$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: GmrTzaO9t1oAyTtIKGVM3e/oWBSwwpzD+mWztSev8kU= Subject key identifier: DE:06:41:AE:20:FE:B3:09:54:2E:BD:91:E2:51:52:95:32:C6:77:88 Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: 91 Signing time: Sun 29 Jun 2025 05:28:08 +0000 Manifest this update: Sun 29 Jun 2025 05:28:07 +0000 Manifest next update: Sun 06 Jul 2025 05:28:07 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: k9zhPkTHdExMf8QvNAhyjQQsyHE7dNF0HEFSMtt6+lM=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: dzWi4sOLyrk+Z9rQ/p2wnjoYw1tNJYcoqxBuYKWjT/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: Jun 29 05:28:07 2025 GMT Not After : Jul 6 05:28:07 2025 GMT Subject: CN=6860cee7-09b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:86:be:70:af:16:26:a0:c2:2e:a5:89:4a: ae:3c:1f:fc:35:ea:69:48:fc:9a:d5:0e:db:0d:bd: bf:cc:5c:3e:3e:cb:cb:68:ae:79:39:e8:ef:81:7d: f1:80:28:4d:a7:77:98:9f:48:2b:be:01:2d:77:bf: c1:fb:08:c2:ab:4c:6c:fb:27:14:5c:ab:e2:0a:bd: c7:db:e9:39:b2:7e:14:e1:26:38:4a:d2:24:d1:3d: f4:43:87:bf:a7:04:f2:77:be:0a:d3:78:fc:17:cc: e7:20:fc:28:28:37:b7:24:17:07:f2:66:c5:cd:cc: 4e:88:d9:d6:38:ef:bc:a1:d0:72:34:32:02:01:c4: 00:ad:5b:4f:79:dd:46:25:8b:ae:57:fa:f1:a8:ea: 0e:e7:67:10:78:5c:c9:2a:2d:b3:9e:dd:69:41:a0: a1:4a:17:38:5f:28:ac:70:de:2b:9f:90:e9:4a:6b: 50:c4:0a:49:23:1a:d6:d5:67:bf:37:a1:6e:71:06: 02:ae:1e:bb:7d:2e:14:74:20:9d:21:ba:56:1c:8a: bb:46:0d:09:36:34:00:5a:42:ef:77:e1:b6:d1:17: 66:1a:01:aa:0e:17:d0:d6:75:5e:95:b5:47:fe:5a: f6:83:1f:9e:e9:a6:04:0b:04:ed:2f:96:42:19:15: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:06:41:AE:20:FE:B3:09:54:2E:BD:91:E2:51:52:95:32:C6:77:88 X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c5:c3:a8:4e:28:f0:ad:71:ae:3c:40:6e:eb:ef:31:e5:d0: e6:b8:01:32:5b:91:09:6a:08:43:f7:38:5c:44:38:f8:e4:71: 7a:ec:d1:bd:e4:33:6a:44:8f:77:5d:a4:e0:35:18:b5:4f:bc: 54:08:27:5d:96:1d:e1:f6:76:82:78:e3:59:ae:35:2a:7d:74: f6:6c:60:df:70:0b:55:65:a6:17:cb:2a:9f:78:ad:64:96:fc: c9:a9:ef:55:5d:2c:c1:91:14:73:cb:2d:ae:0a:a6:59:ef:6c: 1e:20:d5:13:dc:9d:1f:08:f4:eb:a2:be:8c:a1:f5:48:9b:13: 46:0f:d5:74:9e:05:30:21:0e:5f:06:8e:0a:6c:29:3a:d9:14: 34:3f:aa:e7:40:bf:71:fd:1f:dc:9f:d0:99:14:34:e3:12:03: 94:97:8f:fb:b6:75:86:db:e3:a8:76:f3:40:a5:b2:22:6a:b2: 09:54:3d:66:70:2b:98:59:17:b7:7c:0b:91:fa:4f:df:17:f3: 85:50:4c:f2:25:f2:b9:22:38:b7:0d:fe:4c:f1:67:d0:d5:bf: 0b:77:13:d1:6d:15:91:aa:24:74:02:56:0b:bd:94:33:13:90: ea:6b:19:f3:1e:29:b7:58:93:42:89:b3:fa:fd:8a:ba:03:a0: dc:60:0b:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3NTkxMTAvBgNVBAUTKDY0MTBCMzVBRDFBOEU5MUZFQkQ4NUI0NDM3NjY4QzJB NjlEQUE3REEwHhcNMjUwNjI5MDUyODA3WhcNMjUwNzA2MDUyODA3WjAYMRYwFAYD VQQDEw02ODYwY2VlNy0wOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyyGvnCvFiagwi6liUquPB/8NeppSPya1Q7bDb2/zFw+PsvLaK55OejvgX3x gChNp3eYn0grvgEtd7/B+wjCq0xs+ycUXKviCr3H2+k5sn4U4SY4StIk0T30Q4e/ pwTyd74K03j8F8znIPwoKDe3JBcH8mbFzcxOiNnWOO+8odByNDICAcQArVtPed1G JYuuV/rxqOoO52cQeFzJKi2znt1pQaChShc4XyiscN4rn5DpSmtQxApJIxrW1We/ N6FucQYCrh67fS4UdCCdIbpWHIq7Rg0JNjQAWkLvd+G20RdmGgGqDhfQ1nVelbVH /lr2gx+e6aYECwTtL5ZCGRURUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4GQa4g /rMJVC69keJRUpUyxneIMB8GA1UdIwQYMBaAFGQQs1rRqOkf69hbRDdmjCpp2qfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc1OS8xMDZDRkQ2NDc2 RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZSX3IyRnRFTjJhTUttbmFw OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc1OS8xMDZDRkQ2NDc2RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZS X3IyRnRFTjJhTUttbmFwOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaxcOoTijwrXGuPEBu6+8x5dDmuAEyW5EJaghD9zhcRDj45HF67NG9 5DNqRI93XaTgNRi1T7xUCCddlh3h9naCeONZrjUqfXT2bGDfcAtVZaYXyyqfeK1k lvzJqe9VXSzBkRRzyy2uCqZZ72weINUT3J0fCPTror6MofVImxNGD9V0ngUwIQ5f Bo4KbCk62RQ0P6rnQL9x/R/cn9CZFDTjEgOUl4/7tnWG2+OodvNApbIiarIJVD1m cCuYWRe3fAuR+k/fF/OFUEzyJfK5Iji3Df5M8WfQ1b8LdxPRbRWRqiR0AlYLvZQz E5DqaxnzHim3WJNCibP6/Yq6A6DcYAsl -----END CERTIFICATE-----Generated at Mon Jun 30 12:22:13 2025 by rpki-client