$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft File: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json) Hash identifier: cc/fCDs4XHYwlKXD5R/nAl431NSzxdu8fLfxkMefI50= Subject key identifier: 45:3A:0F:CA:24:FA:CA:C8:BC:40:AA:CD:B3:D2:86:19:F1:5E:1D:C1 Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 Certificate issuer: /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft Manifest number: 1162 Signing time: Sun 20 Jul 2025 19:53:13 +0000 Manifest this update: Sun 20 Jul 2025 19:53:12 +0000 Manifest next update: Sun 27 Jul 2025 19:53:12 +0000 Files and hashes: 1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: vCf5E9w6jn+A1m6aoAFdoC6YAJbv1/+xLa/YXfUQB4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Validity Not Before: Jul 20 19:53:12 2025 GMT Not After : Jul 27 19:53:12 2025 GMT Subject: CN=687d4928-b352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f1:82:e7:7a:41:55:6c:3d:4c:cb:4a:ed:ca: 7a:bb:73:7e:2c:3a:a5:44:3b:18:9e:2a:dd:24:99: e3:d3:2a:42:63:d0:f0:3c:07:00:67:49:42:59:7e: b6:83:63:54:7d:f2:2c:16:f2:f1:cc:4f:c0:b7:ad: eb:c7:4a:65:48:0e:8d:c7:f6:5e:e3:f8:db:4c:c6: 92:28:4e:bb:be:c4:66:09:2b:3d:cf:da:a4:51:db: 65:e0:1a:b6:7c:91:f5:94:11:a8:91:f9:a3:1d:33: f9:1a:53:9c:4d:77:fd:0f:bc:2d:68:c1:0d:33:57: 04:7b:34:5c:b4:12:7b:a2:38:8b:f5:80:9d:b6:1f: 66:46:9f:b4:3b:06:5f:28:62:85:84:36:34:06:5a: f3:4f:06:5d:df:52:b2:24:5e:23:22:da:2e:58:b0: 26:1a:9b:21:e2:3c:10:ab:b5:70:96:40:b2:c2:9a: ab:55:24:4a:e1:7a:55:81:a0:ca:6f:10:43:62:66: 05:ee:f7:81:87:92:28:c4:9a:58:5d:c9:a2:8f:b4: b2:ef:d5:16:ec:9e:dc:f2:c5:38:b3:5d:7c:a5:48: 15:0e:2d:fc:5d:69:af:d9:a2:26:ae:4b:14:7f:46: 5f:09:7e:02:d0:e8:77:fd:42:91:d4:dd:4e:37:45: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3A:0F:CA:24:FA:CA:C8:BC:40:AA:CD:B3:D2:86:19:F1:5E:1D:C1 X509v3 Authority Key Identifier: keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a7:25:51:09:2a:d8:42:f9:54:76:52:9f:2d:9f:f6:80:06: 7d:84:1b:15:eb:6d:d1:ca:29:4d:53:4e:5e:62:ae:cb:ad:19: f9:b3:71:60:3a:32:0a:84:8e:ae:f1:9d:95:9a:8c:b0:7c:f9: db:e5:41:a9:a0:4c:18:33:06:20:50:39:e7:be:60:df:82:48: 0e:ff:ab:b8:ae:94:92:04:10:04:2a:b1:3b:8e:3e:82:22:57: ac:78:51:74:37:2d:53:83:e3:de:53:7c:19:2e:49:a4:dd:c1: cd:b3:6a:ab:30:ba:ab:ec:98:10:d9:6d:71:31:8c:12:e7:91: 56:3a:d2:a5:4e:10:8e:13:5e:9e:b0:d1:51:23:f9:18:ab:f7: 76:61:67:7e:c2:fc:84:10:f6:8a:8a:3b:ed:17:15:41:d7:46: c9:12:42:4e:08:50:ff:70:76:a6:26:7e:83:08:5e:5d:50:fc: fb:84:3d:f4:d6:26:98:f0:ea:03:bc:2c:2f:77:43:62:a9:2a: e0:00:c4:14:3e:7e:f4:33:a6:34:a5:b2:7c:57:3c:0e:15:6e: 7a:42:ba:d9:ec:56:f6:e1:26:a6:af:9a:42:53:ee:bd:9e:cd: e7:eb:7b:c7:62:1a:96:fb:3a:a7:85:32:0c:d6:22:e5:d4:15: cf:21:aa:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDY2NzMwQkI5QTQwQjM1Q0ZFNTlCMTE4NUY2MjJEQkQw OTAwQzZEOTAwHhcNMjUwNzIwMTk1MzEyWhcNMjUwNzI3MTk1MzEyWjAYMRYwFAYD VQQDEw02ODdkNDkyOC1iMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PGC53pBVWw9TMtK7cp6u3N+LDqlRDsYnirdJJnj0ypCY9DwPAcAZ0lCWX62 g2NUffIsFvLxzE/At63rx0plSA6Nx/Ze4/jbTMaSKE67vsRmCSs9z9qkUdtl4Bq2 fJH1lBGokfmjHTP5GlOcTXf9D7wtaMENM1cEezRctBJ7ojiL9YCdth9mRp+0OwZf KGKFhDY0BlrzTwZd31KyJF4jItouWLAmGpsh4jwQq7VwlkCywpqrVSRK4XpVgaDK bxBDYmYF7veBh5IoxJpYXcmij7Sy79UW7J7c8sU4s118pUgVDi38XWmv2aImrksU f0ZfCX4C0Oh3/UKR1N1ON0ViUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU6D8ok +srIvECqzbPShhnxXh3BMB8GA1UdIwQYMBaAFGZzC7mkCzXP5ZsRhfYi29CQDG2Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5jX2xteEdGOWlMYjBKQU1i WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puTUx1YVFMTmNfbG14R0Y5aUxiMEpBTWJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5j X2xteEdGOWlMYjBKQU1iWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfpyVRCSrYQvlUdlKfLZ/2gAZ9hBsV623RyilNU05eYq7LrRn5s3Fg OjIKhI6u8Z2VmoywfPnb5UGpoEwYMwYgUDnnvmDfgkgO/6u4rpSSBBAEKrE7jj6C IleseFF0Ny1Tg+PeU3wZLkmk3cHNs2qrMLqr7JgQ2W1xMYwS55FWOtKlThCOE16e sNFRI/kYq/d2YWd+wvyEEPaKijvtFxVB10bJEkJOCFD/cHamJn6DCF5dUPz7hD30 1iaY8OoDvCwvd0NiqSrgAMQUPn70M6Y0pbJ8VzwOFW56QrrZ7Fb24Samr5pCU+69 ns3n63vHYhqW+zqnhTIM1iLl1BXPIaph -----END CERTIFICATE-----Generated at Mon Jul 21 05:42:46 2025 by rpki-client