$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: 5xLlV3OnTkHsrNL151eAtVK/8jRTT39b+GiHM0n0Y5I= Subject key identifier: 16:FF:8B:14:18:14:A5:C4:4A:D1:EC:B4:7A:BA:78:31:56:BD:F0:F3 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 115A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 113B Signing time: Wed 02 Jul 2025 17:27:12 +0000 Manifest this update: Wed 02 Jul 2025 17:27:11 +0000 Manifest next update: Wed 09 Jul 2025 17:27:11 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: GJOKUGhXqGwzbUdykNv72gZyHLkBTkD+HF17TWilIac=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: LI5814/1mo8RhGHDIyDmTnyAaT8jPK8eiZW8nnVoECM=) 3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: KE984DbFRTO0XDJnJvkUh9nTQI9OdADddfHh/b8sXns=) 4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: tG0xAoHX5Jrg4VXIV0PMgN27hGtGNiwPzNpPEMcc5ZU=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: NlRxG3SgenSihBb1Uz1mdp6In7PIY3SWzoat7OXr7O8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4442 (0x115a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Jul 2 17:27:11 2025 GMT Not After : Jul 9 17:27:11 2025 GMT Subject: CN=68656bef-a1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cb:3a:83:b3:df:b5:97:fe:12:8b:9c:01:37: 53:e6:66:62:77:3e:dc:d0:49:da:d8:c4:0e:16:53: 21:ba:e3:f8:6a:5a:d7:61:ef:25:53:9f:de:4a:37: 82:d6:f1:72:3c:7a:ba:59:dd:79:5e:29:31:5c:47: 2c:26:3c:07:53:98:77:4d:9a:26:01:c4:d2:a9:75: 63:7a:56:d3:90:fb:a3:a7:7f:65:12:13:75:30:e5: 2d:38:ee:38:63:06:e3:e4:8a:22:35:93:c0:14:d9: fc:8c:33:2c:6b:9b:f3:42:ba:14:05:b2:22:6e:a6: 70:24:7e:11:6b:29:54:75:30:5b:ad:d5:a7:9d:c5: cd:ca:53:9b:3a:b5:e4:41:64:71:aa:dc:46:6d:ec: a7:ec:0c:e8:a1:81:e8:54:91:98:58:54:83:02:2a: 3a:8f:21:ad:12:56:1d:c4:f2:4f:56:6b:1b:49:5a: 37:78:05:c0:de:24:0f:bb:bb:b6:36:87:a5:93:5b: d9:a4:16:1b:69:58:f1:2f:60:12:c4:d2:2a:e5:aa: 08:1c:3e:a0:69:af:6b:06:2b:f1:97:04:dd:4c:50: a7:31:23:f4:f1:95:4e:4c:d7:b7:08:1a:75:8a:7b: c5:da:5a:7a:f8:d1:5c:29:8b:14:9e:8b:d4:c9:3e: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:8B:14:18:14:A5:C4:4A:D1:EC:B4:7A:BA:78:31:56:BD:F0:F3 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:56:fb:6a:b3:0b:50:3c:86:c9:7c:10:44:b5:da:6f:9c:97: 89:71:b3:f9:51:94:78:a0:31:6d:8b:2d:77:6c:06:db:c8:29: e8:61:c6:a3:7d:91:16:43:96:f4:32:75:ce:97:2b:3f:41:ec: 27:38:a8:b2:56:17:a0:76:e7:55:64:bc:ea:a9:e2:ec:26:86: 42:49:00:5c:a6:c6:13:64:ca:cf:91:e9:f5:f2:6f:19:dc:62: 20:14:0e:6e:14:c3:ee:ae:84:20:7a:e6:d3:b6:3b:c6:0f:19: 7f:0b:d4:16:56:e3:20:9a:28:fb:a6:b6:8a:49:36:2b:bf:a9: ef:75:0c:e8:52:be:f4:04:17:f9:4d:74:c7:11:95:2d:cf:66: 09:6a:21:73:15:41:3b:ac:bd:c7:4a:6c:bf:23:df:1b:ae:eb: a5:79:b0:8c:34:9a:97:76:55:8e:cd:78:cc:47:88:9d:0b:7e: 7a:e3:c4:14:46:a8:9e:2f:9b:8e:2d:7c:c3:12:7e:21:36:29: 6a:f6:3a:9f:12:75:50:86:a7:0c:13:ec:3a:eb:5d:8f:f6:fd: f5:c5:75:da:84:a5:fb:b6:7c:a8:9b:36:a7:a9:7e:bc:43:e5: c5:d8:ef:ff:bb:99:26:22:44:18:8b:fd:cd:7b:1f:88:ff:bb: c0:84:17:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUwNzAyMTcyNzExWhcNMjUwNzA5MTcyNzExWjAYMRYwFAYD VQQDEw02ODY1NmJlZi1hMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Ms6g7PftZf+EoucATdT5mZidz7c0Ena2MQOFlMhuuP4alrXYe8lU5/eSjeC 1vFyPHq6Wd15XikxXEcsJjwHU5h3TZomAcTSqXVjelbTkPujp39lEhN1MOUtOO44 Ywbj5IoiNZPAFNn8jDMsa5vzQroUBbIibqZwJH4RaylUdTBbrdWnncXNylObOrXk QWRxqtxGbeyn7AzooYHoVJGYWFSDAio6jyGtElYdxPJPVmsbSVo3eAXA3iQPu7u2 Noelk1vZpBYbaVjxL2ASxNIq5aoIHD6gaa9rBivxlwTdTFCnMSP08ZVOTNe3CBp1 invF2lp6+NFcKYsUnovUyT6EzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb/ixQY FKXEStHstHq6eDFWvfDzMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLVvtqswtQPIbJfBBEtdpvnJeJcbP5UZR4oDFtiy13bAbbyCnoYcaj fZEWQ5b0MnXOlys/QewnOKiyVhegdudVZLzqqeLsJoZCSQBcpsYTZMrPken18m8Z 3GIgFA5uFMPuroQgeubTtjvGDxl/C9QWVuMgmij7praKSTYrv6nvdQzoUr70BBf5 TXTHEZUtz2YJaiFzFUE7rL3HSmy/I98bruulebCMNJqXdlWOzXjMR4idC35648QU RqieL5uOLXzDEn4hNilq9jqfEnVQhqcME+w6612P9v31xXXahKX7tnyomzanqX68 Q+XF2O//u5kmIkQYi/3Nex+I/7vAhBf5 -----END CERTIFICATE-----Generated at Thu Jul 3 19:47:08 2025 by rpki-client