$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json) Hash identifier: a2thH7UseXrlTMYyUzM/48CeEibklXljF9NKmSeYM7Q= Subject key identifier: 8B:10:94:C7:91:52:81:14:71:60:5A:26:7B:BC:A1:D4:EA:E2:C7:FA Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft Manifest number: 0335 Signing time: Thu 03 Jul 2025 01:26:58 +0000 Manifest this update: Thu 03 Jul 2025 01:26:57 +0000 Manifest next update: Thu 10 Jul 2025 01:26:57 +0000 Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: FDfkuklISAB78EMdVSmOrUjWVMQCGCO4EGJ3G3FrYfI=) 2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: qH/kmALWQxd9w+o7ml/PHWheO95UYxgo26aceJX0/p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Validity Not Before: Jul 3 01:26:57 2025 GMT Not After : Jul 10 01:26:57 2025 GMT Subject: CN=6865dc62-211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:88:21:68:a0:44:43:a7:91:b5:be:40:30: 5b:4e:29:74:79:41:de:33:71:1c:fe:be:d2:f9:26: 0f:96:3e:44:d5:d9:13:bd:ec:99:7d:57:ed:57:52: 56:30:33:80:b0:5e:13:16:26:67:2e:cd:50:49:3a: 3d:8f:14:3a:41:fb:25:ea:24:28:c8:ff:e3:49:5c: bf:c8:77:d7:6d:e9:66:f5:6e:4c:ed:ac:56:06:69: b7:bb:ce:69:92:ce:e1:5b:0d:64:ff:75:e5:65:00: cb:b6:7b:ab:9e:43:d9:bf:97:5c:a0:d5:85:33:70: 9f:2b:54:a4:a9:aa:be:f3:4e:99:41:30:f6:a9:29: 8c:95:37:70:8e:4b:1d:b5:cb:e1:42:3c:12:93:25: db:8a:50:07:4a:89:09:5f:21:fc:86:3c:ac:d2:70: 0b:a3:06:c5:c0:a3:26:15:87:97:0f:3e:36:3b:e8: d9:d2:a3:dd:e5:10:b3:0c:cd:75:22:58:75:62:71: b6:1c:18:eb:03:e4:bf:ec:ad:f1:7e:c9:7e:5f:66: ff:d4:4f:68:fb:3a:87:ad:f8:f2:7c:dd:0b:e7:52: 88:fc:b9:9a:33:90:9f:13:de:17:d0:97:89:54:a0: 7a:1f:83:72:61:16:03:89:e3:6c:18:4d:d4:5b:75: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:10:94:C7:91:52:81:14:71:60:5A:26:7B:BC:A1:D4:EA:E2:C7:FA X509v3 Authority Key Identifier: keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e2:00:4e:b3:a0:14:c2:87:35:1b:ca:4b:5b:2c:94:7f:68: 7c:b2:c0:dd:77:c5:72:a1:11:63:b9:3d:61:60:2c:91:72:e3: ce:09:2e:ac:60:5a:a2:d1:6f:d8:53:01:ce:ae:84:f4:d8:92: 2a:b5:be:2b:a9:3d:1f:71:aa:65:15:fa:41:72:1d:70:ff:3b: 6d:50:7d:3d:08:65:cf:57:1f:c3:0e:ea:2e:a2:19:8c:ca:4d: 1d:f1:84:23:73:e0:6a:45:c3:13:ad:8c:e4:eb:8d:db:81:52: 77:42:9e:40:c6:a6:73:6d:95:04:e3:9f:ce:67:df:ae:d7:d8: 46:5a:64:1a:11:b8:b6:9d:44:ba:66:13:55:0a:d3:f6:11:a0: d4:f5:2c:18:8c:9f:a2:ac:8c:f2:c2:9c:c1:74:4a:cb:f5:de: 6e:12:79:14:9a:d1:1c:f6:2d:8d:1e:80:46:bb:41:fe:3f:ed: 1c:6e:57:2f:38:15:81:7e:c6:b4:ca:8a:b6:e9:18:7f:eb:2d: 20:1a:eb:a9:69:0f:9a:bb:51:a2:af:9b:ef:fb:94:3f:73:a1: a0:11:5c:2e:ce:a1:c5:1d:83:c2:2d:49:23:43:14:e1:83:2e: 74:ad:6a:46:c9:09:7d:2d:0c:33:74:75:0f:c7:5b:2f:fe:d3: a9:21:09:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4 REUyMUJEN0IwHhcNMjUwNzAzMDEyNjU3WhcNMjUwNzEwMDEyNjU3WjAYMRYwFAYD VQQDEw02ODY1ZGM2Mi0yMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVCIIWigREOnkbW+QDBbTil0eUHeM3Ec/r7S+SYPlj5E1dkTveyZfVftV1JW MDOAsF4TFiZnLs1QSTo9jxQ6Qfsl6iQoyP/jSVy/yHfXbelm9W5M7axWBmm3u85p ks7hWw1k/3XlZQDLtnurnkPZv5dcoNWFM3CfK1Skqaq+806ZQTD2qSmMlTdwjksd tcvhQjwSkyXbilAHSokJXyH8hjys0nALowbFwKMmFYeXDz42O+jZ0qPd5RCzDM11 Ilh1YnG2HBjrA+S/7K3xfsl+X2b/1E9o+zqHrfjyfN0L51KI/LmaM5CfE94X0JeJ VKB6H4NyYRYDieNsGE3UW3VRYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsQlMeR UoEUcWBaJnu8odTq4sf6MB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1 M3FGcDdicEtRQ0tONGh2WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf4gBOs6AUwoc1G8pLWyyUf2h8ssDdd8VyoRFjuT1hYCyRcuPOCS6s YFqi0W/YUwHOroT02JIqtb4rqT0fcaplFfpBch1w/zttUH09CGXPVx/DDuouohmM yk0d8YQjc+BqRcMTrYzk643bgVJ3Qp5AxqZzbZUE45/OZ9+u19hGWmQaEbi2nUS6 ZhNVCtP2EaDU9SwYjJ+irIzywpzBdErL9d5uEnkUmtEc9i2NHoBGu0H+P+0cblcv OBWBfsa0yoq26Rh/6y0gGuupaQ+au1Gir5vv+5Q/c6GgEVwuzqHFHYPCLUkjQxTh gy50rWpGyQl9LQwzdHUPx1sv/tOpIQmV -----END CERTIFICATE-----Generated at Fri Jul 4 14:51:47 2025 by rpki-client