$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json) Hash identifier: me1BAfECXh7F3rGwBJTqgB5AOiH6lZPLMus5slDGgQc= Subject key identifier: C9:DA:06:F4:DB:0E:67:4A:DE:34:C8:89:E0:EC:05:68:59:FB:AD:BA Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft Manifest number: 3D Signing time: Thu 03 Jul 2025 07:45:51 +0000 Manifest this update: Thu 03 Jul 2025 07:45:51 +0000 Manifest next update: Thu 10 Jul 2025 07:45:51 +0000 Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: UUw1XHD2TGp0ET3b4ceaUzXLqEJyimRSEhpFRFBNUdU=) 2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Validity Not Before: Jul 3 07:45:51 2025 GMT Not After : Jul 10 07:45:51 2025 GMT Subject: CN=6866352f-f666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:d6:4b:d6:6e:c7:fe:36:ff:1d:46:0d:27: 03:f4:8f:7f:42:0b:b5:19:e1:b0:3e:15:90:50:0a: b3:03:f5:2a:50:83:58:fc:5f:5e:56:3c:d2:3e:d2: 19:10:2c:51:0e:22:ca:b7:35:ac:d2:0f:b7:4d:51: 44:fd:3b:91:d1:3d:09:c9:dd:61:d6:c1:fc:28:5e: c9:71:ef:29:ea:4b:72:eb:13:80:09:7e:70:fe:90: ee:b8:f5:e6:c5:45:ed:57:f0:0b:87:1c:79:35:18: 95:69:bb:40:c6:56:7b:96:61:be:8e:75:dc:34:25: ae:22:be:4b:83:67:99:27:73:e4:ee:72:8f:8a:8b: 79:2a:94:43:24:5e:6c:a8:39:3e:71:32:a5:f9:a4: b6:ab:58:9f:c0:22:62:20:40:2a:c3:c1:44:eb:30: 32:54:12:2b:b8:15:50:f9:c3:53:5a:76:da:4d:98: 49:63:c2:6c:6b:b3:95:26:16:a0:20:23:3e:99:3f: 4e:9a:9a:7e:19:7d:0a:a5:ae:ee:bf:ff:20:4a:70: 92:9e:4e:86:01:0a:ee:f0:b4:4f:98:9a:f6:a8:68: b0:5a:0f:c5:42:77:a4:7f:0f:b7:cb:ef:9c:a4:9b: b4:dc:95:a4:fc:62:8b:96:f0:65:41:10:23:a9:90: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DA:06:F4:DB:0E:67:4A:DE:34:C8:89:E0:EC:05:68:59:FB:AD:BA X509v3 Authority Key Identifier: keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:dc:9e:20:af:be:07:a0:61:89:72:8f:8c:16:af:67:78:41: 59:9a:09:fa:6a:70:b2:ed:e2:17:43:2f:a9:c3:ce:33:6c:cc: fc:88:0a:21:79:67:1a:2a:e9:f2:b0:31:e4:44:5b:67:ae:9f: 56:17:f4:20:70:87:e9:ba:45:d0:c6:62:53:36:ce:1b:8a:a0: 9b:2c:b0:60:35:ea:c2:85:e7:5a:89:ab:50:8c:b5:3e:0c:a4: 17:c2:df:4d:5d:9b:af:c3:40:89:c5:e3:c1:a6:0c:5a:72:b4: 47:d7:38:73:ef:eb:eb:a6:96:08:df:3c:1d:ed:91:98:55:db: 56:c4:b8:9a:10:4b:3d:2b:e7:15:70:97:e5:56:02:d3:b4:f4: 57:7d:13:dc:56:bd:da:4c:6b:7e:66:05:ca:36:f9:d2:e4:34: 48:37:b2:4e:da:2f:29:e2:0b:35:bf:d1:ce:f9:36:c7:37:6e: 0b:0b:44:8b:48:a4:cf:df:b4:42:51:13:a8:c5:c8:8a:fa:02: 98:75:a2:36:d7:8b:71:4a:39:a7:c0:fc:40:01:d8:17:7a:43: 12:90:65:58:a7:b7:22:16:58:dd:dd:6b:47:a4:a5:60:3a:4b: 11:55:f4:6f:1e:2e:b1:58:2d:45:0b:93:ba:82:f5:72:3f:6f: 66:bf:e9:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz QTYzQzQ0OTAeFw0yNTA3MDMwNzQ1NTFaFw0yNTA3MTAwNzQ1NTFaMBgxFjAUBgNV BAMTDTY4NjYzNTJmLWY2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi/dZL1m7H/jb/HUYNJwP0j39CC7UZ4bA+FZBQCrMD9SpQg1j8X15WPNI+0hkQ LFEOIsq3NazSD7dNUUT9O5HRPQnJ3WHWwfwoXslx7ynqS3LrE4AJfnD+kO649ebF Re1X8AuHHHk1GJVpu0DGVnuWYb6Oddw0Ja4ivkuDZ5knc+Tuco+Ki3kqlEMkXmyo OT5xMqX5pLarWJ/AImIgQCrDwUTrMDJUEiu4FVD5w1NadtpNmEljwmxrs5UmFqAg Iz6ZP06amn4ZfQqlru6//yBKcJKeToYBCu7wtE+YmvaoaLBaD8VCd6R/D7fL75yk m7TclaT8YouW8GVBECOpkOnpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUydoG9NsO Z0reNMiJ4OwFaFn7rbowHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2 NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4 VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJXcniCvvgegYYlyj4wWr2d4QVmaCfpqcLLt4hdDL6nDzjNszPyICiF5 Zxoq6fKwMeREW2eun1YX9CBwh+m6RdDGYlM2zhuKoJsssGA16sKF51qJq1CMtT4M pBfC301dm6/DQInF48GmDFpytEfXOHPv6+umlgjfPB3tkZhV21bEuJoQSz0r5xVw l+VWAtO09Fd9E9xWvdpMa35mBco2+dLkNEg3sk7aLyniCzW/0c75Nsc3bgsLRItI pM/ftEJRE6jFyIr6Aph1ojbXi3FKOafA/EAB2Bd6QxKQZVintyIWWN3da0ekpWA6 SxFV9G8eLrFYLUULk7qC9XI/b2a/6f0= -----END CERTIFICATE-----Generated at Fri Jul 4 18:55:21 2025 by rpki-client