$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft File: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json) Hash identifier: dcCWm/I0wFe1yEgq0DOBuP0VC3ZRwvqlR8R3bH9RjM8= Subject key identifier: 9C:FF:53:7F:EE:13:E4:1A:7C:0E:0C:33:22:D2:A1:5B:4A:DC:65:F2 Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4 Certificate issuer: /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4 Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft Manifest number: 05CF Signing time: Tue 22 Jul 2025 23:24:38 +0000 Manifest this update: Tue 22 Jul 2025 23:24:37 +0000 Manifest next update: Tue 29 Jul 2025 23:24:37 +0000 Files and hashes: 1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: aIgE/4D36Oe0/EScVsqp03R6Ox5n4KrTgpWzIkzVUkw=) 2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: JmgPCoqfxLnmCXZ9Kqg1cLPcucyGnFbjlpBzEMSmBKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4 Validity Not Before: Jul 22 23:24:37 2025 GMT Not After : Jul 29 23:24:37 2025 GMT Subject: CN=68801db5-1725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c4:73:97:60:68:3d:d5:b0:7c:6c:f2:4c:1d: 86:04:e0:41:f0:dd:1b:f7:b7:f3:d6:5f:ad:56:db: 34:47:67:01:b3:36:07:83:2e:49:0e:2c:ee:97:df: f0:19:d6:4f:93:4b:85:24:0e:3f:9c:e0:64:ee:5f: 85:68:d4:cb:35:53:e1:4a:c3:1a:c6:73:4e:6b:63: 4d:c0:a0:f4:44:d0:4c:81:14:6a:77:36:c8:63:03: 59:06:da:d6:7f:a1:7c:10:f5:75:45:aa:e5:46:a8: 0a:b3:0d:13:c0:c0:f0:6f:15:db:51:83:20:be:4a: 46:0c:99:c7:36:a1:f7:fe:1e:8b:c4:95:45:ad:e2: 5a:0e:32:6a:e9:4a:3b:68:bf:06:bc:92:d9:e9:62: 3a:88:37:fb:df:b0:58:16:98:e4:3c:d8:72:67:b2: 42:7b:12:ed:fe:83:99:6e:34:c1:30:0c:b9:ed:f0: 55:7b:29:99:c9:c1:2d:62:63:99:c4:8e:a1:39:a7: de:f6:6c:ed:21:7e:96:d8:69:61:a9:a6:dd:2c:04: 47:a3:50:a3:c0:03:24:c3:8b:04:09:7c:38:88:61: 94:1a:b7:22:9d:09:d7:aa:ed:7e:cd:50:f8:f5:ac: 2b:24:31:fd:af:48:10:43:dd:c5:de:ac:bb:0d:fc: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FF:53:7F:EE:13:E4:1A:7C:0E:0C:33:22:D2:A1:5B:4A:DC:65:F2 X509v3 Authority Key Identifier: keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:e0:ea:8d:0a:1b:a7:bc:f3:e3:9c:6d:dd:27:dc:b6:49: 37:a3:3c:60:7f:df:82:b7:8d:72:40:18:b4:99:9b:ed:07:07: 59:82:94:26:cf:99:15:d9:95:66:50:79:14:d6:21:90:8a:b5: 36:1f:43:1b:14:3c:24:23:f1:8b:a6:dc:c5:d9:6b:33:b2:00: e8:7f:5f:84:7d:a1:9c:bb:3f:b6:f6:90:c7:3c:db:cd:fb:7c: 76:5a:ec:5a:eb:b1:ec:5c:b0:a0:59:27:49:06:6d:fb:2b:fc: a1:11:cc:6b:69:de:83:61:ab:84:a9:12:a0:b4:b5:ce:95:a8: e6:f4:11:0a:cd:9a:d4:e6:b5:bb:98:e6:80:5f:bb:7b:7f:54: e8:42:da:2f:b5:3c:c1:a8:1f:ad:67:fa:0e:76:5c:b0:ed:b4: 7e:de:fd:d8:f6:fb:bc:0d:7e:97:1f:2c:6a:04:2a:22:6f:c7: 39:00:8f:0c:6e:f1:44:c9:2d:63:23:5c:24:a6:47:98:c4:49: cc:25:f0:0a:1b:a0:63:9e:bf:a8:ea:ac:46:b8:15:bb:5d:4c: d7:1e:4f:fb:68:85:da:dd:55:ad:fb:12:94:04:94:bd:31:9f: 07:27:d5:75:6a:31:3e:ab:08:2c:08:4a:03:04:9d:25:2c:81: 82:39:25:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxOUQxMTAvBgNVBAUTKDY2QjlEODRGNDMzNkE4OUQ4NEQxRTAyRTgyMEE3OTY4 NkUxRTUyQzQwHhcNMjUwNzIyMjMyNDM3WhcNMjUwNzI5MjMyNDM3WjAYMRYwFAYD VQQDEw02ODgwMWRiNS0xNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8Rzl2BoPdWwfGzyTB2GBOBB8N0b97fz1l+tVts0R2cBszYHgy5JDizul9/w GdZPk0uFJA4/nOBk7l+FaNTLNVPhSsMaxnNOa2NNwKD0RNBMgRRqdzbIYwNZBtrW f6F8EPV1RarlRqgKsw0TwMDwbxXbUYMgvkpGDJnHNqH3/h6LxJVFreJaDjJq6Uo7 aL8GvJLZ6WI6iDf737BYFpjkPNhyZ7JCexLt/oOZbjTBMAy57fBVeymZycEtYmOZ xI6hOafe9mztIX6W2GlhqabdLARHo1CjwAMkw4sECXw4iGGUGrcinQnXqu1+zVD4 9awrJDH9r0gQQ93F3qy7DfwRpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz/U3/u E+QafA4MMyLSoVtK3GXyMB8GA1UdIwQYMBaAFGa52E9DNqidhNHgLoIKeWhuHlLE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTE5RC9CODI4MDY2NEM3 NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFKMkUwZUF1Z2dwNWFHNGVV c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pybllUME0ycUoyRTBlQXVnZ3A1YUc0ZVVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTE5RC9CODI4MDY2NEM3NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFK MkUwZUF1Z2dwNWFHNGVVc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf7uDqjQobp7zz45xt3Sfctkk3ozxgf9+Ct41yQBi0mZvtBwdZgpQm z5kV2ZVmUHkU1iGQirU2H0MbFDwkI/GLptzF2WszsgDof1+EfaGcuz+29pDHPNvN +3x2Wuxa67HsXLCgWSdJBm37K/yhEcxrad6DYauEqRKgtLXOlajm9BEKzZrU5rW7 mOaAX7t7f1ToQtovtTzBqB+tZ/oOdlyw7bR+3v3Y9vu8DX6XHyxqBCoib8c5AI8M bvFEyS1jI1wkpkeYxEnMJfAKG6Bjnr+o6qxGuBW7XUzXHk/7aIXa3VWt+xKUBJS9 MZ8HJ9V1ajE+qwgsCEoDBJ0lLIGCOSWw -----END CERTIFICATE-----Generated at Wed Jul 23 02:28:38 2025 by rpki-client