$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: 0QabQxfBXUrINSQxKX4yf09GKaNzPv+HOBQxL6m0TQU= Subject key identifier: 5E:14:75:DC:16:A4:86:34:31:0F:DA:CE:B2:B6:51:52:C1:9D:B8:00 Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0BE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0BDB Signing time: Wed 02 Jul 2025 19:06:50 +0000 Manifest this update: Wed 02 Jul 2025 19:06:49 +0000 Manifest next update: Wed 09 Jul 2025 19:06:49 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: 4m5+AonWAdeuXIJWlIBdxsm1Saq8ihOA+ZSLIvE8gZ0=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: AhG5EQmnKsHYz3IRggOMcJqSh+00kQLALDjFL//vrE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Jul 2 19:06:49 2025 GMT Not After : Jul 9 19:06:49 2025 GMT Subject: CN=68658349-c28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:8b:69:c4:04:fc:77:6d:09:43:e1:c1:1b: 87:59:9b:1f:3a:e6:f5:69:1f:e0:a4:8a:a4:50:6d: 7d:fc:52:92:24:58:45:63:c4:7f:13:c5:89:be:7b: 48:61:0b:39:b0:25:21:f5:0d:31:24:9e:83:0b:32: 4c:ec:67:ff:11:99:40:c0:d9:29:db:de:84:ab:65: cd:b3:ea:76:7d:36:42:d1:c4:e0:2a:65:db:a9:eb: f7:c0:64:be:9c:f4:56:df:66:d0:ee:3a:5d:ba:70: c9:f5:73:06:a8:4e:6f:d2:93:c5:70:40:7b:98:79: 9b:e9:1b:aa:65:b9:b5:54:24:25:0c:0b:81:25:02: 3b:a3:e7:03:b1:8d:e4:78:ac:a2:ab:e0:3b:88:34: ff:89:35:91:1d:dd:cc:99:8d:8f:4f:9a:32:73:c0: d8:8d:87:ac:ae:45:d5:4d:a8:64:42:69:f7:b8:75: 84:d3:92:62:ca:82:2d:42:6c:0d:8e:f2:0d:d7:ca: f9:f6:21:80:d5:88:94:a7:87:6d:58:b0:e2:55:ad: 31:2b:9a:9f:a2:79:83:87:73:8b:17:7a:95:79:29: 79:07:01:e3:5f:a0:2b:c5:2b:4d:b8:c1:d6:17:74: 6a:71:d8:19:9e:db:f0:66:ac:e6:53:68:b3:ea:7b: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:14:75:DC:16:A4:86:34:31:0F:DA:CE:B2:B6:51:52:C1:9D:B8:00 X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b4:e8:62:bd:60:94:d1:26:bd:38:ad:4f:b0:60:30:8d:cb: 50:73:54:44:0d:39:8b:2d:aa:d4:97:bb:9e:98:4e:e2:91:d6: a6:20:00:b0:50:34:c2:a9:ac:08:73:4a:93:01:95:15:ab:6d: 12:b8:dc:e7:5b:77:b9:e2:44:96:db:bc:47:4f:d8:13:99:9b: ca:68:6a:07:c3:76:1f:d3:3b:04:82:ee:67:77:2b:bb:7d:96: 76:d0:35:7a:9a:ad:a7:e6:25:4f:2e:f7:a3:c5:32:6a:cc:53: c6:7b:84:c7:f0:1f:71:4e:67:68:36:63:2a:69:ca:55:e3:90: f7:35:1b:ce:3e:91:75:12:5a:b5:03:24:a4:79:6a:38:59:11: 5c:d5:be:1c:e2:1e:f1:0d:18:05:d6:ad:96:5c:e4:6d:8a:eb: 0c:e6:74:37:45:6b:f9:e7:21:28:e3:00:2b:de:a7:1c:96:af: 17:fb:7e:27:19:e7:5c:a4:6d:0e:34:00:e1:aa:2f:dd:cc:b8: 5a:21:cd:a9:c9:51:0c:86:9c:20:b4:b9:a7:1c:45:09:c4:2a: d7:18:0e:53:49:f9:e1:e7:31:dc:f1:cf:6c:f9:28:e2:a1:fd: c9:cd:72:cb:d6:2c:93:15:c2:df:92:c9:d7:5d:2a:e8:e8:46: 2d:1a:04:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjUwNzAyMTkwNjQ5WhcNMjUwNzA5MTkwNjQ5WjAYMRYwFAYD VQQDEw02ODY1ODM0OS1jMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFGLacQE/HdtCUPhwRuHWZsfOub1aR/gpIqkUG19/FKSJFhFY8R/E8WJvntI YQs5sCUh9Q0xJJ6DCzJM7Gf/EZlAwNkp296Eq2XNs+p2fTZC0cTgKmXbqev3wGS+ nPRW32bQ7jpdunDJ9XMGqE5v0pPFcEB7mHmb6RuqZbm1VCQlDAuBJQI7o+cDsY3k eKyiq+A7iDT/iTWRHd3MmY2PT5oyc8DYjYesrkXVTahkQmn3uHWE05JiyoItQmwN jvIN18r59iGA1YiUp4dtWLDiVa0xK5qfonmDh3OLF3qVeSl5BwHjX6ArxStNuMHW F3RqcdgZntvwZqzmU2iz6nuwiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4UddwW pIY0MQ/azrK2UVLBnbgAMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgtOhivWCU0Sa9OK1PsGAwjctQc1REDTmLLarUl7uemE7ikdamIACw UDTCqawIc0qTAZUVq20SuNznW3e54kSW27xHT9gTmZvKaGoHw3Yf0zsEgu5ndyu7 fZZ20DV6mq2n5iVPLvejxTJqzFPGe4TH8B9xTmdoNmMqacpV45D3NRvOPpF1Elq1 AySkeWo4WRFc1b4c4h7xDRgF1q2WXORtiusM5nQ3RWv55yEo4wAr3qcclq8X+34n GedcpG0ONADhqi/dzLhaIc2pyVEMhpwgtLmnHEUJxCrXGA5TSfnh5zHc8c9s+Sji of3JzXLL1iyTFcLfksnXXSro6EYtGgRE -----END CERTIFICATE-----Generated at Thu Jul 3 07:53:11 2025 by rpki-client