$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: /uWD8Oonr/vhFtXev+RBUgOJWOUO5Z2qS30Z0Nwfw+g= Subject key identifier: FE:64:4B:D7:F1:08:5B:2C:64:44:96:94:A8:17:E8:EC:90:A1:8E:F0 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 01C6 Signing time: Sun 29 Jun 2025 02:09:05 +0000 Manifest this update: Sun 29 Jun 2025 02:09:04 +0000 Manifest next update: Sun 06 Jul 2025 02:09:04 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: myywV7fgco9bdb5UfcbhAEMp2VrhfR8FEQysnD5KBl0=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: agT8B/KOnCHYQpfkAexNJsFp5T4PhjfgQqzkODGUs5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Jun 29 02:09:04 2025 GMT Not After : Jul 6 02:09:04 2025 GMT Subject: CN=6860a041-4acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:28:1b:96:17:e3:aa:5d:6c:08:be:f7:e8: e9:82:a0:fa:7a:02:27:a0:a5:6d:d4:ae:83:00:1a: c7:0f:9c:17:44:4d:9c:34:f7:f3:cb:bf:f5:7d:f8: 91:23:94:0c:08:94:5a:94:97:1f:ef:44:75:ca:c3: 6e:59:a9:fb:fb:b6:44:b5:05:05:81:27:8c:13:bb: d0:67:b1:13:8c:d9:14:93:18:9f:0d:b1:71:63:25: 4a:ff:db:aa:d5:41:af:bd:e1:d4:d0:6c:c2:c3:84: cf:c5:6b:8d:2e:4d:37:bb:09:a4:1b:22:69:31:1e: c1:b9:0d:c2:54:84:28:c9:84:43:f3:fa:dd:db:63: 37:b8:3d:ad:dd:39:0e:fd:bd:55:50:77:cd:61:d8: 24:4b:0b:38:3c:8e:3a:7c:dc:cf:76:7f:e1:11:a8: ab:3d:bd:64:6b:90:cc:8a:cd:76:4f:d8:9b:30:43: d2:c0:e7:ef:fc:c2:16:10:86:55:fb:6d:a9:bc:01: 6c:f0:dd:83:3f:e3:db:55:fc:da:83:88:83:b0:47: 38:38:01:27:08:ba:61:92:f0:d1:45:71:6a:59:ff: 50:c0:98:fa:2b:32:ca:ef:cc:d0:9d:63:82:94:24: 77:c1:f0:52:94:01:85:74:c5:79:d0:98:d7:e5:e3: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:64:4B:D7:F1:08:5B:2C:64:44:96:94:A8:17:E8:EC:90:A1:8E:F0 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:45:0e:eb:59:10:72:cf:88:52:eb:b2:2b:ed:b9:6f:c2:18: 2c:c8:eb:40:52:97:5e:65:e6:94:d8:eb:59:8a:2b:48:e2:1f: 90:7f:ce:ac:70:d6:f6:e5:b3:6b:6b:71:93:ca:34:c4:90:e7: 27:40:5b:88:b7:33:7b:94:e7:bc:a0:62:d7:84:14:c6:28:78: 25:ae:18:d7:19:00:f9:86:be:3b:23:a6:12:3b:42:e6:ee:5f: 69:29:b2:a3:ac:64:f5:de:95:6d:fa:4b:3d:7f:00:ef:12:0c: fa:42:09:43:0f:49:14:2e:7e:fd:3c:9e:73:04:d5:de:87:6f: 46:18:98:6d:2c:5b:07:d7:04:aa:06:34:47:63:61:ea:f1:ce: 75:94:8d:c7:58:bf:cf:78:42:45:42:44:06:3f:0b:57:47:19: 6c:b6:bc:b4:e8:a2:cf:ed:07:e1:89:46:4f:0a:44:16:87:b2: 57:d0:2d:82:2e:43:de:91:67:30:26:05:ae:cf:28:23:8b:ae: 4f:d5:09:d0:12:70:d8:1b:8c:8f:d3:d1:21:6e:6d:77:06:25: 22:ab:8a:95:9f:4e:a7:6a:9f:37:e8:69:e4:20:a6:db:0c:16: ea:f6:45:06:e0:e8:f6:84:38:d4:71:80:3c:6f:8b:5c:9d:0b: 24:c2:d4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjUwNjI5MDIwOTA0WhcNMjUwNzA2MDIwOTA0WjAYMRYwFAYD VQQDEw02ODYwYTA0MS00YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0QoG5YX46pdbAi+9+jpgqD6egInoKVt1K6DABrHD5wXRE2cNPfzy7/1ffiR I5QMCJRalJcf70R1ysNuWan7+7ZEtQUFgSeME7vQZ7ETjNkUkxifDbFxYyVK/9uq 1UGvveHU0GzCw4TPxWuNLk03uwmkGyJpMR7BuQ3CVIQoyYRD8/rd22M3uD2t3TkO /b1VUHfNYdgkSws4PI46fNzPdn/hEairPb1ka5DMis12T9ibMEPSwOfv/MIWEIZV +22pvAFs8N2DP+PbVfzag4iDsEc4OAEnCLphkvDRRXFqWf9QwJj6KzLK78zQnWOC lCR3wfBSlAGFdMV50JjX5eN4iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5kS9fx CFssZESWlKgX6OyQoY7wMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwRQ7rWRByz4hS67Ir7blvwhgsyOtAUpdeZeaU2OtZiitI4h+Qf86s cNb25bNra3GTyjTEkOcnQFuItzN7lOe8oGLXhBTGKHglrhjXGQD5hr47I6YSO0Lm 7l9pKbKjrGT13pVt+ks9fwDvEgz6QglDD0kULn79PJ5zBNXeh29GGJhtLFsH1wSq BjRHY2Hq8c51lI3HWL/PeEJFQkQGPwtXRxlstry06KLP7QfhiUZPCkQWh7JX0C2C LkPekWcwJgWuzygji65P1QnQEnDYG4yP09Ehbm13BiUiq4qVn06nap836GnkIKbb DBbq9kUG4Oj2hDjUcYA8b4tcnQskwtQa -----END CERTIFICATE-----Generated at Mon Jun 30 00:24:48 2025 by rpki-client