$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: NJCMDPlNDJBguvy0t0FHuVQCSCdNW8s25IURrkrHkPk= Subject key identifier: 5A:9C:55:91:BC:B3:47:4F:D8:57:2F:64:7A:CA:1E:FF:B3:82:B6:9E Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 34 Signing time: Sat 19 Jul 2025 07:54:50 +0000 Manifest this update: Sat 19 Jul 2025 07:54:49 +0000 Manifest next update: Sat 26 Jul 2025 07:54:49 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: n0ytwFJHH+exYx8Et7yXFGAHKbsC/8ZoI3ghXFCkHdI=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Jul 19 07:54:49 2025 GMT Not After : Jul 26 07:54:49 2025 GMT Subject: CN=687b4f49-b486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f0:43:26:71:82:e1:83:fd:35:37:83:38:88: 0d:76:48:3b:3a:82:6a:34:52:90:49:bb:43:4c:a7: 37:40:e5:6a:ee:ea:e0:15:de:69:f8:35:f5:25:f1: 03:95:fe:d0:3a:88:e3:7a:1f:c3:07:9f:5b:f3:df: f1:38:89:b7:e2:ba:e9:0f:c2:0c:ab:08:c1:ce:57: f6:03:3d:a4:68:61:ba:20:67:df:e4:4c:17:d9:ad: 37:2b:4c:e0:23:c4:8b:c0:13:d7:0d:06:11:a1:40: 3c:0a:f7:96:40:4c:40:26:7c:a2:01:84:bb:93:32: 3b:7d:14:61:df:7e:07:5c:f8:a9:d2:12:ae:08:fa: 43:40:2a:b0:7f:e8:08:d5:ee:62:3e:68:31:ad:1b: 50:20:cb:3e:df:e7:d7:76:24:1e:91:4d:d2:20:6a: 94:39:e5:3d:46:34:42:10:7f:53:ad:75:95:09:76: a9:0d:4b:fa:ac:00:0e:4c:c0:8e:8b:70:f4:67:61: c0:67:e7:cf:f0:c8:72:67:1c:4b:6a:c0:c3:41:4a: 07:d5:bf:d1:48:ea:3a:0b:77:8e:77:64:0a:f5:82: 76:42:2e:9f:1b:9e:f6:65:6c:10:e2:65:40:d8:90: 46:8c:c8:c5:27:1e:aa:51:6f:12:46:56:cd:8f:65: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:55:91:BC:B3:47:4F:D8:57:2F:64:7A:CA:1E:FF:B3:82:B6:9E X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7c:57:eb:ba:38:aa:44:0e:38:50:83:1e:da:99:dd:6e:9d: 15:7d:6a:fb:93:ae:46:d4:b4:96:85:46:20:c1:46:8b:fa:81: ae:03:3d:a2:99:d7:87:21:c4:c2:b7:2e:47:84:2d:61:80:39: 20:95:23:b0:0a:b6:fc:de:74:8e:58:b7:dc:35:74:93:83:f1: 0c:92:8e:b8:93:99:75:04:24:47:10:47:60:00:fe:5f:93:aa: 3d:05:de:01:ff:bc:72:0c:a4:b5:72:d5:37:77:88:1e:25:d0: fc:6e:2d:f6:a8:dc:15:82:da:2d:1d:84:db:e3:08:47:ae:2e: e5:11:70:9f:c1:20:4d:02:e1:c2:d7:79:37:30:f9:b3:6f:d8: e8:d6:00:20:5c:2f:8f:9d:4e:60:c1:75:35:6c:4f:72:e6:e7: 0b:a2:58:d2:94:96:e9:f1:cd:91:d9:04:22:08:33:9e:2b:31: 0c:8c:68:86:ea:4f:67:4b:f0:de:ff:52:4d:e0:00:4d:c7:07: 2a:28:c3:2b:83:ce:d6:a5:f9:11:ef:fc:1f:f0:50:47:18:10: a5:84:29:3e:05:48:3a:d9:51:70:a7:15:ba:1f:4f:ff:b4:77: 92:14:7c:1e:93:ff:13:ec:82:b5:eb:e3:53:fb:46:3e:c6:26: bf:6b:11:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTA3MTkwNzU0NDlaFw0yNTA3MjYwNzU0NDlaMBgxFjAUBgNV BAMTDTY4N2I0ZjQ5LWI0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn8EMmcYLhg/01N4M4iA12SDs6gmo0UpBJu0NMpzdA5Wru6uAV3mn4NfUl8QOV /tA6iON6H8MHn1vz3/E4ibfiuukPwgyrCMHOV/YDPaRoYbogZ9/kTBfZrTcrTOAj xIvAE9cNBhGhQDwK95ZATEAmfKIBhLuTMjt9FGHffgdc+KnSEq4I+kNAKrB/6AjV 7mI+aDGtG1Agyz7f59d2JB6RTdIgapQ55T1GNEIQf1OtdZUJdqkNS/qsAA5MwI6L cPRnYcBn58/wyHJnHEtqwMNBSgfVv9FI6joLd453ZAr1gnZCLp8bnvZlbBDiZUDY kEaMyMUnHqpRbxJGVs2PZZenAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWpxVkbyz R0/YVy9kesoe/7OCtp4wHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH18V+u6OKpEDjhQgx7amd1unRV9avuTrkbUtJaFRiDBRov6ga4DPaKZ 14chxMK3LkeELWGAOSCVI7AKtvzedI5Yt9w1dJOD8QySjriTmXUEJEcQR2AA/l+T qj0F3gH/vHIMpLVy1Td3iB4l0PxuLfao3BWC2i0dhNvjCEeuLuURcJ/BIE0C4cLX eTcw+bNv2OjWACBcL4+dTmDBdTVsT3Lm5wuiWNKUlunxzZHZBCIIM54rMQyMaIbq T2dL8N7/Uk3gAE3HByoowyuDztal+RHv/B/wUEcYEKWEKT4FSDrZUXCnFbofT/+0 d5IUfB6T/xPsgrXr41P7Rj7GJr9rETg= -----END CERTIFICATE-----Generated at Sun Jul 20 18:24:35 2025 by rpki-client