$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json) Hash identifier: WSZvZbsAAinV6AQAakm036H3YOpeyKTWf5dP7J3NvhM= Subject key identifier: B4:82:D3:CE:AC:C7:55:15:B0:E5:63:BA:D3:21:A1:B0:4B:08:72:F1 Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft Manifest number: AF Signing time: Sun 29 Jun 2025 05:06:41 +0000 Manifest this update: Sun 29 Jun 2025 05:06:41 +0000 Manifest next update: Sun 06 Jul 2025 05:06:41 +0000 Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: vmyfOrFL1P3fohvEEsDTywUMzkHRmXC47F0slEO7ze4=) 2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: Y3ZFXjyQq0LuHhQHwB/WF8wGIt775M6n4ea3rF+TXp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Validity Not Before: Jun 29 05:06:41 2025 GMT Not After : Jul 6 05:06:41 2025 GMT Subject: CN=6860c9e1-ffe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:6f:90:13:42:8f:ec:ec:da:65:2a:d2:ad: 1e:af:25:8e:14:af:37:fa:56:e1:ac:6d:90:74:46: 0c:59:1d:d0:6a:a3:fd:35:fe:71:a2:74:f7:6e:6b: 69:ea:25:3a:73:0f:4f:c0:75:95:7c:41:f2:4d:f7: c1:bd:f4:48:fd:7a:f4:f3:7e:43:f3:e2:09:a3:ea: ce:ec:c9:16:93:0e:17:9a:f3:67:c8:cb:cf:a2:75: 4f:35:fd:91:31:11:70:27:5c:e1:a2:86:bf:67:b0: 59:62:19:8c:c2:3e:ba:b6:d8:f8:3b:37:d8:01:b1: af:53:f9:28:1a:df:3b:22:06:47:89:e9:d7:ba:e2: 85:f5:ea:1f:5d:ba:f3:72:95:1e:28:a4:dc:74:bf: f1:b1:0d:1a:63:07:6d:25:e4:c4:f8:cd:61:6f:10: 59:17:61:39:64:53:36:7f:5e:f9:f1:0e:1d:21:ad: 55:30:87:93:2b:73:f8:f1:68:0f:8d:ac:6e:20:c8: 5a:71:ed:0a:8a:36:e9:78:c2:23:dd:cf:ff:b0:dd: 74:06:5f:55:6f:13:1f:60:87:cb:84:27:3d:f4:90: 93:27:cc:36:0c:4a:5c:d4:79:52:5d:72:8e:fc:b2: 9e:d4:c6:b5:96:07:0a:9c:2c:24:68:c2:be:86:76: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:82:D3:CE:AC:C7:55:15:B0:E5:63:BA:D3:21:A1:B0:4B:08:72:F1 X509v3 Authority Key Identifier: keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:18:f0:55:f3:31:9d:54:13:6d:00:29:b7:d0:2b:88:7a:69: c7:26:dc:47:21:1a:49:f3:0a:39:f8:3d:6e:c2:78:a2:6a:a9: 11:dc:a6:d1:9f:8c:48:b5:09:d0:93:4d:4d:cf:19:95:c9:35: 2f:fd:f8:9c:1d:62:ce:9a:30:b9:ab:79:b0:81:d2:4a:e3:21: a0:f8:78:97:28:16:26:ec:b4:97:3a:d1:f7:e6:d7:c2:db:8b: d8:da:13:b4:81:1e:38:2f:22:9d:bc:ab:fa:ff:7f:47:33:51: b7:f0:90:4a:33:3e:5e:db:27:38:1f:ab:44:d0:46:ab:5d:de: ec:29:ca:31:56:3a:03:77:a3:f3:c5:67:15:93:65:0e:cc:ec: a5:48:dd:da:95:a2:c3:b4:f5:21:51:d7:33:e1:f3:36:9d:07: 95:e4:95:c7:61:d6:72:b8:59:5c:08:ce:ec:c4:ee:27:25:ed: 74:8a:1a:55:53:6a:b6:c2:05:6f:17:74:c6:2f:b5:6b:1d:d1: a7:0b:73:cd:a7:78:a5:74:cc:48:60:c1:83:b1:a2:58:b5:65: d4:a4:38:58:bc:e0:c4:cc:05:34:88:55:f3:ba:2c:b9:55:df: b7:3a:9c:b1:66:4e:90:ca:07:c4:f4:af:a6:d4:16:8b:fa:1d: b0:e8:20:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz NzE4MzJDQTUwHhcNMjUwNjI5MDUwNjQxWhcNMjUwNzA2MDUwNjQxWjAYMRYwFAYD VQQDEw02ODYwYzllMS1mZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwndvkBNCj+zs2mUq0q0eryWOFK83+lbhrG2QdEYMWR3QaqP9Nf5xonT3bmtp 6iU6cw9PwHWVfEHyTffBvfRI/Xr0835D8+IJo+rO7MkWkw4XmvNnyMvPonVPNf2R MRFwJ1zhooa/Z7BZYhmMwj66ttj4OzfYAbGvU/koGt87IgZHienXuuKF9eofXbrz cpUeKKTcdL/xsQ0aYwdtJeTE+M1hbxBZF2E5ZFM2f1758Q4dIa1VMIeTK3P48WgP jaxuIMhace0KijbpeMIj3c//sN10Bl9VbxMfYIfLhCc99JCTJ8w2DEpc1HlSXXKO /LKe1Ma1lgcKnCwkaMK+hnZUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSC086s x1UVsOVjutMhobBLCHLxMB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa cFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/GPBV8zGdVBNtACm30CuIemnHJtxHIRpJ8wo5+D1uwniiaqkR3KbR n4xItQnQk01NzxmVyTUv/ficHWLOmjC5q3mwgdJK4yGg+HiXKBYm7LSXOtH35tfC 24vY2hO0gR44LyKdvKv6/39HM1G38JBKMz5e2yc4H6tE0EarXd7sKcoxVjoDd6Pz xWcVk2UOzOylSN3alaLDtPUhUdcz4fM2nQeV5JXHYdZyuFlcCM7sxO4nJe10ihpV U2q2wgVvF3TGL7VrHdGnC3PNp3ildMxIYMGDsaJYtWXUpDhYvODEzAU0iFXzuiy5 Vd+3OpyxZk6QygfE9K+m1BaL+h2w6CBR -----END CERTIFICATE-----Generated at Mon Jun 30 21:07:29 2025 by rpki-client