$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json) Hash identifier: JcLzG8zsYbYGoROKjVSfFBnOp4OarWgXL1+GbmRMEE4= Subject key identifier: 25:81:42:67:88:59:98:24:8A:7C:3A:9E:46:8A:D8:07:B9:C5:69:95 Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft Manifest number: 69 Signing time: Thu 03 Jul 2025 07:12:46 +0000 Manifest this update: Thu 03 Jul 2025 07:12:46 +0000 Manifest next update: Thu 10 Jul 2025 07:12:46 +0000 Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: mYN7XqxSzem+uPFZlvs1JI65aLWb2hAJNJ8WbcGDE7I=) 2: 9C532970B72311EFBA17AB72C4F9AE02.roa (hash: V8Oi/Zt9u9c7P3V5ZEct3r3+92oknInn9a1C4JSyxzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Jul 3 07:12:46 2025 GMT Not After : Jul 10 07:12:46 2025 GMT Subject: CN=68662d6e-6959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:d9:c3:2a:4b:86:e8:47:4b:83:8d:29:4c: 79:dd:b2:1e:4d:c6:f1:57:9a:27:70:7a:a5:fe:3f: 95:ac:b9:e1:35:f7:e3:ad:0f:7d:d7:58:5b:1b:48: 9e:4d:ba:be:b9:5a:e3:f0:29:96:02:72:38:15:2f: 1e:75:09:a3:d0:8e:6b:71:4c:be:ce:72:7d:35:2a: aa:a1:de:57:fa:64:57:f8:55:12:d5:6b:10:e5:4a: c7:a6:05:ab:13:5a:2e:52:9e:30:8e:83:f1:60:29: 30:39:0d:01:2e:7d:ca:2c:26:1b:16:e0:ce:74:3a: 5c:6c:f6:90:2d:92:ca:a2:7b:65:f7:45:05:eb:ea: eb:df:49:db:34:35:b2:b0:b1:35:51:ee:b6:b5:2a: 98:54:9f:e2:a9:40:ab:76:1f:10:ee:b3:0c:e7:c2: 0a:90:be:61:cb:8b:63:3e:c0:75:09:a3:27:60:47: 28:b4:c7:9a:b7:17:f6:48:41:63:94:d8:86:90:d4: e2:96:10:e3:87:6d:72:f0:34:89:5c:06:31:ee:07: ea:ea:a5:cc:76:80:b7:a9:de:e3:bc:72:0c:b5:86: 4b:54:af:05:6f:77:0f:ce:df:c3:31:aa:08:a7:aa: 08:17:02:e3:dc:89:b3:fc:0a:d4:0d:a1:11:ad:33: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:81:42:67:88:59:98:24:8A:7C:3A:9E:46:8A:D8:07:B9:C5:69:95 X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:62:2c:56:85:34:00:54:83:5d:f9:3d:00:21:b8:91:b2:92: 44:8f:26:51:ab:81:bb:6c:15:75:35:f4:1f:e9:79:d3:e3:b7: 1c:bc:bc:ab:06:72:80:13:6b:13:b7:63:58:05:19:c3:67:30: ef:12:15:f6:13:27:b1:70:c5:4f:5c:2e:0b:6b:80:0d:1a:48: c1:7d:db:ee:99:7e:09:43:70:0a:11:03:c3:8d:0b:16:36:55: c6:c1:c8:20:a7:e2:85:44:76:3d:af:2d:cd:75:9b:9c:b3:79: 8c:a7:03:d5:c0:d4:6b:42:70:65:72:ee:0c:a8:1f:9c:11:03: 67:51:6a:55:d3:97:10:0a:b7:0f:fa:cb:b6:fb:ca:a2:e2:d8: 53:55:36:c7:74:ad:ed:58:c6:bb:fc:20:a0:f8:2b:d8:40:0e: 4d:6e:6f:61:ae:e1:9f:62:a5:e1:3d:29:a9:0a:59:62:65:09: d2:d0:15:50:17:8f:3f:b0:29:97:76:22:cf:94:29:46:36:20: b9:e2:d7:b7:fc:fc:f4:b2:34:4c:42:b5:b0:24:6e:56:9d:b1: 9b:31:70:b4:6f:19:2b:e5:fa:01:40:51:04:37:a9:d2:26:71: 83:e6:51:cf:2f:f6:95:58:bc:0c:be:cd:e3:53:72:d7:93:03: 0c:72:ae:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoNjcwRTNBMDY3MjE2ODRBQjQ3M0JCQkU1Q0MyMkNGMDVE MDI0QkY2RDAeFw0yNTA3MDMwNzEyNDZaFw0yNTA3MTAwNzEyNDZaMBgxFjAUBgNV BAMTDTY4NjYyZDZlLTY5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChmdnDKkuG6EdLg40pTHndsh5NxvFXmidweqX+P5WsueE19+OtD33XWFsbSJ5N ur65WuPwKZYCcjgVLx51CaPQjmtxTL7Ocn01Kqqh3lf6ZFf4VRLVaxDlSsemBasT Wi5SnjCOg/FgKTA5DQEufcosJhsW4M50Olxs9pAtksqie2X3RQXr6uvfSds0NbKw sTVR7ra1KphUn+KpQKt2HxDuswznwgqQvmHLi2M+wHUJoydgRyi0x5q3F/ZIQWOU 2IaQ1OKWEOOHbXLwNIlcBjHuB+rqpcx2gLep3uO8cgy1hktUrwVvdw/O38Mxqgin qggXAuPcibP8CtQNoRGtMwSnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJYFCZ4hZ mCSKfDqeRorYB7nFaZUwHwYDVR0jBBgwFoAUZw46BnIWhKtHO7vlzCLPBdAkv20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0RBRjZENzM2Qjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3Yy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnc0NkJuSVdoS3RITzd2bHpDTFBCZEFrdjIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0RBRjZENzM2QjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0 SE83dmx6Q0xQQmRBa3YyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABpiLFaFNABUg135PQAhuJGykkSPJlGrgbtsFXU19B/pedPjtxy8vKsG coATaxO3Y1gFGcNnMO8SFfYTJ7FwxU9cLgtrgA0aSMF92+6ZfglDcAoRA8ONCxY2 VcbByCCn4oVEdj2vLc11m5yzeYynA9XA1GtCcGVy7gyoH5wRA2dRalXTlxAKtw/6 y7b7yqLi2FNVNsd0re1Yxrv8IKD4K9hADk1ub2Gu4Z9ipeE9KakKWWJlCdLQFVAX jz+wKZd2Is+UKUY2ILni17f8/PSyNExCtbAkbladsZsxcLRvGSvl+gFAUQQ3qdIm cYPmUc8v9pVYvAy+zeNTcteTAwxyrkw= -----END CERTIFICATE-----Generated at Fri Jul 4 14:58:58 2025 by rpki-client