$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: 41y1Uej5/I8RdKdEXsy8Rhua4R9QontCTliFfRzsuLM= Subject key identifier: 79:BB:9C:05:61:52:B4:73:8C:E4:46:EC:53:36:3B:91:06:98:EF:EC Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0184 Signing time: Sun 29 Jun 2025 02:51:22 +0000 Manifest this update: Sun 29 Jun 2025 02:51:21 +0000 Manifest next update: Sun 06 Jul 2025 02:51:21 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: geLg86dgisgMq3g6mzADY0ZESh0v0LgH6VvhgBENS6g=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: jnLxIBXSm7e5/8UMqX1czieGQhqSS+3jnA+J0x4YYkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Jun 29 02:51:21 2025 GMT Not After : Jul 6 02:51:21 2025 GMT Subject: CN=6860aa29-af9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:5e:fd:2b:fc:fa:08:ef:fe:67:3d:a3:1b: 67:3c:35:d9:c2:72:59:ff:b6:20:f4:a5:d1:a9:6b: 4f:ed:9d:68:f5:58:29:3c:0b:55:78:85:38:48:1b: e5:f7:09:87:64:e0:1e:89:1e:dd:ca:07:ab:c0:f9: bf:e6:ee:c4:cf:8c:2a:2d:27:3b:72:1b:de:8b:c6: c8:89:4c:ca:4c:56:f1:08:d1:48:1b:0d:4b:ea:71: dd:ac:46:c1:c0:05:c2:d3:54:55:9a:18:b4:c8:49: 39:aa:e1:ed:19:6c:5d:86:1a:e3:ff:56:64:53:6c: 68:29:f5:ee:eb:b9:e2:16:2e:41:4e:46:9b:5c:1e: 04:9b:98:4c:33:e3:cb:53:0e:2c:b1:43:dd:de:d6: f1:0c:25:66:cb:7b:03:36:35:d3:85:06:41:be:89: 47:7d:68:ba:71:2e:52:29:bc:75:44:0b:44:b3:8a: 3b:0e:b4:35:bf:79:fe:64:3e:c0:6a:2b:a1:2b:a4: 27:4c:2c:ab:d6:3c:cd:7d:1d:15:cf:27:08:78:05: 91:18:7e:cd:4f:75:4a:60:59:ab:10:b1:bf:14:d3: 7a:dc:47:cf:ce:a2:89:bb:be:27:a3:89:38:37:6d: d4:60:27:a6:6b:22:e7:29:3c:d3:5f:ec:8f:ff:0d: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BB:9C:05:61:52:B4:73:8C:E4:46:EC:53:36:3B:91:06:98:EF:EC X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:39:07:c7:f1:e1:cd:5b:92:fc:16:d5:38:49:a4:f1:6f:df: 6f:73:8a:47:42:24:01:31:9c:9d:83:fd:bd:48:21:02:ea:75: 68:50:af:77:a5:0a:ea:b7:3b:12:02:80:e1:29:c9:1c:b7:7c: 4c:fa:64:80:e0:54:48:bb:ad:03:6f:62:46:f2:4d:17:eb:2f: 7b:02:d7:f2:27:19:fb:67:fa:fe:2c:95:6f:ff:ec:aa:3d:36: e1:76:4d:08:3c:05:a2:ab:68:b0:8b:ee:76:9a:cc:48:99:fb: 4b:16:5e:ea:6a:d0:75:f3:0c:8b:bf:10:c6:ca:bc:33:e7:45: 00:9e:29:72:c2:cb:c7:30:cd:87:e7:d1:9c:75:9b:cd:3d:95: f3:82:75:50:18:36:79:cc:d6:17:50:9f:ef:e3:31:f5:6b:96: 9a:59:1b:e4:46:5a:fb:9a:21:af:8c:c8:ed:3a:9b:0b:3c:bb: 66:19:2f:06:37:69:79:f5:92:97:af:b3:73:39:8f:04:61:ed: 68:d8:b4:43:e0:7c:41:00:43:b7:02:0f:b8:04:84:cb:c2:20: fe:40:35:a3:29:97:de:cf:7a:01:21:c0:e4:2d:49:38:17:41: 27:a2:46:2c:b0:69:f7:7f:70:ed:c6:a4:1b:92:be:ce:b6:45: 4f:7d:17:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUwNjI5MDI1MTIxWhcNMjUwNzA2MDI1MTIxWjAYMRYwFAYD VQQDEw02ODYwYWEyOS1hZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygVe/Sv8+gjv/mc9oxtnPDXZwnJZ/7Yg9KXRqWtP7Z1o9VgpPAtVeIU4SBvl 9wmHZOAeiR7dygerwPm/5u7Ez4wqLSc7chvei8bIiUzKTFbxCNFIGw1L6nHdrEbB wAXC01RVmhi0yEk5quHtGWxdhhrj/1ZkU2xoKfXu67niFi5BTkabXB4Em5hMM+PL Uw4ssUPd3tbxDCVmy3sDNjXThQZBvolHfWi6cS5SKbx1RAtEs4o7DrQ1v3n+ZD7A aiuhK6QnTCyr1jzNfR0VzycIeAWRGH7NT3VKYFmrELG/FNN63EfPzqKJu74no4k4 N23UYCemayLnKTzTX+yP/w0iAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm7nAVh UrRzjORG7FM2O5EGmO/sMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAOQfH8eHNW5L8FtU4SaTxb99vc4pHQiQBMZydg/29SCEC6nVoUK93 pQrqtzsSAoDhKckct3xM+mSA4FRIu60Db2JG8k0X6y97AtfyJxn7Z/r+LJVv/+yq PTbhdk0IPAWiq2iwi+52msxImftLFl7qatB18wyLvxDGyrwz50UAnilywsvHMM2H 59GcdZvNPZXzgnVQGDZ5zNYXUJ/v4zH1a5aaWRvkRlr7miGvjMjtOpsLPLtmGS8G N2l59ZKXr7NzOY8EYe1o2LRD4HxBAEO3Ag+4BITLwiD+QDWjKZfez3oBIcDkLUk4 F0EnokYssGn3f3DtxqQbkr7OtkVPfRcX -----END CERTIFICATE-----Generated at Mon Jun 30 18:40:52 2025 by rpki-client