$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: zr7/Kl/j9CjP2qzt1MC+GdJ2SIWj+0eMxE+Xr+wbBJY= Subject key identifier: D1:47:14:E1:93:6B:19:59:CD:5D:F2:E6:36:20:15:39:4F:50:27:F9 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 04D7 Signing time: Thu 03 Jul 2025 00:06:01 +0000 Manifest this update: Thu 03 Jul 2025 00:06:01 +0000 Manifest next update: Thu 10 Jul 2025 00:06:01 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: hKSqF/gB4yt3gkItFmN4gQhxbcndqFVnfxhpJ69M/WI=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: Jul 3 00:06:01 2025 GMT Not After : Jul 10 00:06:01 2025 GMT Subject: CN=6865c969-f2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:8d:b6:49:5f:5f:13:41:0b:5b:be:b6:9c: 47:76:bf:ca:65:54:f8:3c:9d:5a:f5:f1:f0:d2:df: e3:4f:77:4d:3a:45:3c:94:18:7b:7c:1d:fb:af:25: 44:59:7d:ac:00:07:bc:d4:99:3b:53:29:b3:13:c1: 36:e7:c9:18:61:2e:98:c7:d9:d7:7b:0b:9f:d1:92: 8f:89:bf:ce:01:ae:57:31:15:76:15:17:3e:11:b5: 6f:69:ac:73:e4:77:f4:3d:a3:46:0d:09:6c:8c:35: 3b:45:9a:c5:85:d4:d1:e2:68:a4:a8:a6:62:7a:4d: 05:90:3b:ce:f4:fa:d2:5b:33:bc:ac:2b:72:08:b3: 50:53:9e:c6:9e:8c:8c:12:6f:53:84:c1:8f:72:0b: 89:0e:74:9f:c6:ca:5a:a0:5a:1c:87:bc:30:b2:09: 8f:e5:20:12:aa:28:74:4f:c3:65:d3:86:13:d5:67: c4:24:78:23:66:ff:c0:64:48:96:b0:19:37:e6:89: b9:3d:ac:20:2e:d9:82:35:53:0f:45:1b:92:94:b6: 0a:d5:e6:d4:5f:1e:fd:7f:b7:ab:7c:c7:42:c9:b3: 13:d5:67:b2:86:a9:e0:19:24:fe:cd:9f:81:5b:c5: 32:0c:28:95:c6:9d:9c:21:5b:b8:cf:ef:ff:c9:3b: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:47:14:E1:93:6B:19:59:CD:5D:F2:E6:36:20:15:39:4F:50:27:F9 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ac:58:c5:66:39:e4:72:15:9b:bf:03:22:df:8a:49:d8:e4: d5:71:72:89:58:ff:60:c5:c2:6f:0f:8e:00:d2:bd:bb:b8:f7: 6f:3e:89:86:36:02:b9:20:0b:57:4b:9a:7a:46:25:b3:18:26: 4c:fc:0f:dd:3c:5a:5b:1b:f1:73:33:b2:49:cd:5e:bb:c4:13: 34:46:11:ba:c4:a5:fd:bb:0b:8d:8d:ff:09:7b:e6:bb:b2:a5: 00:d4:89:c2:75:52:9a:b0:f9:30:89:43:43:b4:02:d9:f9:24: ca:95:ea:b4:11:6a:32:a5:55:26:d1:40:a4:9f:65:91:1a:8b: c6:c0:34:25:e5:d3:94:e8:88:7e:ba:9e:9b:85:8e:0c:11:65: ca:a3:fa:1a:b1:25:89:74:c8:71:dd:73:fa:6c:1a:1a:d9:ce: 9d:0f:8d:a4:d4:d6:74:5f:da:65:1e:7d:58:48:98:76:6e:90: c5:9f:15:c4:c4:a5:b5:65:27:8b:b1:1f:d5:03:9c:98:65:36: 98:89:54:ee:df:22:c9:dd:3f:1a:41:9a:09:f8:1b:01:70:2c: da:96:ec:2f:18:60:69:57:61:c5:87:06:7e:87:9c:49:fd:57: 00:12:e4:bb:37:30:77:35:30:9b:93:5f:b5:31:0d:2f:89:3f: 86:3f:6d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUwNzAzMDAwNjAxWhcNMjUwNzEwMDAwNjAxWjAYMRYwFAYD VQQDEw02ODY1Yzk2OS1mMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyuNtklfXxNBC1u+tpxHdr/KZVT4PJ1a9fHw0t/jT3dNOkU8lBh7fB37ryVE WX2sAAe81Jk7UymzE8E258kYYS6Yx9nXewuf0ZKPib/OAa5XMRV2FRc+EbVvaaxz 5Hf0PaNGDQlsjDU7RZrFhdTR4mikqKZiek0FkDvO9PrSWzO8rCtyCLNQU57GnoyM Em9ThMGPcguJDnSfxspaoFoch7wwsgmP5SASqih0T8Nl04YT1WfEJHgjZv/AZEiW sBk35om5PawgLtmCNVMPRRuSlLYK1ebUXx79f7erfMdCybMT1WeyhqngGST+zZ+B W8UyDCiVxp2cIVu4z+//yTtaUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFHFOGT axlZzV3y5jYgFTlPUCf5MB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTrFjFZjnkchWbvwMi34pJ2OTVcXKJWP9gxcJvD44A0r27uPdvPomG NgK5IAtXS5p6RiWzGCZM/A/dPFpbG/FzM7JJzV67xBM0RhG6xKX9uwuNjf8Je+a7 sqUA1InCdVKasPkwiUNDtALZ+STKleq0EWoypVUm0UCkn2WRGovGwDQl5dOU6Ih+ up6bhY4MEWXKo/oasSWJdMhx3XP6bBoa2c6dD42k1NZ0X9plHn1YSJh2bpDFnxXE xKW1ZSeLsR/VA5yYZTaYiVTu3yLJ3T8aQZoJ+BsBcCzaluwvGGBpV2HFhwZ+h5xJ /VcAEuS7NzB3NTCbk1+1MQ0viT+GP22c -----END CERTIFICATE-----Generated at Thu Jul 3 08:45:40 2025 by rpki-client