7a:bb:78:27:ca:9e:bb:90:ce:f8: 70:79:7b:da:46:48:99:34:a5:91:2c:b3:f9:52:fb: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8F:FC:4E:F5:03:97:6F:A2:A8:69:FE:66:08:5C:34:5E:B9:30:33 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e0:be:46:b9:e9:5a:06:a5:ee:c6:c5:8a:b7:2f:ad:15:59: 2e:89:ca:ff:13:57:92:d3:ce:a9:69:9c:42:a9:a4:03:8f:1f: df:c3:96:a3:58:99:45:6d:9a:c4:77:1b:2a:46:e1:82:8e:99: 9e:7d:83:52:63:30:91:11:ea:42:e2:c2:35:2f:e7:ef:ec:1c: 1c:0e:f8:79:0b:d4:b6:f0:7f:f6:b4:83:1b:e0:b6:fe:46:1f: 92:ae:14:fb:55:18:f9:83:51:94:6b:30:52:bf:b0:65:a0:34: 4b:86:59:e9:e7:99:5a:6e:53:ea:40:97:f4:12:53:89:be:5f: dd:f2:1c:67:d1:5f:c4:55:58:66:64:ad:32:5f:46:15:59:57: 49:df:a5:03:46:c6:ce:c0:d7:93:ed:b3:7d:e7:1e:94:99:2a: 37:01:2e:a7:3a:73:e8:29:fa:8a:b9:db:21:4f:29:27:4b:1c: b7:1a:ec:d0:a9:43:d5:c9:40:62:b2:b7:52:85:86:ee:11:a0: 06:bf:b7:c2:b7:5f:36:f8:8f:21:c2:a1:81:93:f4:ed:03:cf: e6:60:18:85:52:a7:e3:40:f5:a2:fc:75:21:fc:ab:51:15:3a: bc:7b:6c:d4:6f:1b:ee:63:0a:c9:8f:ed:83:ba:83:41:32:c5: d3:c2:14:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUwNjI5MDQwMDMzWhcNMjUwNzA2MDQwMDMzWjAYMRYwFAYD VQQDEw02ODYwYmE2Mi1iZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQokq3ZVsPnPzbEswiPLVYPIISmY/ndyhwKhiDMIIJY7QLl2W+vU8RDRBGaX 6Xl92iuJ3krBG7/Gugmv2WaC/Ju8wZqKZvB0MMNO7i9wcbBg50XW0DLphVUpSCDF OzgkIPGxb9XE4RnqtSDkKXKLZH8L/GgSPZtnQKBrcCR48KVQtUiCGp+JOnMlylTi uIA28s2IC/qmrCBgnjSzhZeuzQaEUvRGaTzVBcAYNegOhGO9HEGTaS8bnz/qK7b8 e43oif1cImkw0Zq5Hj9UqYkcBdlFGJIft+kr4tDRLU842nzCRTFtkXq7eCfKnruQ zvhweXvaRkiZNKWRLLP5UvtdWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2P/E71 A5dvoqhp/mYIXDReuTAzMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK4L5GuelaBqXuxsWKty+tFVkuicr/E1eS086paZxCqaQDjx/fw5aj WJlFbZrEdxsqRuGCjpmefYNSYzCREepC4sI1L+fv7BwcDvh5C9S28H/2tIMb4Lb+ Rh+SrhT7VRj5g1GUazBSv7BloDRLhlnp55lablPqQJf0ElOJvl/d8hxn0V/EVVhm ZK0yX0YVWVdJ36UDRsbOwNeT7bN95x6UmSo3AS6nOnPoKfqKudshTyknSxy3GuzQ qUPVyUBisrdShYbuEaAGv7fCt182+I8hwqGBk/TtA8/mYBiFUqfjQPWi/HUh/KtR FTq8e2zUbxvuYwrJj+2DuoNBMsXTwhRY -----END CERTIFICATE-----Generated at Sun Jun 29 20:20:23 2025 by rpki-client