$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: Vlu6rxCY3A2kHhrcirPU0+4mlL1Zsd+ry4C8R2FBcfY= Subject key identifier: 5E:C9:6F:C8:7D:E9:79:1A:5A:B1:0B:B6:8B:71:36:8A:A7:95:18:77 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 0118 Signing time: Tue 01 Jul 2025 05:36:07 +0000 Manifest this update: Tue 01 Jul 2025 05:36:07 +0000 Manifest next update: Tue 08 Jul 2025 05:36:07 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: xcNQb/mPmwxoMAFHRB20WTDdlgZh1JZznXL0Ry2zAds=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Jul 1 05:36:07 2025 GMT Not After : Jul 8 05:36:07 2025 GMT Subject: CN=686373c7-9c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:95:3e:14:65:14:05:0c:d7:d3:4b:fb:88: 09:41:65:8d:ee:fe:60:b0:d5:b9:f3:63:69:e2:46: ab:2c:85:fa:ee:e2:e7:66:0e:6d:74:22:7e:7b:33: 01:30:57:84:15:36:6b:a6:cc:4e:71:6f:e3:c0:24: 50:81:54:90:88:9f:22:f7:da:1a:c1:ba:cc:3f:af: 61:7f:f8:43:94:97:cc:ab:a7:b6:f7:ff:d6:3b:9f: 5e:75:5c:31:1e:4f:cf:35:4f:2b:34:80:37:c6:34: bb:27:84:fe:b3:d0:bf:49:46:0d:9f:35:df:ad:4c: c0:52:0a:61:c3:5d:27:eb:ea:d0:1c:21:07:92:6c: 78:49:fe:43:3e:75:16:44:20:4e:96:97:dd:7c:dd: 8a:23:00:67:18:a2:03:f4:72:69:51:07:71:2d:f6: 55:38:ce:37:5e:4c:cb:e1:83:d5:a8:7a:fa:91:3c: 53:5d:6f:d3:47:fc:d1:c8:f2:46:a0:17:28:96:e1: a6:cc:f5:f1:62:de:f5:11:7c:f2:8a:36:b7:48:54: 55:3f:a5:d3:5d:6d:9c:7b:58:17:8e:e6:79:1d:33: bc:23:24:c9:3b:65:42:ee:8f:fb:59:7f:60:27:7a: 7d:52:ac:3a:82:e2:46:a3:da:8e:8e:63:50:03:41: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C9:6F:C8:7D:E9:79:1A:5A:B1:0B:B6:8B:71:36:8A:A7:95:18:77 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:11:ea:4a:96:3e:95:77:b2:14:1f:4f:79:c7:ca:30:39:8a: 40:db:ab:dd:17:56:7a:bf:1d:c9:d1:02:d0:e0:93:4f:9f:89: 89:c4:18:8f:5c:7c:d8:f7:97:80:dd:b5:4d:73:a9:2b:60:b6: 18:d0:87:8b:26:7a:c8:b8:0e:12:10:e0:2c:c5:69:ec:d4:a7: e4:f2:6e:67:12:c8:a6:d5:d0:f6:bd:50:46:21:36:49:33:a7: 65:45:5b:35:ca:68:6f:43:80:11:19:7b:b9:3a:c1:96:e9:9e: e3:05:b5:21:01:db:18:68:df:fc:a1:ab:c6:07:38:c3:83:2b: eb:28:05:2c:bf:a7:43:db:37:19:ca:f7:db:8d:f6:c2:d3:3f: bd:62:04:a3:08:76:e0:e2:d0:26:9f:9a:67:d0:6c:61:57:4b: 5e:1f:c0:84:31:eb:68:73:42:62:cc:63:fa:d4:22:37:01:9f: 9f:6c:91:04:d2:48:e0:44:ee:3e:bc:c0:d1:04:74:2d:4f:e8: 86:bc:18:61:a8:18:de:49:4b:27:0f:3c:99:15:2f:5a:00:e6: 13:04:6f:e8:77:fb:20:08:95:dc:c2:c5:90:c3:34:05:2a:66: 98:ed:a0:95:7d:8f:6f:56:01:7a:74:23:55:8e:36:62:53:78: 6d:cb:82:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUwNzAxMDUzNjA3WhcNMjUwNzA4MDUzNjA3WjAYMRYwFAYD VQQDEw02ODYzNzNjNy05YzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBuVPhRlFAUM19NL+4gJQWWN7v5gsNW582Np4karLIX67uLnZg5tdCJ+ezMB MFeEFTZrpsxOcW/jwCRQgVSQiJ8i99oawbrMP69hf/hDlJfMq6e29//WO59edVwx Hk/PNU8rNIA3xjS7J4T+s9C/SUYNnzXfrUzAUgphw10n6+rQHCEHkmx4Sf5DPnUW RCBOlpfdfN2KIwBnGKID9HJpUQdxLfZVOM43XkzL4YPVqHr6kTxTXW/TR/zRyPJG oBcoluGmzPXxYt71EXzyija3SFRVP6XTXW2ce1gXjuZ5HTO8IyTJO2VC7o/7WX9g J3p9Uqw6guJGo9qOjmNQA0G/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7Jb8h9 6XkaWrELtotxNoqnlRh3MB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGEepKlj6Vd7IUH095x8owOYpA26vdF1Z6vx3J0QLQ4JNPn4mJxBiP XHzY95eA3bVNc6krYLYY0IeLJnrIuA4SEOAsxWns1Kfk8m5nEsim1dD2vVBGITZJ M6dlRVs1ymhvQ4ARGXu5OsGW6Z7jBbUhAdsYaN/8oavGBzjDgyvrKAUsv6dD2zcZ yvfbjfbC0z+9YgSjCHbg4tAmn5pn0GxhV0teH8CEMetoc0JizGP61CI3AZ+fbJEE 0kjgRO4+vMDRBHQtT+iGvBhhqBjeSUsnDzyZFS9aAOYTBG/od/sgCJXcwsWQwzQF KmaY7aCVfY9vVgF6dCNVjjZiU3hty4Ll -----END CERTIFICATE-----Generated at Tue Jul 1 18:11:37 2025 by rpki-client