$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: d7JnuiZt5KwYzCWIs4Yp5U0tYHGjT4Gfpxuq2utbWu8= Subject key identifier: A1:52:AD:13:B2:14:DD:18:63:69:49:25:F9:BF:6B:20:BD:F2:15:75 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 072E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06CE Signing time: Wed 02 Jul 2025 22:46:34 +0000 Manifest this update: Wed 02 Jul 2025 22:46:34 +0000 Manifest next update: Wed 09 Jul 2025 22:46:34 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: TpLpba+3+qP3zir/qoEMCrcVAlCLgtCjuAFE8mUxDr0=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Jul 2 22:46:34 2025 GMT Not After : Jul 9 22:46:34 2025 GMT Subject: CN=6865b6ca-3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f6:f5:89:a9:48:aa:38:e2:dd:64:ab:2b:d4: ae:b5:81:d7:f4:fd:cf:11:b7:4f:fc:11:e9:2a:14: eb:9f:41:19:2f:54:52:d8:86:d4:17:af:7b:d7:84: c7:16:dc:d2:c9:c3:65:be:67:9c:a1:f7:e1:87:48: f1:a0:19:eb:81:e4:74:b0:e8:53:8d:3a:df:cd:8e: 09:39:20:97:ce:22:6d:79:b8:e3:7e:23:9f:b2:53: 2f:d4:17:cf:0c:6f:ee:36:48:8e:fe:d7:66:2f:bf: 4d:16:75:c6:31:aa:38:0f:d4:3d:5f:26:7a:a1:d0: 1e:e6:32:71:25:89:11:fb:1b:17:cd:cb:f7:01:ec: ea:f6:e0:93:ec:be:a1:3c:02:42:20:c0:ab:f3:8b: a5:4a:d0:89:e5:3b:90:30:42:e7:42:74:48:4d:29: 8e:50:a4:a6:04:c8:8b:56:f8:32:51:4d:38:5e:88: 87:35:56:aa:70:db:11:63:39:91:55:d8:0f:0a:7c: d7:7f:c7:a6:4f:8f:c6:24:9d:b7:df:28:ba:48:00: cf:87:be:a2:77:a1:96:1f:2f:13:08:ad:74:30:08: c8:15:bd:0a:08:6b:8f:01:99:ab:09:e9:c4:dd:f6: cc:ff:09:5f:e0:32:ce:0d:c2:42:15:ce:dd:f7:42: 1b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:AD:13:B2:14:DD:18:63:69:49:25:F9:BF:6B:20:BD:F2:15:75 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:18:28:28:df:35:c9:05:d7:e7:e2:0d:ed:e9:b2:1c:1e:a9: b0:52:fe:f7:40:b8:23:39:d3:5e:4b:61:32:d9:0c:80:73:e6: 06:6c:e4:56:64:33:f2:81:3e:16:94:07:a1:c4:b3:1d:28:75: db:9e:2c:bf:51:d6:5b:25:16:41:a9:6a:e1:17:ff:49:3d:92: e4:84:07:3c:3f:a0:b5:69:95:8c:19:fe:3d:d4:da:2c:74:47: 7b:4c:8d:43:58:73:dd:ac:19:28:c7:ea:75:94:03:8c:f8:17: f8:d0:35:16:4d:ce:18:06:cd:87:99:e5:8b:37:c8:f5:34:e8: ed:ee:fe:de:f0:5c:f2:d5:b6:4e:ef:2a:f9:3b:6d:4c:7a:fe: e3:8a:10:50:0b:72:cd:3a:66:af:a2:77:ab:ba:ee:43:84:e9: aa:d8:c9:64:ee:54:06:b5:4c:01:7a:77:1c:9e:84:ff:b6:e4: 6a:8b:b9:4d:8e:4f:b9:d2:5c:d9:fc:c6:89:0c:e8:fd:8a:ec: af:aa:c3:f9:f8:6f:5b:a5:6f:b4:9b:c8:4b:8c:94:48:4a:f9: 8c:21:1d:4d:b2:e1:df:76:22:fd:5e:6a:7f:84:85:62:27:66: 84:cb:c8:84:47:8c:e6:61:c4:e6:89:d3:f1:f4:04:2c:ea:f9: 15:35:a9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwNzAyMjI0NjM0WhcNMjUwNzA5MjI0NjM0WjAYMRYwFAYD VQQDEw02ODY1YjZjYS0zYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/b1ialIqjji3WSrK9SutYHX9P3PEbdP/BHpKhTrn0EZL1RS2IbUF69714TH FtzSycNlvmecoffhh0jxoBnrgeR0sOhTjTrfzY4JOSCXziJtebjjfiOfslMv1BfP DG/uNkiO/tdmL79NFnXGMao4D9Q9XyZ6odAe5jJxJYkR+xsXzcv3Aezq9uCT7L6h PAJCIMCr84ulStCJ5TuQMELnQnRITSmOUKSmBMiLVvgyUU04XoiHNVaqcNsRYzmR VdgPCnzXf8emT4/GJJ233yi6SADPh76id6GWHy8TCK10MAjIFb0KCGuPAZmrCenE 3fbM/wlf4DLODcJCFc7d90Ib6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFSrROy FN0YY2lJJfm/ayC98hV1MB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvGCgo3zXJBdfn4g3t6bIcHqmwUv73QLgjOdNeS2Ey2QyAc+YGbORW ZDPygT4WlAehxLMdKHXbniy/UdZbJRZBqWrhF/9JPZLkhAc8P6C1aZWMGf491Nos dEd7TI1DWHPdrBkox+p1lAOM+Bf40DUWTc4YBs2HmeWLN8j1NOjt7v7e8Fzy1bZO 7yr5O21Mev7jihBQC3LNOmavoneruu5DhOmq2Mlk7lQGtUwBenccnoT/tuRqi7lN jk+50lzZ/MaJDOj9iuyvqsP5+G9bpW+0m8hLjJRISvmMIR1NsuHfdiL9Xmp/hIVi J2aEy8iER4zmYcTmidPx9AQs6vkVNakz -----END CERTIFICATE-----Generated at Thu Jul 3 06:31:24 2025 by rpki-client