$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: rRLA8yv7zQaogJ1cB3GZiebOiSIUjdXJ/xsU5Z8mYm8= Subject key identifier: 3C:68:EB:66:1B:71:9A:0D:7E:DE:86:78:09:45:86:48:94:FA:3C:1B Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0C93 Signing time: Wed 02 Jul 2025 18:29:08 +0000 Manifest this update: Wed 02 Jul 2025 18:29:08 +0000 Manifest next update: Wed 09 Jul 2025 18:29:08 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: pth9CRMr46wdla3T13KE+B77B4SFTaRvDCur/MbecL4=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Jul 2 18:29:08 2025 GMT Not After : Jul 9 18:29:08 2025 GMT Subject: CN=68657a74-1694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:61:04:b9:a4:60:08:f0:69:c9:f6:08:bb: 35:07:8a:10:6a:97:cd:83:5f:3a:d5:03:cc:e6:5f: 32:a3:e0:de:8d:e9:8b:94:a3:6d:6c:5b:3b:df:c2: 87:49:03:e2:81:d4:d5:41:c2:8e:c2:ac:e8:79:a6: bb:5d:50:ac:99:4f:c8:11:3b:ce:08:da:39:90:4b: 2e:12:60:23:9a:75:74:c2:dc:89:27:a5:51:94:ba: 1d:58:e4:ca:91:af:a4:a8:e7:6e:a9:26:a2:ee:f3: 43:21:8e:4a:e1:6e:7e:bc:06:e9:ff:6c:c4:df:1c: de:40:a4:89:20:6e:73:1f:2b:ae:46:46:49:53:86: 35:21:75:4c:ed:2b:00:08:e2:57:53:cd:38:4b:76: 6c:39:36:dd:8e:c3:4b:1c:88:03:53:e4:0c:20:49: e1:cc:35:a2:d0:31:18:9f:29:6e:1f:7d:ea:9e:a2: 2d:41:d3:38:67:d7:3a:36:ff:56:1c:73:c4:08:12: 87:4e:8d:3b:67:2e:d8:0c:d4:7e:0b:f8:23:b0:54: e2:09:a9:f0:fe:18:b9:b5:7e:1d:1f:68:1c:f5:56: b6:dc:71:f9:1a:18:12:84:c8:ed:ef:83:df:e5:a1: 7b:5e:02:f1:ef:a5:8f:78:55:25:fc:b7:93:8e:c9: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:EB:66:1B:71:9A:0D:7E:DE:86:78:09:45:86:48:94:FA:3C:1B X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:9b:53:bb:bf:68:30:32:a6:03:78:02:c9:d5:53:52:38:d4: df:d9:50:2b:4a:dc:34:5f:b3:25:c6:9a:90:5f:8b:36:9f:4f: 5f:90:9d:04:4e:25:a8:33:52:41:60:d1:6e:35:79:41:36:3f: d0:9e:c7:00:c9:e0:ba:06:71:98:2b:7f:3d:f1:6a:c3:73:ce: 45:53:0e:5a:b4:a4:b7:3f:6f:c1:3f:fa:e9:ad:d0:6e:54:55: e5:a7:41:d5:4f:f7:9b:3e:e0:7f:83:e5:8e:61:cd:4f:47:2e: 65:3f:68:24:6d:c1:33:7d:e6:a7:98:70:a5:69:a3:d7:7d:84: d3:00:a5:92:8b:a0:02:e3:08:2a:85:eb:1a:e5:e7:07:37:63: e2:13:dc:af:18:8d:b6:47:19:38:ce:87:b9:37:fe:d6:ea:12: 30:57:81:f7:fd:7f:10:3d:89:20:b3:b4:57:9b:1d:c4:1b:5e: b6:5b:d7:62:ec:c6:f3:be:8b:e6:5d:29:ef:59:dd:f7:76:bb: 55:41:66:54:7d:ee:dc:8d:2d:fb:ac:c3:f8:c0:65:95:54:24: 10:b8:2f:74:b3:29:22:fc:bc:ba:d3:3e:6c:7c:07:ec:3b:a1: 55:f0:46:84:60:42:42:3a:86:8e:2e:62:d7:ae:7e:e3:e5:de: 99:63:16:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUwNzAyMTgyOTA4WhcNMjUwNzA5MTgyOTA4WjAYMRYwFAYD VQQDEw02ODY1N2E3NC0xNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSxhBLmkYAjwacn2CLs1B4oQapfNg1861QPM5l8yo+DejemLlKNtbFs738KH SQPigdTVQcKOwqzoeaa7XVCsmU/IETvOCNo5kEsuEmAjmnV0wtyJJ6VRlLodWOTK ka+kqOduqSai7vNDIY5K4W5+vAbp/2zE3xzeQKSJIG5zHyuuRkZJU4Y1IXVM7SsA COJXU804S3ZsOTbdjsNLHIgDU+QMIEnhzDWi0DEYnyluH33qnqItQdM4Z9c6Nv9W HHPECBKHTo07Zy7YDNR+C/gjsFTiCanw/hi5tX4dH2gc9Va23HH5GhgShMjt74Pf 5aF7XgLx76WPeFUl/LeTjsnp4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxo62Yb cZoNft6GeAlFhkiU+jwbMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1m1O7v2gwMqYDeALJ1VNSONTf2VArStw0X7MlxpqQX4s2n09fkJ0E TiWoM1JBYNFuNXlBNj/QnscAyeC6BnGYK3898WrDc85FUw5atKS3P2/BP/rprdBu VFXlp0HVT/ebPuB/g+WOYc1PRy5lP2gkbcEzfeanmHClaaPXfYTTAKWSi6AC4wgq hesa5ecHN2PiE9yvGI22Rxk4zoe5N/7W6hIwV4H3/X8QPYkgs7RXmx3EG162W9di 7MbzvovmXSnvWd33drtVQWZUfe7cjS37rMP4wGWVVCQQuC90syki/Ly60z5sfAfs O6FV8EaEYEJCOoaOLmLXrn7j5d6ZYxYc -----END CERTIFICATE-----Generated at Thu Jul 3 02:07:00 2025 by rpki-client