$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json) Hash identifier: Eitw4aFm1Bk9m55/5ZU3F1EsQjGqWsqNbZQ/gwQfUSw= Subject key identifier: BD:8B:59:31:94:DD:BA:E8:99:64:85:25:2C:61:74:14:22:9C:40:AA Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft Manifest number: 049C Signing time: Mon 21 Jul 2025 00:11:17 +0000 Manifest this update: Mon 21 Jul 2025 00:11:16 +0000 Manifest next update: Mon 28 Jul 2025 00:11:16 +0000 Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: 6BCw2J6MGyAP3G8lPPqIAZhhLq5fiVWUZkqDU3YLH9o=) 2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: /ooE2VFwIyhJ0GDoQeohGtb0l3eCORZIYsK88m8yo4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Validity Not Before: Jul 21 00:11:16 2025 GMT Not After : Jul 28 00:11:16 2025 GMT Subject: CN=687d85a5-1cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:2b:1d:0f:cb:c6:8d:db:1a:00:a7:d1:f0: 28:8a:1e:db:ac:88:8a:b5:28:cd:db:57:67:0b:e3: b2:98:b9:3d:70:ad:b9:33:22:e9:9b:d1:30:e9:47: 94:65:b0:ee:97:c1:50:f8:29:18:b7:93:ea:a7:29: 26:b6:54:ce:d0:04:6e:18:72:f4:78:22:9e:26:60: 0c:ca:4e:6d:ca:c4:13:fc:66:fc:ba:61:25:ec:ba: 46:8f:07:d7:b1:e2:00:6c:49:1d:a5:08:15:f7:d8: 57:75:c8:c1:b2:df:f3:28:53:29:b4:34:a4:0d:63: bd:07:62:1f:21:27:ff:56:3e:8a:85:71:6f:28:58: 0b:33:b3:56:e2:50:9f:f1:36:f2:97:66:79:eb:47: 06:81:3c:d9:ff:46:e1:04:86:18:13:1a:a8:23:f5: 34:d1:9b:3b:42:33:e0:46:03:35:78:28:7e:a3:25: be:dc:3b:84:3d:5b:55:17:da:20:34:b3:ec:b3:f4: ac:d2:31:55:8b:a4:8a:2f:d0:39:c1:dc:39:fe:05: 49:75:d1:db:8b:89:8f:2a:87:5a:09:b9:a6:49:c0: 01:b7:bf:dd:3c:07:b2:f2:2b:cd:22:8e:ad:dc:11: 7b:ae:47:4f:40:39:53:11:a4:1b:40:1d:d4:28:ea: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:59:31:94:DD:BA:E8:99:64:85:25:2C:61:74:14:22:9C:40:AA X509v3 Authority Key Identifier: keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:85:7e:13:ff:6c:b7:70:60:f2:1f:16:ea:7d:90:3a:b4:fa: 1f:eb:47:39:4a:1e:c5:e3:8e:e2:93:4e:64:09:6d:84:ff:2b: 63:ae:84:27:8d:e7:94:b4:2c:8b:24:a6:66:80:b6:53:67:a5: 60:d2:f4:6e:36:7f:ba:3d:af:da:a3:66:2a:3c:d6:93:4a:c8: 33:a9:7d:15:63:10:72:c3:5a:c0:d8:04:1d:40:3b:f7:95:7d: 33:56:57:51:3d:a1:d6:bc:33:95:a8:d2:50:5e:c6:bd:eb:25: 7a:18:7e:21:2c:af:dc:4e:2f:24:90:6b:bb:53:7b:6c:75:76: 97:bd:c3:ca:4a:cb:14:fb:a6:2d:4e:fa:dd:3b:1d:87:e7:90: 96:41:2a:66:1e:cb:61:dd:05:9f:22:28:c0:c3:84:2c:0a:9d: 68:88:16:04:5d:fb:b9:c0:0e:70:96:fd:69:cd:ea:3e:7c:09: 17:4c:f8:68:c6:da:49:d6:10:a4:6f:92:5c:cd:79:34:ec:1c: 31:68:e6:3f:6b:23:40:80:8e:27:04:a4:7e:c8:27:76:7d:dd: d6:0c:83:d7:90:8d:a2:2d:d0:ba:6f:4c:95:50:65:1e:bf:06: 62:7d:83:f2:73:ae:74:36:9b:79:80:24:85:2e:fd:74:ee:eb: ba:07:8a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxRkYxMTAvBgNVBAUTKDY3NUU2M0E0QzE3OEM2RjU2NjAyNjQwMjQ0NzI0NjRF Qjk4RTFCNUQwHhcNMjUwNzIxMDAxMTE2WhcNMjUwNzI4MDAxMTE2WjAYMRYwFAYD VQQDEw02ODdkODVhNS0xY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI8rHQ/Lxo3bGgCn0fAoih7brIiKtSjN21dnC+OymLk9cK25MyLpm9Ew6UeU ZbDul8FQ+CkYt5PqpykmtlTO0ARuGHL0eCKeJmAMyk5tysQT/Gb8umEl7LpGjwfX seIAbEkdpQgV99hXdcjBst/zKFMptDSkDWO9B2IfISf/Vj6KhXFvKFgLM7NW4lCf 8Tbyl2Z560cGgTzZ/0bhBIYYExqoI/U00Zs7QjPgRgM1eCh+oyW+3DuEPVtVF9og NLPss/Ss0jFVi6SKL9A5wdw5/gVJddHbi4mPKodaCbmmScABt7/dPAey8ivNIo6t 3BF7rkdPQDlTEaQbQB3UKOr5QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2LWTGU 3bromWSFJSxhdBQinECqMB8GA1UdIwQYMBaAFGdeY6TBeMb1ZgJkAkRyRk65jhtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFGRi9COEMxRTdENDQx MjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2Vm1BbVFDUkhKR1RybU9H MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxNWpwTUY0eHZWbUFtUUNSSEpHVHJtT0cxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFGRi9COEMxRTdENDQxMjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2 Vm1BbVFDUkhKR1RybU9HMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCahX4T/2y3cGDyHxbqfZA6tPof60c5Sh7F447ik05kCW2E/ytjroQn jeeUtCyLJKZmgLZTZ6Vg0vRuNn+6Pa/ao2YqPNaTSsgzqX0VYxByw1rA2AQdQDv3 lX0zVldRPaHWvDOVqNJQXsa96yV6GH4hLK/cTi8kkGu7U3tsdXaXvcPKSssU+6Yt TvrdOx2H55CWQSpmHsth3QWfIijAw4QsCp1oiBYEXfu5wA5wlv1pzeo+fAkXTPho xtpJ1hCkb5JczXk07BwxaOY/ayNAgI4nBKR+yCd2fd3WDIPXkI2iLdC6b0yVUGUe vwZifYPyc650Npt5gCSFLv107uu6B4oX -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:43 2025 by rpki-client