$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: OWxTXwoe9XjJKgXFRCTwCO6EpmwVLzR3IGM2ssrUG/c= Subject key identifier: 24:64:A0:C1:FF:F0:48:3F:39:E6:D4:5A:D6:51:03:52:CA:DA:57:4D Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 07B6 Signing time: Wed 02 Jul 2025 22:01:33 +0000 Manifest this update: Wed 02 Jul 2025 22:01:32 +0000 Manifest next update: Wed 09 Jul 2025 22:01:32 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: 21mv+ADtV1mYjfMSax20MNMMFM98HVusBsmS/WkR/Ng=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: qTxqjLafp1eHZVEFc07aPaguHdK/MmmTaVfaOIj+sXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: Jul 2 22:01:32 2025 GMT Not After : Jul 9 22:01:32 2025 GMT Subject: CN=6865ac3c-a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:6e:48:a1:ca:e1:b6:38:cc:da:04:63:51: 82:f5:0a:b5:d3:f8:52:b9:9d:e9:be:5d:d4:8d:93: b5:0f:47:1f:23:1d:e1:be:49:21:53:7b:b7:43:1b: ef:61:b0:51:58:86:ab:c9:96:35:bc:09:65:02:16: 98:af:04:45:23:2a:25:df:a1:ec:3c:c6:1f:ff:d5: f2:73:42:3a:1a:bf:ba:44:a0:4e:8d:5e:31:9e:79: a9:ae:a2:f6:4a:52:26:a0:38:9d:06:40:51:af:fa: 17:3a:16:a6:9b:15:32:ca:55:21:21:12:c4:45:83: 78:07:77:56:0b:ce:0a:79:03:8e:f5:57:8f:57:fe: 0a:98:0a:2b:d3:1c:7d:04:08:39:a2:6c:36:6c:28: 73:be:27:54:92:f9:3c:99:44:17:07:b8:5a:c8:e4: a3:63:61:6b:96:65:1a:8f:52:27:bd:a4:64:a5:e4: de:60:d8:e3:80:1d:7a:19:f3:52:04:9a:fb:a4:61: 71:95:19:77:d7:b9:82:2f:e1:da:35:5b:f2:50:17: ee:78:99:22:dd:9a:3a:79:be:2e:ab:9f:b9:ac:ce: db:f4:0a:d9:ae:1d:b0:b2:b2:a0:0a:30:4d:27:d8: 41:3a:d0:2a:ad:c0:b1:6d:10:d9:1d:ba:38:bc:fe: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:64:A0:C1:FF:F0:48:3F:39:E6:D4:5A:D6:51:03:52:CA:DA:57:4D X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:0b:53:b7:18:90:02:26:89:d5:1e:de:23:05:e4:e5:7b:3a: 38:21:aa:cd:d6:8b:24:18:8a:8b:c4:8a:87:3b:1d:7b:7b:9e: 0c:85:27:a9:72:0a:de:45:16:8c:0f:c8:22:b3:d0:82:7c:a9: a6:db:56:37:dd:ca:5f:fa:f1:50:26:16:10:f5:d5:c7:a6:61: cd:fd:23:af:f6:22:e4:71:3d:c1:69:33:d4:85:25:79:90:d7: d7:ab:d4:ed:da:2a:23:a7:45:6a:6f:ca:cb:97:ab:8e:69:05: cd:81:34:5e:30:e1:74:cc:39:cb:a6:54:24:9a:bd:5f:08:50: 45:91:6b:a2:f9:f5:a6:92:22:93:e8:32:a5:ff:e8:ee:98:bc: b8:86:c1:83:ea:53:1f:6f:76:1e:c3:bc:09:56:1d:1b:00:e4: de:fb:fb:6c:28:ae:40:e6:03:a5:22:f5:b7:04:db:a2:96:81: a5:64:d3:fb:47:92:f0:0a:e6:51:ca:25:1f:81:1c:64:1b:4b: 32:22:d3:13:3b:2e:b5:0d:4f:e6:d1:35:1a:31:1c:ec:b2:71: 23:62:66:e8:2f:90:d0:6d:49:51:36:29:b5:4b:fa:ff:26:af: d1:7c:cd:bb:c9:06:8a:a6:dd:8a:bc:5f:c1:81:b0:ab:1b:a5: 96:51:13:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjUwNzAyMjIwMTMyWhcNMjUwNzA5MjIwMTMyWjAYMRYwFAYD VQQDEw02ODY1YWMzYy1hOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu65uSKHK4bY4zNoEY1GC9Qq10/hSuZ3pvl3UjZO1D0cfIx3hvkkhU3u3Qxvv YbBRWIaryZY1vAllAhaYrwRFIyol36HsPMYf/9Xyc0I6Gr+6RKBOjV4xnnmprqL2 SlImoDidBkBRr/oXOhammxUyylUhIRLERYN4B3dWC84KeQOO9VePV/4KmAor0xx9 BAg5omw2bChzvidUkvk8mUQXB7hayOSjY2FrlmUaj1InvaRkpeTeYNjjgB16GfNS BJr7pGFxlRl317mCL+HaNVvyUBfueJki3Zo6eb4uq5+5rM7b9ArZrh2wsrKgCjBN J9hBOtAqrcCxbRDZHbo4vP5eCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRkoMH/ 8Eg/OebUWtZRA1LK2ldNMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWC1O3GJACJonVHt4jBeTlezo4IarN1oskGIqLxIqHOx17e54MhSep cgreRRaMD8gis9CCfKmm21Y33cpf+vFQJhYQ9dXHpmHN/SOv9iLkcT3BaTPUhSV5 kNfXq9Tt2iojp0Vqb8rLl6uOaQXNgTReMOF0zDnLplQkmr1fCFBFkWui+fWmkiKT 6DKl/+jumLy4hsGD6lMfb3Yew7wJVh0bAOTe+/tsKK5A5gOlIvW3BNuiloGlZNP7 R5LwCuZRyiUfgRxkG0syItMTOy61DU/m0TUaMRzssnEjYmboL5DQbUlRNim1S/r/ Jq/RfM27yQaKpt2KvF/BgbCrG6WWURPr -----END CERTIFICATE-----Generated at Fri Jul 4 03:00:35 2025 by rpki-client