$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: pIUV7J16t3rbpMQST3czsYj9cI0ABnmTYEWEGH2FwI4= Subject key identifier: 24:7C:93:EA:DB:11:30:7B:51:D0:31:6F:B7:E6:BD:6C:3E:9F:2E:02 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 0134 Signing time: Fri 04 Jul 2025 14:11:11 +0000 Manifest this update: Fri 04 Jul 2025 14:11:11 +0000 Manifest next update: Fri 11 Jul 2025 14:11:11 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: /bECGMVnAhNjVZHN59etWE0HjkXRP7MKD6djrSIRDWU=) 2: ACD0165654BB11F0865ABE0AC4F9AE02.roa (hash: 0TkmZCWvJV+qpd5xOIT8KAm6l9kS87lhVZxKx2cbehQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Jul 4 14:11:11 2025 GMT Not After : Jul 11 14:11:11 2025 GMT Subject: CN=6867e0ff-0fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:42:16:6c:3a:b4:b9:9d:93:85:96:58:d7: 90:d8:20:4f:d2:40:45:a5:03:1e:7c:37:d7:0c:20: a2:b8:88:d3:c4:45:40:38:b3:42:b7:ff:62:94:81: 1c:61:1e:a2:bf:e9:bc:28:8f:37:33:3b:33:8c:b9: 65:ef:f2:03:e3:4a:40:46:31:f6:a6:f2:a4:5a:4f: f4:b4:6d:76:40:1c:f6:a9:34:82:6d:f8:70:18:35: ba:2c:85:29:6c:2f:20:ce:22:99:1e:33:49:9c:f7: 71:79:09:89:7c:6c:2a:d4:fb:42:76:1a:21:cf:7b: b6:71:c8:5b:b6:66:c8:6f:6c:83:f0:b8:cd:0d:5f: 05:5a:d1:38:66:0c:de:89:17:62:7d:0d:e1:35:e7: 3a:e6:51:22:95:a8:c8:39:7a:bc:8c:96:39:67:70: ff:fb:6e:e9:b2:e2:26:9c:dd:06:f8:00:c7:74:81: 3e:f0:ef:5c:6e:42:31:19:be:47:d4:4e:48:00:c3: 99:9c:30:91:33:bf:be:af:fb:5a:ed:1c:a3:8f:b6: 1b:b0:e3:f1:44:5b:2f:6b:bf:1a:c3:99:76:6c:41: 5d:1c:f6:19:ce:83:e9:ae:f4:b3:82:9c:52:fd:00: 75:ea:74:ff:14:04:4a:f4:ae:4c:30:42:29:19:cc: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:93:EA:DB:11:30:7B:51:D0:31:6F:B7:E6:BD:6C:3E:9F:2E:02 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b5:c4:94:00:17:d1:30:24:7e:37:90:58:ed:59:07:93:11: 36:09:1c:8f:48:34:59:bb:04:3c:63:b7:b3:fb:95:65:94:d9: ff:92:67:5d:0d:0f:11:11:b3:64:04:bf:14:86:21:8e:1a:46: 6e:79:74:2c:9f:7e:1a:46:8e:ed:03:cf:85:dd:36:89:1f:2c: e7:41:8f:1f:c9:72:fd:a9:16:70:c5:b3:c2:a4:e4:7b:b9:e3: 74:23:f0:4c:f2:3a:67:7c:fe:7f:a7:86:30:39:df:d3:a3:40: 37:d6:0a:c5:39:f5:d8:af:f9:e8:32:91:8e:d8:e8:c0:72:6a: 9c:ce:9c:57:b9:b0:02:32:57:58:2d:ae:65:0e:4e:ff:ad:ab: 40:9c:30:0b:b6:48:85:db:21:0d:a7:14:ee:19:14:57:9a:5c: 01:71:44:8a:3c:fe:90:ca:71:f4:2c:24:ce:d8:dc:3e:8c:82: 60:53:07:1c:c9:08:3e:2f:c8:25:49:03:d2:9e:5a:78:12:bf: f1:36:5b:22:43:b5:57:5b:a8:d1:b4:8a:18:86:d4:f2:e6:23: a4:f0:81:0c:70:ea:91:a5:6c:46:1f:d5:e5:98:98:b8:3c:78: 5e:18:cc:76:5f:7d:54:89:f7:f0:6b:79:11:46:b3:df:30:a4: 1a:ed:6c:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwNzA0MTQxMTExWhcNMjUwNzExMTQxMTExWjAYMRYwFAYD VQQDEw02ODY3ZTBmZi0wZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9dCFmw6tLmdk4WWWNeQ2CBP0kBFpQMefDfXDCCiuIjTxEVAOLNCt/9ilIEc YR6iv+m8KI83MzszjLll7/ID40pARjH2pvKkWk/0tG12QBz2qTSCbfhwGDW6LIUp bC8gziKZHjNJnPdxeQmJfGwq1PtCdhohz3u2cchbtmbIb2yD8LjNDV8FWtE4Zgze iRdifQ3hNec65lEilajIOXq8jJY5Z3D/+27psuImnN0G+ADHdIE+8O9cbkIxGb5H 1E5IAMOZnDCRM7++r/ta7Ryjj7YbsOPxRFsva78aw5l2bEFdHPYZzoPprvSzgpxS /QB16nT/FARK9K5MMEIpGcz5zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR8k+rb ETB7UdAxb7fmvWw+ny4CMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3tcSUABfRMCR+N5BY7VkHkxE2CRyPSDRZuwQ8Y7ez+5VllNn/kmdd DQ8REbNkBL8UhiGOGkZueXQsn34aRo7tA8+F3TaJHyznQY8fyXL9qRZwxbPCpOR7 ueN0I/BM8jpnfP5/p4YwOd/To0A31grFOfXYr/noMpGO2OjAcmqczpxXubACMldY La5lDk7/ratAnDALtkiF2yENpxTuGRRXmlwBcUSKPP6QynH0LCTO2Nw+jIJgUwcc yQg+L8glSQPSnlp4Er/xNlsiQ7VXW6jRtIoYhtTy5iOk8IEMcOqRpWxGH9XlmJi4 PHheGMx2X31Uiffwa3kRRrPfMKQa7Wys -----END CERTIFICATE-----Generated at Fri Jul 4 18:04:00 2025 by rpki-client