$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: fJ79YjYUa39qhXR46KSsj/BpzSm/8jjnf6woLK0hBnY= Subject key identifier: 30:1B:C6:44:AE:D9:E1:41:73:05:A5:66:A1:E0:A8:E3:DF:78:D5:E5 Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 2372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 2361 Signing time: Fri 18 Jul 2025 15:55:56 +0000 Manifest this update: Fri 18 Jul 2025 15:55:55 +0000 Manifest next update: Fri 25 Jul 2025 15:55:55 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: M5wW9T4EhcZiQFVcBbHJV+7GPaK6eiIvH7wdHL8qJ6I=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9074 (0x2372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Jul 18 15:55:55 2025 GMT Not After : Jul 25 15:55:55 2025 GMT Subject: CN=687a6e8b-fbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:5e:df:a5:e9:4f:8e:ea:6f:21:41:5c:ae: dd:8e:70:0f:6e:5d:ce:28:17:ea:b8:1c:d0:6a:59: c2:99:21:1f:81:8a:9c:8b:1c:15:6b:cf:6a:0c:d7: 42:93:d7:db:97:c3:74:88:67:c6:c1:3e:37:5a:b3: ec:04:fa:e3:eb:73:67:73:a2:52:2a:92:48:e9:66: 2d:7c:7e:e6:5e:6d:9c:19:6b:47:41:df:14:52:af: 85:82:98:5f:5a:8e:00:95:eb:5d:e1:98:c9:da:2d: 16:e2:40:b4:aa:a5:cb:b3:a4:71:1e:07:65:a9:79: 75:56:29:1a:12:9c:39:ba:b3:35:24:02:0f:e0:15: c2:38:c2:4c:d2:12:ce:b2:c0:3a:e9:30:1e:e5:b6: 43:35:3a:e6:14:5a:dd:3f:83:f0:55:a4:71:c6:93: b1:db:0b:06:41:7b:52:3e:a9:d9:4d:d2:dd:48:88: f1:e2:f4:e0:7b:33:f2:e9:4a:33:79:9c:59:b6:4e: 81:13:ab:5c:d0:b8:1a:fd:f9:9c:50:9e:10:46:fe: 60:88:b6:3c:c7:fb:56:1d:65:80:9a:51:40:9c:19: 31:91:11:10:07:0e:95:6a:0b:65:68:25:26:3b:a1: c8:aa:3c:2d:d7:35:17:81:af:fc:a0:e3:84:ee:34: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1B:C6:44:AE:D9:E1:41:73:05:A5:66:A1:E0:A8:E3:DF:78:D5:E5 X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:84:c6:31:92:8d:00:7a:87:f7:c4:de:ed:63:60:37:5c:89: ec:18:ca:09:b4:b0:c2:89:24:67:85:d4:a5:a8:e5:a6:ea:5b: c0:10:27:08:1c:fc:08:99:fb:7d:bb:a9:6d:fc:23:51:eb:0c: 00:bf:59:57:85:ce:2e:3c:5d:b3:a7:b0:c1:0d:09:5a:0b:1c: bd:fe:7e:3a:56:3a:4c:4f:23:79:eb:d8:30:ec:0c:17:5f:02: f2:47:39:05:d7:87:97:74:8b:7a:c8:f8:18:ec:f7:9f:69:e2: 7f:8d:05:bd:ce:83:44:54:f5:2d:1b:4b:b1:1a:24:97:d1:5c: 9b:7d:1d:92:c4:47:d8:10:e3:0a:6a:b9:d0:91:37:77:8a:ed: 8f:bb:d7:f0:ba:d2:b6:20:ce:61:48:ba:09:c7:dd:2d:6f:3b: 55:ef:f1:60:a3:29:ec:fc:c7:8d:5b:e5:7a:a5:b0:65:da:17: dd:72:9a:bd:b3:4a:50:b4:ff:7c:f2:65:9c:e0:c2:7f:72:69: b4:f6:5c:6a:11:41:6d:5f:2d:ba:64:7f:ed:08:42:10:22:25: 38:b9:53:33:f9:b8:55:87:58:d2:94:b7:cc:40:78:d9:ae:37: f5:ea:58:cc:06:57:22:05:5e:19:2e:48:cf:06:aa:d3:2b:51: ec:00:34:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUwNzE4MTU1NTU1WhcNMjUwNzI1MTU1NTU1WjAYMRYwFAYD VQQDEw02ODdhNmU4Yi1mYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3le36XpT47qbyFBXK7djnAPbl3OKBfquBzQalnCmSEfgYqcixwVa89qDNdC k9fbl8N0iGfGwT43WrPsBPrj63Nnc6JSKpJI6WYtfH7mXm2cGWtHQd8UUq+Fgphf Wo4Aletd4ZjJ2i0W4kC0qqXLs6RxHgdlqXl1VikaEpw5urM1JAIP4BXCOMJM0hLO ssA66TAe5bZDNTrmFFrdP4PwVaRxxpOx2wsGQXtSPqnZTdLdSIjx4vTgezPy6Uoz eZxZtk6BE6tc0Lga/fmcUJ4QRv5giLY8x/tWHWWAmlFAnBkxkREQBw6VagtlaCUm O6HIqjwt1zUXga/8oOOE7jQApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAbxkSu 2eFBcwWlZqHgqOPfeNXlMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbhMYxko0Aeof3xN7tY2A3XInsGMoJtLDCiSRnhdSlqOWm6lvAECcI HPwImft9u6lt/CNR6wwAv1lXhc4uPF2zp7DBDQlaCxy9/n46VjpMTyN569gw7AwX XwLyRzkF14eXdIt6yPgY7PefaeJ/jQW9zoNEVPUtG0uxGiSX0VybfR2SxEfYEOMK arnQkTd3iu2Pu9fwutK2IM5hSLoJx90tbztV7/Fgoyns/MeNW+V6pbBl2hfdcpq9 s0pQtP988mWc4MJ/cmm09lxqEUFtXy26ZH/tCEIQIiU4uVMz+bhVh1jSlLfMQHjZ rjf16ljMBlciBV4ZLkjPBqrTK1HsADQT -----END CERTIFICATE-----Generated at Sun Jul 20 07:38:35 2025 by rpki-client