$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: WNaQAfjshhZ8pOBP/WTs+KW7EuhbIOH9EHbe9zoDORg= Subject key identifier: 78:0F:FC:60:97:1D:E0:2C:5D:AD:6F:E5:F8:AE:D7:CD:F8:04:1B:E5 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 6A Signing time: Sun 29 Jun 2025 05:59:38 +0000 Manifest this update: Sun 29 Jun 2025 05:59:38 +0000 Manifest next update: Sun 06 Jul 2025 05:59:38 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: m//UiFiKZW7SBn/9CfdilciCkzfqTj3FW1YnAebbVNI=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Jun 29 05:59:38 2025 GMT Not After : Jul 6 05:59:38 2025 GMT Subject: CN=6860d64a-a7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:88:4e:8c:ab:55:39:dc:c5:a9:42:d3:52: 0d:16:e2:a7:15:60:03:e6:00:8b:83:c8:a7:5d:7a: 9d:76:22:dc:c8:52:9e:04:ce:fa:9c:0d:a8:f0:fa: 6b:bc:57:d3:b5:7c:1f:84:fa:b9:72:73:c7:9f:db: 7d:72:e7:d1:b5:06:bd:2e:c9:ff:c3:02:86:3a:3b: c1:38:9e:8a:47:07:d7:da:7d:d7:0c:97:b9:20:d0: 51:dc:9b:30:f7:8a:f4:97:a1:f1:84:8f:21:93:85: d4:17:4b:d5:a4:7b:e9:6e:f2:09:1e:22:e2:5d:f0: 8c:5f:4e:4b:b4:e1:a8:5b:8e:01:6b:86:8a:e8:6e: 74:1e:64:78:5d:a9:d5:d8:78:6c:47:b5:37:bd:9e: 97:a0:0f:2e:85:c6:b6:87:b7:d5:3e:c0:94:42:98: 55:8e:c7:72:22:ba:40:42:25:aa:96:01:f4:80:93: 34:55:0b:9a:e3:5a:2b:73:20:26:ee:3f:8e:ab:80: 3a:66:e3:a5:7a:6a:5d:43:82:6f:49:3e:85:85:a2: 94:ee:43:89:04:cd:af:c4:5e:5b:83:01:41:ec:89: 19:82:3f:05:a3:33:0d:59:50:a6:b4:6a:5a:5a:ae: 1a:3e:df:ab:b3:75:17:74:ad:e0:f4:f0:ba:91:e1: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0F:FC:60:97:1D:E0:2C:5D:AD:6F:E5:F8:AE:D7:CD:F8:04:1B:E5 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ff:52:33:d2:de:dd:36:07:a3:5e:3d:9e:76:c1:a4:38:c1: d5:a4:7c:63:ae:75:dd:4d:6f:4f:af:9a:96:fc:b2:00:fe:6b: 34:3a:5b:35:30:94:d0:f9:fe:52:2a:d6:c7:3a:dd:12:be:73: 1c:58:1c:a6:66:f5:b2:42:8d:ca:85:5b:b1:cc:58:32:fc:36: 01:9d:1e:3f:0d:07:9f:35:6d:1b:2e:af:ea:0f:ab:f0:48:1e: 51:46:73:56:c7:03:e4:4e:d6:71:d8:cd:e5:74:e6:6a:ec:26: c0:d2:10:97:73:05:cd:5a:88:de:97:4d:bf:d6:7d:2f:f2:39: db:9b:98:68:86:cb:38:69:02:de:80:20:fc:5a:30:d1:8a:16: ab:68:78:b7:ad:64:16:eb:e6:ea:1e:9d:56:29:93:c7:68:46: 67:12:ab:fc:b8:fc:c5:2e:f7:79:cb:18:20:60:24:ae:ca:11: ad:c8:91:95:39:f4:08:34:2f:c1:14:e0:c9:04:d2:4b:eb:11: 29:a5:71:26:8f:bc:45:a1:54:6a:cf:86:8b:ef:e0:b6:0b:1c: 18:9a:c4:67:d5:59:a1:eb:d2:32:84:45:aa:5f:ad:aa:56:04: 55:4a:75:74:55:40:30:06:90:c2:56:48:4a:1f:b9:4c:40:c4: cb:4e:ea:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNTA2MjkwNTU5MzhaFw0yNTA3MDYwNTU5MzhaMBgxFjAUBgNV BAMTDTY4NjBkNjRhLWE3YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAW4hOjKtVOdzFqULTUg0W4qcVYAPmAIuDyKddep12ItzIUp4EzvqcDajw+mu8 V9O1fB+E+rlyc8ef231y59G1Br0uyf/DAoY6O8E4nopHB9fafdcMl7kg0FHcmzD3 ivSXofGEjyGThdQXS9Wke+lu8gkeIuJd8IxfTku04ahbjgFrhorobnQeZHhdqdXY eGxHtTe9npegDy6FxraHt9U+wJRCmFWOx3IiukBCJaqWAfSAkzRVC5rjWitzICbu P46rgDpm46V6al1Dgm9JPoWFopTuQ4kEza/EXluDAUHsiRmCPwWjMw1ZUKa0alpa rho+36uzdRd0reD08LqR4W5vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeA/8YJcd 4CxdrW/l+K7XzfgEG+UwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3/UjPS3t02B6NePZ52waQ4wdWkfGOudd1Nb0+vmpb8sgD+azQ6WzUw lND5/lIq1sc63RK+cxxYHKZm9bJCjcqFW7HMWDL8NgGdHj8NB581bRsur+oPq/BI HlFGc1bHA+RO1nHYzeV05mrsJsDSEJdzBc1aiN6XTb/WfS/yOdubmGiGyzhpAt6A IPxaMNGKFqtoeLetZBbr5uoenVYpk8doRmcSq/y4/MUu93nLGCBgJK7KEa3IkZU5 9Ag0L8EU4MkE0kvrESmlcSaPvEWhVGrPhovv4LYLHBiaxGfVWaHr0jKERapfrapW BFVKdXRVQDAGkMJWSEofuUxAxMtO6ks= -----END CERTIFICATE-----Generated at Tue Jul 1 07:29:22 2025 by rpki-client