$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: tB4xNKUVCxn+UE09FriTq4WmU9bbbQmO8e/l8AGw7T8= Subject key identifier: 2F:D4:DC:96:67:A3:98:71:93:C0:6A:C0:3A:83:E9:C9:70:00:26:A0 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E39 Signing time: Fri 04 Jul 2025 18:05:16 +0000 Manifest this update: Fri 04 Jul 2025 18:05:15 +0000 Manifest next update: Fri 11 Jul 2025 18:05:15 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: yoGvGL75h31tmVhBTB70Is75A0YverT50yn0F4N3u9c=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3655 (0xe47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Jul 4 18:05:15 2025 GMT Not After : Jul 11 18:05:15 2025 GMT Subject: CN=686817db-5028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:f4:ca:a4:40:1f:84:cf:cd:35:91:74:e3: e4:37:37:64:09:cc:9a:f8:38:27:42:a3:a5:f3:c3: 77:cb:9f:e4:00:77:2d:7b:58:2a:cf:ca:56:a9:ff: 13:ed:c9:11:a5:5e:e2:e7:e8:27:5a:d5:19:8c:cc: 0b:a0:28:41:dd:73:b5:61:8b:2e:1f:01:32:1a:34: c2:29:8a:cf:d0:04:cc:31:da:aa:9e:83:ed:f2:d7: e8:46:75:68:9a:50:9d:56:85:e2:31:01:d5:a9:f1: be:90:66:7a:31:d6:8e:f6:72:25:8f:37:c8:a1:91: e8:70:b8:44:81:2e:c6:9e:08:f8:94:e8:b2:bd:96: 8b:65:7f:4a:f0:d4:dd:c6:11:25:5c:7e:f8:fe:19: 8c:69:fc:62:bb:9d:5c:3c:df:bc:67:c8:d8:e2:ae: ea:8d:a5:2a:42:a6:7f:d5:71:5b:f2:1b:da:fc:bc: d0:92:e6:56:65:96:c4:d0:96:31:45:38:b4:bc:30: 85:b9:7c:67:75:1c:99:a7:b6:0a:05:2e:41:dc:b5: b1:da:2e:2c:9f:72:aa:e8:bf:cd:9f:8d:41:b3:a3: b2:a3:e6:8a:21:63:4a:b6:33:40:1a:36:70:db:0d: e2:33:36:41:25:1e:06:66:9a:f2:97:ae:59:6a:cc: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D4:DC:96:67:A3:98:71:93:C0:6A:C0:3A:83:E9:C9:70:00:26:A0 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:27:05:58:e3:d8:a6:c0:2a:22:56:a4:96:51:27:aa:c6:37: 79:2c:2c:dc:ae:a6:eb:00:45:3f:29:7c:6c:26:48:79:ad:f6: db:68:1f:ef:54:9d:23:d8:cc:c9:26:f3:38:92:f2:5b:ad:a1: 76:e2:dd:06:98:67:6a:10:04:4e:49:7d:4c:37:3d:69:32:8e: f9:14:39:50:d1:4d:84:86:5f:94:82:7d:76:fe:d1:d1:38:8b: 2f:10:e2:ee:28:95:a5:67:ee:5e:e3:07:ae:57:9c:e4:26:98: 0e:37:01:55:39:8d:e9:da:25:2f:7d:c7:47:ee:ce:1e:26:8c: eb:d3:4d:7c:f7:ce:37:23:79:17:7e:aa:62:0b:1f:71:b3:1f: fc:fe:29:7c:8a:ce:b4:cb:f3:a7:fe:0a:d2:09:9b:c5:a3:c6: 79:42:ab:c6:05:4c:59:c3:37:cd:39:d1:a9:44:2e:d3:6b:e8: f9:e0:66:f0:1f:39:e8:15:5c:8c:70:85:85:76:cc:a7:3d:96: c2:2f:e5:72:a5:b4:28:3a:ed:e5:10:e4:3e:2e:61:f7:16:e2: 29:3b:64:26:3a:ec:a5:14:a7:70:aa:9b:d6:14:a4:2b:bf:97: 1d:56:86:d9:be:a1:b4:0a:92:5a:f9:dc:09:bf:7e:6b:28:78: 9f:24:4e:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUwNzA0MTgwNTE1WhcNMjUwNzExMTgwNTE1WjAYMRYwFAYD VQQDEw02ODY4MTdkYi01MDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIj0yqRAH4TPzTWRdOPkNzdkCcya+DgnQqOl88N3y5/kAHcte1gqz8pWqf8T 7ckRpV7i5+gnWtUZjMwLoChB3XO1YYsuHwEyGjTCKYrP0ATMMdqqnoPt8tfoRnVo mlCdVoXiMQHVqfG+kGZ6MdaO9nIljzfIoZHocLhEgS7Gngj4lOiyvZaLZX9K8NTd xhElXH74/hmMafxiu51cPN+8Z8jY4q7qjaUqQqZ/1XFb8hva/LzQkuZWZZbE0JYx RTi0vDCFuXxndRyZp7YKBS5B3LWx2i4sn3Kq6L/Nn41Bs6Oyo+aKIWNKtjNAGjZw 2w3iMzZBJR4GZpryl65ZasyYGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/U3JZn o5hxk8BqwDqD6clwACagMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUJwVY49imwCoiVqSWUSeqxjd5LCzcrqbrAEU/KXxsJkh5rfbbaB/v VJ0j2MzJJvM4kvJbraF24t0GmGdqEAROSX1MNz1pMo75FDlQ0U2Ehl+Ugn12/tHR OIsvEOLuKJWlZ+5e4weuV5zkJpgONwFVOY3p2iUvfcdH7s4eJozr00189843I3kX fqpiCx9xsx/8/il8is60y/On/grSCZvFo8Z5QqvGBUxZwzfNOdGpRC7Ta+j54Gbw HznoFVyMcIWFdsynPZbCL+VypbQoOu3lEOQ+LmH3FuIpO2QmOuylFKdwqpvWFKQr v5cdVobZvqG0CpJa+dwJv35rKHifJE5O -----END CERTIFICATE-----Generated at Sat Jul 5 05:21:22 2025 by rpki-client