$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json) Hash identifier: 8vXZrsbDSfOO1a+9Hn6mp+XX62doH/GVvqDFkEPBPT4= Subject key identifier: 2F:1C:2D:DE:B7:B2:41:07:02:04:E8:9E:3F:CB:AE:CE:45:D2:2E:00 Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Certificate serial: 0574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft Manifest number: 0569 Signing time: Wed 02 Jul 2025 23:40:48 +0000 Manifest this update: Wed 02 Jul 2025 23:40:48 +0000 Manifest next update: Wed 09 Jul 2025 23:40:48 +0000 Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: nQ04DSXGbHts/iut9sJgj9FAeiXP3eVMooX6h+MqwYU=) 2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: efdLoq6zZv0F6RR1ze+KA4UrdZ3dfGQdbaEk/qTBX+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Validity Not Before: Jul 2 23:40:48 2025 GMT Not After : Jul 9 23:40:48 2025 GMT Subject: CN=6865c380-7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:49:2f:16:bd:6d:42:78:63:f2:0a:08:c2: af:e4:1a:c8:d2:87:f2:19:3d:39:44:59:84:38:28: 69:00:de:ea:f1:7a:0a:af:32:a4:ae:4a:f8:e2:53: 3e:f6:e5:1b:51:5b:4c:89:71:8c:fe:b3:a7:1f:e2: f7:69:30:51:e9:df:81:7c:27:19:9d:7a:c1:51:c9: 52:f5:87:9d:ec:5a:59:a0:d1:c2:b5:d9:46:9a:07: 59:4d:33:83:1c:12:f0:9c:39:46:c7:ce:72:5c:50: c1:5b:d3:97:b8:52:b9:43:d8:f9:7b:7d:84:43:a9: 15:45:d4:fb:0f:13:39:3d:2c:7c:7c:e5:9d:62:00: ce:61:63:13:0a:f2:46:00:11:94:9b:64:0b:61:1d: a4:8c:6b:8c:72:09:c4:a9:b6:07:fb:05:ba:a9:43: 1f:8e:9b:b4:df:01:02:0c:41:78:19:c8:96:64:7a: ac:5f:3c:8b:5d:76:37:0e:79:76:9a:ed:e5:bd:05: 06:88:a9:14:70:a9:ce:31:a4:b1:59:8a:c4:fe:58: 08:82:e0:11:39:89:5b:cd:81:86:40:b0:8c:e0:97: 07:d9:a0:34:d8:ce:6e:e4:4f:71:c6:b6:e7:0f:64: d8:67:4c:e7:1b:fb:c5:2a:31:98:ca:e4:4e:24:fa: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1C:2D:DE:B7:B2:41:07:02:04:E8:9E:3F:CB:AE:CE:45:D2:2E:00 X509v3 Authority Key Identifier: keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:7e:77:0d:cf:01:95:74:68:a7:a5:53:5f:e5:18:37:a3: 61:95:3a:31:bd:80:43:5d:4f:b4:39:17:36:f8:78:50:98:22: b8:22:da:e1:ef:0d:0c:2a:49:0d:55:b5:ad:d8:b3:ef:87:77: 49:c1:75:ae:5b:14:6b:70:bc:d6:ee:44:21:d1:19:67:0d:87: 11:33:98:b7:ed:8c:cf:e1:ae:00:ea:4f:86:4e:b3:2a:ca:ac: 1f:20:77:d3:77:2d:dc:cc:46:67:f6:9d:38:d4:16:b3:a9:17: 0d:85:e5:72:1d:ed:4d:49:6e:3c:b6:0a:bc:53:93:70:31:70: c0:c7:c3:72:cb:b2:dd:8c:d4:e7:f3:f7:3d:bb:c7:32:11:28: 83:9d:3b:d9:6b:82:5e:13:51:b2:9b:c8:11:50:b4:78:7a:80: 5a:f5:4a:60:d7:3b:60:fd:57:6d:51:04:96:94:7d:13:9c:e3: f8:e7:14:27:b7:b7:04:69:96:f4:a9:0f:e0:ce:2c:71:36:36: 13:f7:70:63:29:ec:21:97:33:54:03:9c:02:29:d7:29:f1:95: 56:ae:39:60:6c:de:18:59:15:a3:b6:b6:64:2d:c3:34:26:c6: 44:3a:fd:f5:74:80:a1:81:3d:1d:64:25:80:8f:a3:45:cc:d8: f5:35:72:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxOTQxMTAvBgNVBAUTKDY3REQ3NzQ3QTlEQjhCMDFBNUU3Q0NBMTQ2QzQ4OTY1 QTIzMDgwOTEwHhcNMjUwNzAyMjM0MDQ4WhcNMjUwNzA5MjM0MDQ4WjAYMRYwFAYD VQQDEw02ODY1YzM4MC03YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+FJLxa9bUJ4Y/IKCMKv5BrI0ofyGT05RFmEOChpAN7q8XoKrzKkrkr44lM+ 9uUbUVtMiXGM/rOnH+L3aTBR6d+BfCcZnXrBUclS9Yed7FpZoNHCtdlGmgdZTTOD HBLwnDlGx85yXFDBW9OXuFK5Q9j5e32EQ6kVRdT7DxM5PSx8fOWdYgDOYWMTCvJG ABGUm2QLYR2kjGuMcgnEqbYH+wW6qUMfjpu03wECDEF4GciWZHqsXzyLXXY3Dnl2 mu3lvQUGiKkUcKnOMaSxWYrE/lgIguAROYlbzYGGQLCM4JcH2aA02M5u5E9xxrbn D2TYZ0znG/vFKjGYyuROJPrBOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8cLd63 skEHAgTonj/Lrs5F0i4AMB8GA1UdIwQYMBaAFGfdd0ep24sBpefMoUbEiWWiMICR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjE5NC81RjM3QjlFRUVG NkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3R2w1OHloUnNTSlphSXdn SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5MTNSNm5iaXdHbDU4eWhSc1NKWmFJd2dKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjE5NC81RjM3QjlFRUVGNkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3 R2w1OHloUnNTSlphSXdnSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo8353Dc8BlXRop6VTX+UYN6NhlToxvYBDXU+0ORc2+HhQmCK4Itrh 7w0MKkkNVbWt2LPvh3dJwXWuWxRrcLzW7kQh0RlnDYcRM5i37YzP4a4A6k+GTrMq yqwfIHfTdy3czEZn9p041BazqRcNheVyHe1NSW48tgq8U5NwMXDAx8Nyy7LdjNTn 8/c9u8cyESiDnTvZa4JeE1Gym8gRULR4eoBa9Upg1ztg/VdtUQSWlH0TnOP45xQn t7cEaZb0qQ/gzixxNjYT93BjKewhlzNUA5wCKdcp8ZVWrjlgbN4YWRWjtrZkLcM0 JsZEOv31dIChgT0dZCWAj6NFzNj1NXKP -----END CERTIFICATE-----Generated at Thu Jul 3 09:25:59 2025 by rpki-client