$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: kwCk9G165pmzQY2LsW2Rc1L4fw/kyGETgTger279CS8= Subject key identifier: 13:2C:33:DF:92:2D:62:16:45:D2:E3:21:72:7D:FC:F4:40:B9:23:03 Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 09DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 09D6 Signing time: Fri 18 Jul 2025 20:08:59 +0000 Manifest this update: Fri 18 Jul 2025 20:08:58 +0000 Manifest next update: Fri 25 Jul 2025 20:08:58 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: SAtNcg5G9XmWTShyEbxqiwcMdutlojN4LTyBM7qNju0=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: Jul 18 20:08:58 2025 GMT Not After : Jul 25 20:08:58 2025 GMT Subject: CN=687aa9db-b8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:6f:9b:45:78:ef:bc:58:b6:12:d4:12:5b: e0:1d:9a:7c:d1:40:70:df:2e:46:bd:1a:b9:88:8f: c3:95:b1:87:7c:22:f4:75:d5:13:a8:75:2d:f6:46: 03:6a:70:82:ad:5a:c8:56:eb:b0:04:3f:cf:ea:ba: 9d:8d:aa:6f:50:0a:e0:06:dc:c6:bf:62:37:66:49: 1d:c7:03:9c:e2:2c:15:0b:96:50:93:69:6a:2d:7c: 31:48:2b:ab:98:8a:a8:62:ac:c6:d7:0d:9f:16:d7: a5:90:c5:b6:e1:a7:0f:14:9a:a6:0e:3b:3a:ad:87: f8:d1:81:61:68:77:e1:d8:12:f9:7e:d8:e3:a7:21: 73:93:91:69:1f:a4:b6:c2:86:c8:b4:1f:27:e1:03: f4:f2:ab:61:c5:ef:d9:af:1b:85:2e:bd:bd:1d:1a: 9c:1c:07:6f:2d:b5:09:99:2e:c9:e3:4e:3a:fe:4a: a8:aa:80:97:74:59:fa:33:cc:75:66:85:0d:fa:59: 7b:b3:f4:0b:d1:d4:d8:10:11:a4:41:ba:44:a7:35: 5c:0d:b1:88:86:03:7e:61:94:5f:21:18:87:0a:fd: eb:39:ee:4a:89:9c:14:c4:bc:82:a8:1a:c6:7e:12: d0:3c:bb:37:2f:3b:95:25:61:df:f8:79:1f:5e:3a: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2C:33:DF:92:2D:62:16:45:D2:E3:21:72:7D:FC:F4:40:B9:23:03 X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:ac:c2:36:9a:40:c0:b9:c0:5e:fa:c2:54:54:41:7f:cd: 0e:c6:7f:e5:6f:ab:71:56:1d:83:f3:e6:14:5f:32:35:4b:6e: 14:07:e8:75:d4:65:a0:58:3b:49:1a:b9:41:4f:fe:4a:eb:d4: e9:d7:6a:db:9d:0f:cc:e3:ff:df:70:48:7a:c5:0e:28:41:3b: ba:24:b2:b7:c2:cf:5a:72:02:df:32:e2:18:b0:d6:55:48:4f: 1f:27:3e:b9:02:fb:87:1c:11:e9:0c:32:2c:07:79:cc:0c:cd: 02:04:34:99:bd:8c:c7:66:af:ad:db:51:5c:d0:2c:cd:f1:97: 4f:89:5f:e1:7e:d2:89:d4:3a:ca:17:52:55:76:d6:ab:e7:1a: 19:94:ef:a5:e6:7f:77:f9:a9:dd:97:26:7c:dd:48:36:b8:2f: 3e:a2:4d:f1:39:06:9b:9a:bb:bd:00:a5:67:72:6f:28:e7:a0: 7c:c4:24:94:49:bb:b9:e6:57:96:21:64:f2:c3:a1:e5:0c:4b: 82:ce:a3:c8:5d:60:ed:e8:4b:85:38:a7:1a:37:af:4e:ef:49: cb:2a:53:78:41:28:4c:73:ea:af:ec:20:a0:be:a5:d4:20:f0: 95:05:b0:cd:a3:f6:38:d4:24:4e:45:74:88:a9:dd:8b:5b:50: 30:c1:aa:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjUwNzE4MjAwODU4WhcNMjUwNzI1MjAwODU4WjAYMRYwFAYD VQQDEw02ODdhYTlkYi1iOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vlvm0V477xYthLUElvgHZp80UBw3y5GvRq5iI/DlbGHfCL0ddUTqHUt9kYD anCCrVrIVuuwBD/P6rqdjapvUArgBtzGv2I3ZkkdxwOc4iwVC5ZQk2lqLXwxSCur mIqoYqzG1w2fFtelkMW24acPFJqmDjs6rYf40YFhaHfh2BL5ftjjpyFzk5FpH6S2 wobItB8n4QP08qthxe/ZrxuFLr29HRqcHAdvLbUJmS7J4046/kqoqoCXdFn6M8x1 ZoUN+ll7s/QL0dTYEBGkQbpEpzVcDbGIhgN+YZRfIRiHCv3rOe5KiZwUxLyCqBrG fhLQPLs3LzuVJWHf+HkfXjpetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMsM9+S LWIWRdLjIXJ9/PRAuSMDMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2EqzCNppAwLnAXvrCVFRBf80Oxn/lb6txVh2D8+YUXzI1S24UB+h1 1GWgWDtJGrlBT/5K69Tp12rbnQ/M4//fcEh6xQ4oQTu6JLK3ws9acgLfMuIYsNZV SE8fJz65AvuHHBHpDDIsB3nMDM0CBDSZvYzHZq+t21Fc0CzN8ZdPiV/hftKJ1DrK F1JVdtar5xoZlO+l5n93+andlyZ83Ug2uC8+ok3xOQabmru9AKVncm8o56B8xCSU Sbu55leWIWTyw6HlDEuCzqPIXWDt6EuFOKcaN69O70nLKlN4QShMc+qv7CCgvqXU IPCVBbDNo/Y41CRORXSIqd2LW1Awwaoo -----END CERTIFICATE-----Generated at Sun Jul 20 07:48:29 2025 by rpki-client