$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: dpHqhmTwTgbfOAXMTX3fl31eVKcXtiFLCQZXAOJEnV0= Subject key identifier: EB:C4:FC:C7:14:65:82:BD:E0:6E:69:13:58:B3:27:A9:1C:AB:B3:6E Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 64 Signing time: Sat 19 Jul 2025 07:25:19 +0000 Manifest this update: Sat 19 Jul 2025 07:25:19 +0000 Manifest next update: Sat 26 Jul 2025 07:25:19 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: H7E643nD92jRYPpcr7xq5buvYDg0wbnzE4De7aMAdP4=) 2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=) 4: CAB9B360E20211EF80FC810DC4F9AE02.roa (hash: 65X5sPIhdKM1lp6V7hevZEuaDbWujUAm7MoeXT80kOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Jul 19 07:25:19 2025 GMT Not After : Jul 26 07:25:19 2025 GMT Subject: CN=687b485f-461f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:61:5a:f9:3f:ec:34:d8:1b:68:bc:9f:01: 54:f6:3b:9c:c0:23:b4:5c:fe:22:7f:51:51:0f:56: 78:e9:4b:6c:56:8a:21:2c:46:32:ae:e3:c1:5f:a1: 89:13:db:77:c8:68:39:40:f8:b0:9b:63:aa:18:19: 80:99:76:6f:1a:e7:bc:e8:66:24:f6:ac:c8:bc:d3: 26:1e:56:0f:03:c1:cd:9a:4d:bd:82:c7:39:c0:56: ec:05:c0:66:31:2f:80:9c:e5:99:b2:fa:e3:e4:6f: 25:43:07:e4:37:da:ff:15:4a:9d:10:bf:68:51:fc: ed:23:52:fd:18:a2:26:62:36:16:6f:82:d2:b3:dd: 51:10:ef:d9:7c:7e:35:41:00:5b:a2:40:17:86:72: 8f:83:5d:3a:b9:3c:49:e9:b9:2c:9d:c0:c4:5c:c1: 88:91:5b:c9:c6:41:aa:1c:d5:3f:a2:34:46:81:a1: be:38:eb:e4:1c:bb:98:69:a3:ba:0b:13:4b:35:fe: fb:c8:9d:51:9a:3f:28:f8:d2:78:18:75:9b:2b:7d: b7:b5:31:9e:5f:80:57:d4:00:f6:fc:d1:71:64:ad: b3:73:63:10:c5:df:86:d5:1f:06:9c:a2:91:1d:35: cd:f2:f9:ef:73:8a:11:ea:ac:9a:5a:ce:5b:2c:fa: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C4:FC:C7:14:65:82:BD:E0:6E:69:13:58:B3:27:A9:1C:AB:B3:6E X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:2f:fd:32:3a:a6:49:03:e7:4e:86:2f:9f:62:3a:dc:58: e5:fa:3d:64:74:68:27:43:2f:f8:af:0f:62:13:e0:0b:53:de: 3f:d3:20:6e:e8:8c:8e:b8:71:b8:8b:4e:2e:ca:00:eb:65:ea: 77:76:8c:28:33:da:89:0a:47:bc:41:9c:1c:e9:df:0c:16:6d: 66:b2:0c:a2:ac:00:17:48:d4:31:22:03:ab:3a:07:0e:9e:75: 8e:9c:a6:14:29:23:b5:0c:69:f5:ab:18:18:e7:1a:a2:bf:e3: f8:68:2f:f2:31:d0:cc:06:67:b9:27:70:f0:27:1e:38:85:89: b2:8f:af:13:5d:aa:2b:b2:3e:d1:61:1d:03:95:89:c3:06:2f: e0:89:3e:f7:13:2f:33:1b:99:81:9f:fb:2a:12:7d:9f:b7:d8: f0:8c:9a:cc:b1:4f:e3:74:c0:56:b3:fb:ae:0a:f4:00:a0:9a: 0d:d6:21:6e:d5:9e:d4:6a:09:63:db:5c:e6:da:c1:6f:fb:36: d4:5b:f4:d2:57:aa:9b:50:2b:46:8e:1b:67:6b:93:52:4d:dc: 1b:f1:ea:7d:12:41:4b:cf:2b:2f:e6:20:51:da:f9:4b:54:a9: bf:95:05:10:f7:72:b7:39:cf:66:e3:26:9f:23:11:c0:c2:c1: 70:74:7b:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RDM0QjExMC8GA1UEBRMoNjRDQjZFQTdEN0QwRTUxRjRENDJCMkQ2ODQ3Mjc0QUJC MDczNjU5ODAeFw0yNTA3MTkwNzI1MTlaFw0yNTA3MjYwNzI1MTlaMBgxFjAUBgNV BAMTDTY4N2I0ODVmLTQ2MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIrmFa+T/sNNgbaLyfAVT2O5zAI7Rc/iJ/UVEPVnjpS2xWiiEsRjKu48FfoYkT 23fIaDlA+LCbY6oYGYCZdm8a57zoZiT2rMi80yYeVg8Dwc2aTb2CxznAVuwFwGYx L4Cc5Zmy+uPkbyVDB+Q32v8VSp0Qv2hR/O0jUv0YoiZiNhZvgtKz3VEQ79l8fjVB AFuiQBeGco+DXTq5PEnpuSydwMRcwYiRW8nGQaoc1T+iNEaBob446+Qcu5hpo7oL E0s1/vvInVGaPyj40ngYdZsrfbe1MZ5fgFfUAPb80XFkrbNzYxDF34bVHwacopEd Nc3y+e9zihHqrJpazlss+on5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU68T8xxRl gr3gbmkTWLMnqRyrs24wHwYDVR0jBBgwFoAUZMtup9fQ5R9NQrLWhHJ0q7BzZZgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEMzRCL0IzREI1MUQyREYz NTExRUZBNThENjUzQkM0RjlBRTAyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpa Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk10dXA5ZlE1UjlOUXJMV2hISjBxN0J6WlpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE MzRCL0IzREI1MUQyREYzNTExRUZBNThENjUzQkM0RjlBRTAyL1pNdHVwOWZRNVI5 TlFyTFdoSEowcTdCelpaZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACsL/0yOqZJA+dOhi+fYjrcWOX6PWR0aCdDL/ivD2IT4AtT3j/TIG7o jI64cbiLTi7KAOtl6nd2jCgz2okKR7xBnBzp3wwWbWayDKKsABdI1DEiA6s6Bw6e dY6cphQpI7UMafWrGBjnGqK/4/hoL/Ix0MwGZ7kncPAnHjiFibKPrxNdqiuyPtFh HQOVicMGL+CJPvcTLzMbmYGf+yoSfZ+32PCMmsyxT+N0wFaz+64K9ACgmg3WIW7V ntRqCWPbXObawW/7NtRb9NJXqptQK0aOG2drk1JN3Bvx6n0SQUvPKy/mIFHa+UtU qb+VBRD3crc5z2bjJp8jEcDCwXB0e5w= -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:45 2025 by rpki-client