$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: hLmkxvIOKf4TqrwNzgRiFlO1wHWq0zku9BryRRNvZCY= Subject key identifier: 3A:35:35:0A:C3:14:79:A0:63:03:23:B6:61:DB:36:E4:07:91:4A:E5 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 87 Signing time: Thu 03 Jul 2025 06:46:03 +0000 Manifest this update: Thu 03 Jul 2025 06:46:03 +0000 Manifest next update: Thu 10 Jul 2025 06:46:03 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: zMuQLLY9Z8tRcV563275RNX5hIkLalnDj8Ytpk6QJks=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Jul 3 06:46:03 2025 GMT Not After : Jul 10 06:46:03 2025 GMT Subject: CN=6866272b-a062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:bf:24:45:b2:0d:26:b5:ce:5c:15:86:1b: dc:4d:97:81:8a:61:f8:60:ba:33:15:42:cc:f8:5b: 7a:06:1e:5b:7d:00:f0:5b:d9:ba:65:81:06:55:f5: 52:0c:98:1c:bc:97:4d:ed:6e:f1:cc:2f:2c:75:cb: 9d:e3:9f:05:e6:52:ce:32:cc:b9:49:40:46:e3:9a: b1:70:59:6c:b3:80:5a:9c:75:b8:1c:f7:5a:bd:11: 98:2b:32:60:39:9f:11:17:08:81:4a:94:9d:1a:21: 0f:1c:01:57:03:2d:b9:b8:3a:48:c0:b4:73:24:96: fc:f9:8e:f0:6b:f9:43:e8:f0:e2:e9:92:f7:9c:f4: 8b:e7:41:d4:03:1c:4a:c9:5a:eb:08:ee:79:fc:55: bb:78:01:d5:0b:c4:f2:1e:cf:a5:39:15:50:1e:7b: a6:fe:c3:3f:d6:51:98:46:09:7c:5a:36:dc:da:42: cb:39:ff:53:93:fa:66:35:99:dd:dc:eb:c5:25:d6: e2:63:98:9c:14:f2:32:84:a4:0c:19:c9:bd:6b:32: 6a:f0:55:16:bc:0a:f2:c0:1b:a6:9d:09:79:69:10: 92:a5:53:26:59:a8:ce:a8:79:b9:37:6c:ea:4a:30: 35:c9:d5:d5:5f:32:a7:45:ee:af:5a:cd:1f:4e:7a: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:35:35:0A:C3:14:79:A0:63:03:23:B6:61:DB:36:E4:07:91:4A:E5 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:c5:54:dd:43:13:6b:fa:85:be:cb:20:85:de:28:ea:91: 71:ab:47:84:00:2a:8e:79:c8:1d:be:f3:68:11:98:0e:b7:b1: 2a:6c:b4:0e:cd:e6:d6:c8:d0:4c:a7:17:53:3f:d8:f2:ac:8a: 9f:07:a8:20:19:5b:19:72:18:a7:17:8f:79:1f:f1:4c:0c:f1: 97:8b:42:c4:dc:2f:cb:b8:c1:2d:c0:09:dc:12:c5:e2:78:71: 05:82:cb:a2:fa:2b:de:71:f6:32:28:76:2a:0f:96:cb:3e:58: 46:4a:0a:49:1d:d2:03:cc:07:77:ca:b4:b4:9b:6a:eb:9d:ff: dd:aa:7a:c9:89:10:3a:82:f1:f3:4d:d9:b6:1c:6f:da:d2:9e: c7:c3:ac:2e:54:e6:35:23:2a:e1:8e:b4:6b:0a:9e:7e:be:9b: 9a:20:2a:8e:2d:7c:eb:2f:1e:be:a0:57:68:9f:b1:30:bf:e7: a9:18:de:8e:7f:8d:db:b8:d4:df:f7:31:71:f9:50:7c:89:d6: 56:9f:ec:e1:6f:c6:23:ac:22:ec:19:1e:6f:fa:5a:f8:28:af: cf:b2:e5:1e:56:da:16:16:08:2e:ac:bc:41:33:66:db:8b:1f: 86:a4:82:ca:30:f6:b5:ec:5f:ee:bc:33:75:c6:48:88:5a:d8: d1:73:66:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUwNzAzMDY0NjAzWhcNMjUwNzEwMDY0NjAzWjAYMRYwFAYD VQQDEw02ODY2MjcyYi1hMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o6/JEWyDSa1zlwVhhvcTZeBimH4YLozFULM+Ft6Bh5bfQDwW9m6ZYEGVfVS DJgcvJdN7W7xzC8sdcud458F5lLOMsy5SUBG45qxcFlss4BanHW4HPdavRGYKzJg OZ8RFwiBSpSdGiEPHAFXAy25uDpIwLRzJJb8+Y7wa/lD6PDi6ZL3nPSL50HUAxxK yVrrCO55/FW7eAHVC8TyHs+lORVQHnum/sM/1lGYRgl8Wjbc2kLLOf9Tk/pmNZnd 3OvFJdbiY5icFPIyhKQMGcm9azJq8FUWvArywBumnQl5aRCSpVMmWajOqHm5N2zq SjA1ydXVXzKnRe6vWs0fTnrA/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo1NQrD FHmgYwMjtmHbNuQHkUrlMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq0MVU3UMTa/qFvssghd4o6pFxq0eEACqOecgdvvNoEZgOt7EqbLQO zebWyNBMpxdTP9jyrIqfB6ggGVsZchinF495H/FMDPGXi0LE3C/LuMEtwAncEsXi eHEFgsui+ivecfYyKHYqD5bLPlhGSgpJHdIDzAd3yrS0m2rrnf/dqnrJiRA6gvHz Tdm2HG/a0p7Hw6wuVOY1IyrhjrRrCp5+vpuaICqOLXzrLx6+oFdon7Ewv+epGN6O f43buNTf9zFx+VB8idZWn+zhb8YjrCLsGR5v+lr4KK/PsuUeVtoWFggurLxBM2bb ix+GpILKMPa17F/uvDN1xkiIWtjRc2Y/ -----END CERTIFICATE-----Generated at Thu Jul 3 22:49:37 2025 by rpki-client