$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: MQnLwFPvruGwEmFkzdkX//2StGEcmUaVieSbUCb0LKA= Subject key identifier: 79:BB:68:E8:A0:D8:4C:83:3F:2C:DB:0F:F9:87:59:38:2A:AF:C8:F1 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 0863 Signing time: Mon 30 Jun 2025 20:55:13 +0000 Manifest this update: Mon 30 Jun 2025 20:55:13 +0000 Manifest next update: Mon 07 Jul 2025 20:55:13 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: TNyI0rMrFefiqngLCMkqMge+AGokBAkUbFT4X0EN37I=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: f9tQPToB76p1pPXGROGF6QphrQQvfLBw4Gw3PGjwt1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Jun 30 20:55:13 2025 GMT Not After : Jul 7 20:55:13 2025 GMT Subject: CN=6862f9b1-c51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:93:d5:42:e4:8c:08:7f:ad:cd:3c:98:cf: 21:4c:fe:a3:c7:e9:fb:fb:ce:3f:8b:d2:7b:52:a6: 9e:b5:ea:7f:3b:cc:1e:48:42:09:55:38:e5:bc:4b: 5b:2a:4f:91:88:7e:52:b8:b7:b9:f5:e1:6a:29:fe: f2:16:07:3c:dc:1c:1b:f1:b7:d0:1c:89:8a:60:99: b0:93:d9:33:65:40:d1:2b:74:71:7f:2c:47:49:eb: 78:93:44:e8:23:e5:c2:f0:08:f5:59:24:37:e4:4d: 78:af:a1:54:19:19:f6:3d:92:05:27:08:56:9e:59: a2:07:bc:a6:fa:18:c9:84:83:86:53:d2:2e:1a:dc: d0:8e:87:2d:5e:2d:af:99:fb:58:b4:ec:3f:3e:62: 5f:5f:07:2f:6d:eb:d8:43:c9:d7:93:26:4a:60:b1: 77:55:3b:e0:b9:cc:3c:d5:df:c2:03:fc:ec:4a:bd: 1c:20:b6:cf:1a:ac:59:ef:a2:19:72:81:a6:1b:d0: 8f:49:e9:f8:60:47:83:27:26:77:be:22:9c:81:fd: 1b:70:d6:39:6e:2d:58:58:43:19:d0:6d:e8:bd:f8: 56:f6:7d:09:a5:b1:94:98:70:75:20:57:ca:a4:2a: 50:89:8c:08:4d:75:12:24:c2:42:b8:9b:e3:fa:ae: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BB:68:E8:A0:D8:4C:83:3F:2C:DB:0F:F9:87:59:38:2A:AF:C8:F1 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2b:58:cd:39:0a:d4:61:2c:9c:9e:77:2b:8e:cd:76:71:cb: 3c:96:67:e5:da:0a:21:4d:07:31:4c:5b:7b:9e:22:11:92:af: 4e:d0:d9:f4:f1:6e:9d:11:26:ce:42:8d:a9:31:be:63:74:0f: 00:ce:bc:a6:7a:a2:3b:b8:ea:f4:40:6e:07:35:12:6e:17:aa: fd:a2:5e:e3:38:14:92:de:32:c5:84:44:ee:4f:24:28:22:e8: fa:03:db:b8:b1:3a:0f:e7:f2:a8:1e:54:e3:37:ad:c6:a1:40: 9f:51:2d:c1:ab:c6:b9:63:2b:cd:09:b9:b4:06:ab:9b:cc:c4: 21:68:1d:23:e5:59:3b:76:ef:82:94:65:3e:bc:f5:96:4b:8c: 9f:6d:2a:29:0b:11:b8:f7:6d:da:75:2d:77:90:cf:6a:0a:8d: be:05:bc:fa:16:b0:c2:39:ba:c2:2d:4e:73:34:18:73:bf:7f: 00:25:df:ee:6f:1b:54:b1:b5:db:f2:c0:02:af:f0:f9:aa:2d: d0:9f:c0:a2:9c:44:5d:59:8d:ee:87:e0:51:34:94:49:90:82: 92:93:c8:98:0e:45:5f:50:38:1a:f2:bf:5c:8c:6f:9e:e2:86: 2f:c6:27:0b:3f:bc:f1:e4:c6:5c:c5:0e:c2:55:bf:fd:bc:f4: c1:dd:c1:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUwNjMwMjA1NTEzWhcNMjUwNzA3MjA1NTEzWjAYMRYwFAYD VQQDEw02ODYyZjliMS1jNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAWT1ULkjAh/rc08mM8hTP6jx+n7+84/i9J7Uqaetep/O8weSEIJVTjlvEtb Kk+RiH5SuLe59eFqKf7yFgc83Bwb8bfQHImKYJmwk9kzZUDRK3RxfyxHSet4k0To I+XC8Aj1WSQ35E14r6FUGRn2PZIFJwhWnlmiB7ym+hjJhIOGU9IuGtzQjoctXi2v mftYtOw/PmJfXwcvbevYQ8nXkyZKYLF3VTvgucw81d/CA/zsSr0cILbPGqxZ76IZ coGmG9CPSen4YEeDJyZ3viKcgf0bcNY5bi1YWEMZ0G3ovfhW9n0JpbGUmHB1IFfK pCpQiYwITXUSJMJCuJvj+q5kzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm7aOig 2EyDPyzbD/mHWTgqr8jxMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfK1jNOQrUYSycnncrjs12ccs8lmfl2gohTQcxTFt7niIRkq9O0Nn0 8W6dESbOQo2pMb5jdA8AzrymeqI7uOr0QG4HNRJuF6r9ol7jOBSS3jLFhETuTyQo Iuj6A9u4sToP5/KoHlTjN63GoUCfUS3Bq8a5YyvNCbm0BqubzMQhaB0j5Vk7du+C lGU+vPWWS4yfbSopCxG4923adS13kM9qCo2+Bbz6FrDCObrCLU5zNBhzv38AJd/u bxtUsbXb8sACr/D5qi3Qn8CinERdWY3uh+BRNJRJkIKSk8iYDkVfUDga8r9cjG+e 4oYvxicLP7zx5MZcxQ7CVb/9vPTB3cFj -----END CERTIFICATE-----Generated at Tue Jul 1 02:32:48 2025 by rpki-client