$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft File: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json) Hash identifier: hhvS3FACgKIi3TGvZDEuLFJhB6p4TASceS6dYuN7wCY= Subject key identifier: 14:E5:85:09:48:26:47:CC:5E:A8:2C:0E:65:FB:5E:47:91:AE:1A:55 Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 Certificate issuer: /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft Manifest number: 07A6 Signing time: Fri 18 Jul 2025 21:34:53 +0000 Manifest this update: Fri 18 Jul 2025 21:34:52 +0000 Manifest next update: Fri 25 Jul 2025 21:34:52 +0000 Files and hashes: 1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: ceokQRaGl+gOC12/Y/S38ZYZJayfs4gHIQoEO62bPQ4=) 2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: bCzW+BaRUSMEs6ksafkZ0M05EIAyYKkAVk7wGw2XL8U=) 3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: hlQlo3zj4oD4t9qHVL26IJYGsUxTLxyLxxcgSQsOSFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Validity Not Before: Jul 18 21:34:52 2025 GMT Not After : Jul 25 21:34:52 2025 GMT Subject: CN=687abdfd-8e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:fc:25:fd:ad:7c:a6:82:01:3b:00:26:93: b9:19:68:fa:e0:72:f9:af:b0:2a:3b:c4:57:ff:62: 4d:e1:6a:ec:b0:39:5a:2e:ed:cf:ed:b0:18:60:68: 02:63:33:b4:c3:c3:6b:34:95:31:32:ad:28:19:5b: e3:11:48:fc:c1:bc:e2:5f:98:17:bb:bb:4b:af:21: 11:7e:d5:c2:74:51:41:28:23:c5:f6:e9:3c:ec:b0: 47:e9:08:bd:29:fa:e0:d5:44:ca:04:b5:2f:fb:d9: 84:16:65:6a:2a:f0:4e:9e:7d:1b:0a:07:c0:9b:73: c7:c7:43:38:89:24:4c:5c:b6:cb:aa:23:2f:b2:c3: 13:86:bc:99:02:3e:bb:f2:d7:a7:15:43:fc:df:00: e1:04:0b:d1:91:66:86:2e:cc:68:89:46:c0:0a:7e: 48:da:74:6f:dc:eb:68:88:76:2b:32:1e:f9:42:2b: 68:9a:b5:a7:54:93:35:70:89:dc:a2:9c:19:96:fe: a4:94:68:1c:a5:51:69:c1:20:9f:71:0f:03:c3:8b: 8d:ca:a0:34:6e:bf:09:35:fd:0d:da:da:10:39:de: ca:43:6e:22:af:a3:b8:a1:fa:f0:bf:99:b8:de:d1: f2:82:55:f9:e6:36:32:c1:41:8d:34:50:f9:f8:15: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E5:85:09:48:26:47:CC:5E:A8:2C:0E:65:FB:5E:47:91:AE:1A:55 X509v3 Authority Key Identifier: keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:86:01:09:d6:e0:c5:e4:b9:e9:01:4f:21:61:1c:7b:f9:37: df:81:ee:70:58:ea:fa:92:f3:75:6e:e4:71:30:70:38:42:85: 8b:06:65:04:56:04:ad:18:aa:31:e6:06:a1:3b:9f:89:dd:0d: b7:7b:41:67:37:08:60:cf:ca:cb:79:02:27:0d:62:af:7f:14: 10:2b:95:71:26:07:17:8d:f8:43:03:cc:c4:bc:a5:19:a1:59: 9d:87:86:5f:c1:5e:61:07:38:04:4a:fa:c1:68:2e:0b:ba:42: c7:f2:27:e5:1e:43:77:00:07:fd:f6:02:cd:c7:26:d6:47:c6: d5:2a:f4:86:be:34:17:c8:41:c6:57:a6:b9:91:7c:a7:f5:78: ea:da:f6:29:73:ac:2a:91:95:4d:2a:b1:6f:2a:0d:72:cc:8e: 36:6b:f6:1d:46:36:95:66:0b:b2:d9:0d:91:7f:d9:22:fb:00: 3a:95:f8:fb:6d:cb:c3:38:30:79:11:13:5d:a5:33:07:5d:5a: c8:63:ba:b6:99:f7:15:48:13:01:7d:8b:f5:57:f9:19:d2:ae: 53:93:47:e0:d2:5a:9c:d0:3b:52:b3:97:b3:bf:c5:a9:8c:ee: 11:da:47:75:f9:97:ae:87:e2:d3:86:3d:ba:5e:c8:0d:2e:0d: f3:bc:35:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEOTYxMTAvBgNVBAUTKENEOEJCRTcwNkNDRDlCNTUzMkNGM0VCMUQ1RkJCRDdE M0UzRUJFQTQwHhcNMjUwNzE4MjEzNDUyWhcNMjUwNzI1MjEzNDUyWjAYMRYwFAYD VQQDEw02ODdhYmRmZC04ZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaL8Jf2tfKaCATsAJpO5GWj64HL5r7AqO8RX/2JN4WrssDlaLu3P7bAYYGgC YzO0w8NrNJUxMq0oGVvjEUj8wbziX5gXu7tLryERftXCdFFBKCPF9uk87LBH6Qi9 Kfrg1UTKBLUv+9mEFmVqKvBOnn0bCgfAm3PHx0M4iSRMXLbLqiMvssMThryZAj67 8tenFUP83wDhBAvRkWaGLsxoiUbACn5I2nRv3OtoiHYrMh75QitomrWnVJM1cInc opwZlv6klGgcpVFpwSCfcQ8Dw4uNyqA0br8JNf0N2toQOd7KQ24ir6O4ofrwv5m4 3tHyglX55jYywUGNNFD5+BVdAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTlhQlI JkfMXqgsDmX7XkeRrhpVMB8GA1UdIwQYMBaAFM2LvnBszZtVMs8+sdX7vX0+Pr6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQ5Ni83NTY2RjUyNjBE REIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0xVXl6ejZ4MWZ1OWZUNC12 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZdS1jR3pObTFVeXp6NngxZnU5ZlQ0LXZxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQ5Ni83NTY2RjUyNjBEREIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0x VXl6ejZ4MWZ1OWZUNC12cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhhgEJ1uDF5LnpAU8hYRx7+Tffge5wWOr6kvN1buRxMHA4QoWLBmUE VgStGKox5gahO5+J3Q23e0FnNwhgz8rLeQInDWKvfxQQK5VxJgcXjfhDA8zEvKUZ oVmdh4ZfwV5hBzgESvrBaC4LukLH8iflHkN3AAf99gLNxybWR8bVKvSGvjQXyEHG V6a5kXyn9Xjq2vYpc6wqkZVNKrFvKg1yzI42a/YdRjaVZguy2Q2Rf9ki+wA6lfj7 bcvDODB5ERNdpTMHXVrIY7q2mfcVSBMBfYv1V/kZ0q5Tk0fg0lqc0DtSs5ezv8Wp jO4R2kd1+Zeuh+LThj26XsgNLg3zvDVL -----END CERTIFICATE-----Generated at Sun Jul 20 12:59:44 2025 by rpki-client