$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft File: zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json) Hash identifier: 8dL0dNz7T4uGTOmYWs8xE3eZMQv1V3+cM+DVh/bs6JY= Subject key identifier: F8:A1:08:F5:47:9F:48:9C:DF:95:E5:84:EB:BA:FD:00:D1:B6:58:7B Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft Manifest number: 0117 Signing time: Thu 03 Jul 2025 05:00:54 +0000 Manifest this update: Thu 03 Jul 2025 05:00:53 +0000 Manifest next update: Thu 10 Jul 2025 05:00:53 +0000 Files and hashes: 1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: DEKF9Vgbm2nGUMxEN6vTTbtyYh27a1sYLenCiTj05oI=) 2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: ewevHTVGmqHpvpOV2d+aqrkd9ftzXTkReJQtB5PG940=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBA0C, serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Validity Not Before: Jul 3 05:00:53 2025 GMT Not After : Jul 10 05:00:53 2025 GMT Subject: CN=68660e86-034c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:0d:9c:04:a6:27:bf:c4:19:14:bb:4c:a5:e7: f4:be:4e:49:ab:e2:bc:3a:cf:b4:a6:44:8e:64:bc: ea:3b:86:ee:ee:f1:77:7b:1a:1d:36:6c:68:96:7d: 61:e5:63:fa:99:01:6c:2d:fe:42:62:ae:87:9b:99: ec:8b:6d:b4:48:53:5d:cc:18:8d:52:67:be:3f:2a: 1d:71:55:32:44:bb:d5:f0:cb:d5:24:f2:3d:e9:81: 9e:c2:2e:b0:09:4d:59:3a:b8:3d:bd:86:ad:f8:d1: 6d:7f:c9:ba:44:91:71:49:c3:a3:c8:ea:9f:fc:5a: 4c:78:4e:64:b6:ef:7c:72:09:99:57:eb:0b:50:75: 9c:a4:15:77:1b:20:a1:19:9a:25:0e:68:c6:49:ea: eb:41:1a:24:17:c2:9a:97:4d:6a:d7:03:ae:f8:00: 22:9f:6d:40:ac:c5:ef:13:4d:bb:12:ad:8a:ea:47: 30:0c:60:94:10:78:67:94:fb:f5:ef:8d:17:34:65: 55:42:d3:2e:a1:60:90:20:48:14:a8:44:89:25:ca: c6:44:04:43:8d:e7:0b:be:b6:f6:75:65:e2:75:e5: cd:94:f6:9d:93:de:1a:c0:e5:a4:d1:9b:14:2a:dc: 0d:86:c5:50:7b:03:93:2e:69:ca:d2:1d:e4:ce:e5: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A1:08:F5:47:9F:48:9C:DF:95:E5:84:EB:BA:FD:00:D1:B6:58:7B X509v3 Authority Key Identifier: keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:bf:62:d7:60:07:34:91:9d:3f:55:0b:8f:06:bc:f3:64:58: 7c:0b:8b:b3:5d:99:b7:2a:fe:ba:c3:5d:f2:52:45:cb:b6:36: dd:c0:c9:c9:32:dc:06:2d:8b:52:d1:2c:9d:3f:27:59:14:bf: e7:a2:90:be:73:44:1f:85:b2:e2:5c:b3:33:6d:ae:30:1c:2f: bd:cf:ca:ca:f7:d7:48:57:5c:87:74:e5:e8:11:00:9d:11:14: 37:d2:b7:36:53:ab:61:fa:7a:c1:1a:ac:54:80:e0:75:8d:93: 67:d8:4b:f3:82:7b:8b:9d:3a:56:d4:9e:b7:e5:aa:8e:6f:74: 3d:d1:e2:16:f1:d5:27:b4:28:a9:37:2a:b1:46:d6:6b:60:d7: 69:8e:fc:75:78:24:28:e0:c4:b3:47:72:14:1f:83:db:8d:11: 05:86:ad:0e:ed:2d:40:b7:b8:f3:90:7d:6c:1d:a5:5e:83:b8: 03:e7:02:cb:d5:f1:05:05:13:46:71:4c:51:0f:f4:0a:53:c5: d2:c2:8b:0c:ea:9a:8d:95:4d:65:39:bd:a0:b4:fa:40:3f:a9: 6a:67:5d:b0:c1:6d:08:66:62:f0:8f:bc:d4:55:88:ee:b2:69: 8e:59:e4:b6:47:53:09:60:04:63:23:97:a1:e2:a0:44:ba:3e: 9b:7d:8f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJBMEMxMTAvBgNVBAUTKENENUNENTkwOTEzRTRGODlBRjNEMUNBNkUyOUZBQjND MDY3RDIxNEUwHhcNMjUwNzAzMDUwMDUzWhcNMjUwNzEwMDUwMDUzWjAYMRYwFAYD VQQDEw02ODY2MGU4Ni0wMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/g2cBKYnv8QZFLtMpef0vk5Jq+K8Os+0pkSOZLzqO4bu7vF3exodNmxoln1h 5WP6mQFsLf5CYq6Hm5nsi220SFNdzBiNUme+PyodcVUyRLvV8MvVJPI96YGewi6w CU1ZOrg9vYat+NFtf8m6RJFxScOjyOqf/FpMeE5ktu98cgmZV+sLUHWcpBV3GyCh GZolDmjGSerrQRokF8Kal01q1wOu+AAin21ArMXvE027Eq2K6kcwDGCUEHhnlPv1 740XNGVVQtMuoWCQIEgUqESJJcrGRARDjecLvrb2dWXideXNlPadk94awOWk0ZsU KtwNhsVQewOTLmnK0h3kzuVzCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPihCPVH n0ic35XlhOu6/QDRtlh7MB8GA1UdIwQYMBaAFM1c1ZCRPk+Jrz0cpuKfqzwGfSFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkEwQy80MTUzMUIwQ0FF Q0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0bXZQUnltNHAtclBBWjlJ VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWelZrSkUtVDRtdlBSeW00cC1yUEFaOUlVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkEwQy80MTUzMUIwQ0FFQ0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0 bXZQUnltNHAtclBBWjlJVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXv2LXYAc0kZ0/VQuPBrzzZFh8C4uzXZm3Kv66w13yUkXLtjbdwMnJ MtwGLYtS0SydPydZFL/nopC+c0QfhbLiXLMzba4wHC+9z8rK99dIV1yHdOXoEQCd ERQ30rc2U6th+nrBGqxUgOB1jZNn2EvzgnuLnTpW1J635aqOb3Q90eIW8dUntCip NyqxRtZrYNdpjvx1eCQo4MSzR3IUH4PbjREFhq0O7S1At7jzkH1sHaVeg7gD5wLL 1fEFBRNGcUxRD/QKU8XSwosM6pqNlU1lOb2gtPpAP6lqZ12wwW0IZmLwj7zUVYju smmOWeS2R1MJYARjI5eh4qBEuj6bfY8T -----END CERTIFICATE-----Generated at Sat Jul 5 01:54:24 2025 by rpki-client