$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: yPZ25r3zFM1TW5LB5KZ7z0s2duUDoAbRhE9lEoNSun0= Subject key identifier: EC:34:5F:85:C0:DF:3C:7A:BC:CF:55:19:10:58:5E:B8:D2:C6:8A:78 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 0308 Signing time: Wed 23 Jul 2025 01:42:20 +0000 Manifest this update: Wed 23 Jul 2025 01:42:20 +0000 Manifest next update: Wed 30 Jul 2025 01:42:20 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: wz4qdIadoe3jlVQRD5BipKFrKdD/Oo738bqq/6VhiXE=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: RnbjFxdhVYxbEY3yp6uidgVt3+flm27oqhA1+XpnuB4=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: 3npwV8/+wiUK9JBAZyO0+8UedY3k/f+O7Td/WLjNjlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Jul 23 01:42:20 2025 GMT Not After : Jul 30 01:42:20 2025 GMT Subject: CN=68803dfc-a5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:8c:6e:4e:4a:a1:7e:e8:9f:5a:1f:2a:38: 70:fd:25:5c:60:47:43:df:d2:4b:55:41:6a:20:87: e7:ba:35:88:76:cd:2b:2e:79:71:d5:44:d2:c1:06: ff:2d:dd:f9:21:67:20:f7:8e:b2:70:03:62:1e:bf: 09:e0:fd:e0:46:fd:83:24:68:88:03:66:f5:f2:4d: 4e:1b:48:63:88:da:bf:5d:75:10:81:ee:09:44:77: 02:18:73:d1:aa:8d:9f:58:1b:78:bd:42:c1:0c:60: 77:36:85:01:26:1f:88:75:19:6a:14:e9:75:65:0c: 9a:78:2d:f9:ff:6f:e2:2e:4c:1c:88:81:6a:30:28: fb:89:7a:3f:3e:ff:c8:6c:eb:1b:99:3b:f5:42:d7: 22:a9:41:63:30:b9:f2:0d:d1:83:10:53:55:af:28: b7:ce:5f:0e:47:ae:be:a3:ba:3c:c7:cd:50:c0:6e: c1:e0:d3:f7:32:7f:ac:60:fd:91:4f:5f:05:e4:24: 42:6d:88:24:8d:6c:69:bc:60:c1:de:81:11:56:48: 3a:80:7a:4b:be:19:7d:15:e0:b4:47:4d:79:7e:46: a7:db:27:da:fc:82:96:d9:7d:5e:4b:0e:c6:f5:90: b4:8c:07:39:1a:9d:2c:db:db:53:32:e2:4f:f1:e5: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:34:5F:85:C0:DF:3C:7A:BC:CF:55:19:10:58:5E:B8:D2:C6:8A:78 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dd:6d:75:0e:7a:3a:e9:55:e0:d3:a6:d8:ff:be:9f:d8:94: 2d:c2:98:69:3a:b6:7b:31:1a:14:d9:de:93:20:db:3d:d6:de: 27:5c:46:a3:0d:5f:53:63:c3:28:ad:7e:bf:19:9f:98:0b:16: d1:8d:ad:05:4a:65:85:31:67:da:94:8d:86:1a:a5:19:fe:7c: 57:b0:22:f0:d5:ac:34:13:96:50:b9:fe:f4:81:f7:1b:d7:f5: 3d:87:3e:68:24:9f:ea:3d:de:b6:43:a8:de:14:95:72:01:9c: 71:57:5a:22:8b:1b:fc:9e:b1:40:fa:38:e0:d4:01:1e:e5:a3: c4:f6:f2:de:01:4b:00:d6:1e:ab:62:84:d5:2c:59:1d:cc:15: 56:25:2f:3f:a0:8b:6f:39:03:0f:9b:b3:6b:2e:a7:e3:96:31: 1f:bd:2f:6a:b8:fb:1e:60:de:af:a0:bb:c9:f4:46:4e:30:c7: 42:75:d3:f6:5a:62:8d:2c:47:65:98:a9:45:1d:ae:3f:6a:a6: 8f:00:4b:5b:fe:d8:58:98:1c:cf:40:94:f8:b6:12:cd:1b:d7: 8e:e3:ea:5b:13:67:b3:9f:02:92:af:e3:dd:3d:41:39:42:ab: df:b8:74:70:f4:8d:7f:24:80:77:84:a8:34:a6:2b:df:3c:90: 66:56:c0:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwNzIzMDE0MjIwWhcNMjUwNzMwMDE0MjIwWjAYMRYwFAYD VQQDEw02ODgwM2RmYy1hNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueiMbk5KoX7on1ofKjhw/SVcYEdD39JLVUFqIIfnujWIds0rLnlx1UTSwQb/ Ld35IWcg946ycANiHr8J4P3gRv2DJGiIA2b18k1OG0hjiNq/XXUQge4JRHcCGHPR qo2fWBt4vULBDGB3NoUBJh+IdRlqFOl1ZQyaeC35/2/iLkwciIFqMCj7iXo/Pv/I bOsbmTv1QtciqUFjMLnyDdGDEFNVryi3zl8OR66+o7o8x81QwG7B4NP3Mn+sYP2R T18F5CRCbYgkjWxpvGDB3oERVkg6gHpLvhl9FeC0R015fkan2yfa/IKW2X1eSw7G 9ZC0jAc5Gp0s29tTMuJP8eVp+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOw0X4XA 3zx6vM9VGRBYXrjSxop4MB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb3W11Dno66VXg06bY/76f2JQtwphpOrZ7MRoU2d6TINs91t4nXEaj DV9TY8MorX6/GZ+YCxbRja0FSmWFMWfalI2GGqUZ/nxXsCLw1aw0E5ZQuf70gfcb 1/U9hz5oJJ/qPd62Q6jeFJVyAZxxV1oiixv8nrFA+jjg1AEe5aPE9vLeAUsA1h6r YoTVLFkdzBVWJS8/oItvOQMPm7NrLqfjljEfvS9quPseYN6voLvJ9EZOMMdCddP2 WmKNLEdlmKlFHa4/aqaPAEtb/thYmBzPQJT4thLNG9eO4+pbE2eznwKSr+PdPUE5 QqvfuHRw9I1/JIB3hKg0pivfPJBmVsCR -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:07 2025 by rpki-client