$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: 0MtSItXZpNXp58CEONk7s3d3a+07W0x1xxqyvVsRlWQ= Subject key identifier: 76:C4:07:4C:92:B0:7F:80:52:64:80:E7:FA:46:59:B4:E6:94:5E:F8 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 86 Signing time: Thu 03 Jul 2025 06:52:39 +0000 Manifest this update: Thu 03 Jul 2025 06:52:39 +0000 Manifest next update: Thu 10 Jul 2025 06:52:39 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 4kCtJYCWRiIsJjO1TlbDIV/jPFjh8DiyvXETSpOWwNE=) 2: 1A4E810A9C4711EFBCAF2961C4F9AE02.roa (hash: H/SNFy0blXHf51g3f4tDsQMfyr+dfN3zT3EjfHQV3so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Jul 3 06:52:39 2025 GMT Not After : Jul 10 06:52:39 2025 GMT Subject: CN=686628b7-bdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:44:64:b8:74:e3:ad:83:8d:c0:c4:d2:ad: 45:56:08:21:1f:c8:62:b3:f6:b7:af:df:a1:0e:83: bf:7f:f0:33:d7:7e:2c:05:df:46:98:ca:1c:bc:48: 43:d8:6e:e4:0f:c8:57:8f:6a:e9:47:04:10:c2:db: ea:8c:d1:ed:b5:0b:bb:ed:af:f0:a5:1c:8c:d4:d7: 27:47:fc:77:79:07:72:13:28:34:e9:77:a1:1e:b7: 58:d6:99:f2:ad:bd:50:d1:cf:2a:77:af:58:5c:b0: 22:18:9e:54:b1:7e:25:ec:9c:40:cf:41:51:21:84: 88:b7:d4:58:07:ff:2b:49:3c:cb:15:99:76:0b:0d: 37:86:85:d3:42:10:a0:a7:e5:ce:98:1f:0a:a0:d2: 82:8c:03:50:37:10:41:87:a4:27:4b:5b:4b:08:58: e9:8f:cf:f7:21:db:68:04:87:9e:9c:99:fb:2c:86: a5:71:ae:5f:01:00:e7:95:49:27:7c:31:a9:b8:ab: 1a:1a:32:b0:63:fb:62:3c:c9:65:b1:e8:89:aa:32: 1d:63:0d:38:92:e6:ef:65:3d:02:5a:36:de:25:a5: 31:1c:b0:6b:9a:95:9f:d1:0a:a6:e6:2b:8b:a9:7c: da:4d:83:ff:70:e3:fc:e9:8a:e4:33:55:0b:4e:38: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:07:4C:92:B0:7F:80:52:64:80:E7:FA:46:59:B4:E6:94:5E:F8 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:2b:61:f1:ae:60:98:49:6a:de:dd:4d:d6:29:ad:fe:a7:6c: 56:3b:36:3a:02:04:c5:c1:40:34:a4:4d:bb:89:f6:e4:40:67: 51:e9:fc:22:7a:d5:5e:d1:71:8a:40:60:46:27:cd:ed:21:0b: 55:37:a9:6e:ff:8b:c0:3f:3b:77:c5:17:3b:e0:3b:40:46:d2: 47:02:c7:13:60:1b:da:d5:57:86:58:8b:8a:b2:46:73:fb:b6: 21:30:2b:90:30:48:76:94:e2:5b:13:c1:79:51:a0:53:01:66: 8c:ee:8b:5a:2a:e5:87:57:2e:d4:e8:0a:3f:22:28:07:89:8c: e7:43:2b:98:b6:b3:36:29:b9:82:28:dc:1c:93:47:7c:28:d3: 1c:95:71:29:97:ff:59:5b:ab:30:5c:4b:89:b3:95:3f:ed:f6: ff:3a:e9:0e:f9:23:b7:c5:6b:50:49:7f:cf:93:e5:cb:df:9c: ab:17:f7:75:8b:7e:25:2f:5f:40:e3:9e:64:c0:cb:53:7b:1c: ac:04:fd:69:5f:fd:60:20:bc:e9:4c:81:f7:7d:1a:7b:d7:9d: 21:b6:ac:6f:96:ba:6d:2d:7b:f6:f3:0b:66:b9:be:66:6f:f3: f2:b0:97:72:35:e7:84:b4:b1:90:4b:d0:a7:4b:63:8c:b7:8a: ee:26:8d:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjUwNzAzMDY1MjM5WhcNMjUwNzEwMDY1MjM5WjAYMRYwFAYD VQQDEw02ODY2MjhiNy1iZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx9EZLh0462DjcDE0q1FVgghH8his/a3r9+hDoO/f/Az134sBd9GmMocvEhD 2G7kD8hXj2rpRwQQwtvqjNHttQu77a/wpRyM1NcnR/x3eQdyEyg06XehHrdY1pny rb1Q0c8qd69YXLAiGJ5UsX4l7JxAz0FRIYSIt9RYB/8rSTzLFZl2Cw03hoXTQhCg p+XOmB8KoNKCjANQNxBBh6QnS1tLCFjpj8/3IdtoBIeenJn7LIalca5fAQDnlUkn fDGpuKsaGjKwY/tiPMllseiJqjIdYw04kubvZT0CWjbeJaUxHLBrmpWf0Qqm5iuL qXzaTYP/cOP86YrkM1ULTjhKyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbEB0yS sH+AUmSA5/pGWbTmlF74MB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1K2HxrmCYSWre3U3WKa3+p2xWOzY6AgTFwUA0pE27ifbkQGdR6fwi etVe0XGKQGBGJ83tIQtVN6lu/4vAPzt3xRc74DtARtJHAscTYBva1VeGWIuKskZz +7YhMCuQMEh2lOJbE8F5UaBTAWaM7otaKuWHVy7U6Ao/IigHiYznQyuYtrM2KbmC KNwck0d8KNMclXEpl/9ZW6swXEuJs5U/7fb/OukO+SO3xWtQSX/Pk+XL35yrF/d1 i34lL19A455kwMtTexysBP1pX/1gILzpTIH3fRp7150htqxvlrptLXv28wtmub5m b/PysJdyNeeEtLGQS9CnS2OMt4ruJo2D -----END CERTIFICATE-----Generated at Thu Jul 3 19:57:30 2025 by rpki-client