$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: B2rCBiD/pkorYfkceI49rxxnCzHRI22PFs8cP7TulCM= Subject key identifier: A5:D2:D7:5D:28:B8:97:18:DE:DE:28:51:A8:EB:23:AE:23:98:76:83 Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 08D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 08CF Signing time: Wed 02 Jul 2025 20:41:51 +0000 Manifest this update: Wed 02 Jul 2025 20:41:51 +0000 Manifest next update: Wed 09 Jul 2025 20:41:51 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: Zct/CII+3rfcXYQV9pQLHgHumEueB2jF0IMfyACisu0=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 7qPOEKIxNomgCIWc/yHC1zpaUnhuR5qP+cJAyuTEkQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: Jul 2 20:41:51 2025 GMT Not After : Jul 9 20:41:51 2025 GMT Subject: CN=6865998f-10c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:2d:f5:e5:aa:99:f0:86:19:e1:ac:32:20: 70:02:7d:9f:6e:de:cb:33:45:0a:00:5e:06:f3:7a: 53:90:a5:71:d7:79:04:35:d6:03:3e:40:09:39:98: 7b:19:24:1a:6c:16:d6:e0:35:f6:ae:c6:66:75:b4: 58:f5:02:d6:76:a3:0b:3a:77:9a:e7:e9:33:77:ac: 56:dc:c8:d8:7c:4f:6d:85:6f:4e:97:08:aa:e8:64: e0:19:9d:ff:93:83:ba:e5:cc:eb:cd:87:13:59:d2: 8f:af:81:7e:c4:7a:6d:fa:24:a7:4b:d3:7b:17:d9: c6:34:a4:2a:54:f5:c9:bf:18:14:31:8d:61:39:83: 05:8d:46:8b:c2:8f:a1:45:52:3e:1a:7c:69:5c:97: 30:3f:4f:b9:c1:33:8f:ec:82:74:9a:27:06:9f:b9: 45:cd:73:52:20:82:52:ee:e2:14:36:07:6a:dc:2f: 4d:3f:1e:5f:fc:65:d6:54:f0:77:a9:1b:fe:99:7a: 7b:1c:69:49:d6:0e:ce:c3:26:c7:06:83:70:be:4d: 83:da:2f:f5:ce:c4:1d:c9:4a:12:71:9e:48:e7:b4: 66:dc:06:49:e2:96:9f:80:66:ef:a5:69:a0:e4:47: a5:ff:a0:ce:f8:cb:7a:f9:e3:65:8d:59:ff:26:96: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D2:D7:5D:28:B8:97:18:DE:DE:28:51:A8:EB:23:AE:23:98:76:83 X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:88:cd:14:7e:25:cb:71:8f:cc:f1:fe:be:f6:7a:5d:dc:cd: fe:c8:bd:01:2c:a3:4a:7f:34:2e:ed:89:79:25:36:da:84:78: 51:90:e4:61:6d:a9:e4:b1:e9:3f:54:11:73:eb:29:c7:5d:f3: 6b:2a:12:a7:e5:2d:7c:14:de:6f:a5:d8:6a:0e:39:16:f5:c0: a4:23:15:24:09:55:54:25:ae:56:84:22:b4:23:b0:93:be:d0: ac:45:13:e5:ef:9f:95:63:5c:12:db:53:9e:65:7b:91:c8:a7: 90:94:8b:17:9d:1e:3d:72:11:07:71:6f:64:1f:a6:84:8a:50: 57:c0:00:d3:16:87:28:25:fc:0d:44:d7:33:3e:68:86:43:70: 6b:f4:e5:8c:5e:29:37:f2:9a:4a:1e:5c:b6:e1:79:5f:91:1f: 3f:cc:28:ed:21:06:22:e7:80:ae:f2:38:dd:35:47:df:84:9e: 0c:ac:09:54:1d:4f:3f:cc:49:fd:c5:07:9a:56:89:55:9e:79: ea:45:6e:ee:df:0d:08:b9:9c:e1:6d:aa:ba:0e:d7:da:79:2e: bb:f7:2a:fb:67:a8:e4:e7:08:de:2e:fb:da:80:3f:6b:49:a4: 96:a8:8b:ed:c4:30:bd:7e:ba:86:c6:8d:78:5f:c7:2f:f8:b5: 55:e0:1a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjUwNzAyMjA0MTUxWhcNMjUwNzA5MjA0MTUxWjAYMRYwFAYD VQQDEw02ODY1OTk4Zi0xMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+Et9eWqmfCGGeGsMiBwAn2fbt7LM0UKAF4G83pTkKVx13kENdYDPkAJOZh7 GSQabBbW4DX2rsZmdbRY9QLWdqMLOnea5+kzd6xW3MjYfE9thW9Olwiq6GTgGZ3/ k4O65czrzYcTWdKPr4F+xHpt+iSnS9N7F9nGNKQqVPXJvxgUMY1hOYMFjUaLwo+h RVI+GnxpXJcwP0+5wTOP7IJ0micGn7lFzXNSIIJS7uIUNgdq3C9NPx5f/GXWVPB3 qRv+mXp7HGlJ1g7OwybHBoNwvk2D2i/1zsQdyUoScZ5I57Rm3AZJ4pafgGbvpWmg 5Eel/6DO+Mt6+eNljVn/JpZClQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXS110o uJcY3t4oUajrI64jmHaDMB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtiM0UfiXLcY/M8f6+9npd3M3+yL0BLKNKfzQu7Yl5JTbahHhRkORh banksek/VBFz6ynHXfNrKhKn5S18FN5vpdhqDjkW9cCkIxUkCVVUJa5WhCK0I7CT vtCsRRPl75+VY1wS21OeZXuRyKeQlIsXnR49chEHcW9kH6aEilBXwADTFocoJfwN RNczPmiGQ3Br9OWMXik38ppKHly24XlfkR8/zCjtIQYi54Cu8jjdNUffhJ4MrAlU HU8/zEn9xQeaVolVnnnqRW7u3w0IuZzhbaq6DtfaeS679yr7Z6jk5wjeLvvagD9r SaSWqIvtxDC9frqGxo14X8cv+LVV4Bpo -----END CERTIFICATE-----Generated at Fri Jul 4 14:45:28 2025 by rpki-client