$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: ZXxL3BhhIMWF1rDW1y3tt1ugMfHR4T/i4YdjUBZzNVo= Subject key identifier: 0D:03:EA:BC:5D:D3:D6:D8:B5:B8:33:F1:57:1F:02:40:4C:6D:C9:F0 Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 0128 Signing time: Mon 21 Jul 2025 04:54:33 +0000 Manifest this update: Mon 21 Jul 2025 04:54:32 +0000 Manifest next update: Mon 28 Jul 2025 04:54:32 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: S0WX8a3WF63yxLIZ/IbfXC9q2gw8lyHbRlDan02hGJk=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Jul 21 04:54:32 2025 GMT Not After : Jul 28 04:54:32 2025 GMT Subject: CN=687dc808-7292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:18:46:df:d2:6f:c5:56:25:8f:d0:ee:49:76: 54:45:12:71:d0:45:b0:36:61:d6:66:ea:ab:21:81: d7:46:bb:58:98:28:cc:df:bb:82:d3:14:4a:3c:6c: 4f:5e:e9:20:f5:db:f3:48:c4:11:b2:e9:03:db:4d: 7f:3a:ed:b9:b0:3a:d7:e5:6e:0d:ad:9a:be:43:8d: 02:d2:4a:7b:5f:69:b8:3e:b2:66:39:d3:fe:6a:94: 70:e0:47:a8:cd:68:00:d6:1b:fb:1c:f2:87:ff:f0: 89:b9:1d:70:16:6c:f0:3f:e2:32:0c:d0:8c:1d:87: 01:2f:85:62:20:ed:14:e2:d1:83:f3:40:62:82:e4: ab:ee:e3:52:f0:c4:07:1f:0e:d6:84:27:7a:86:ed: 19:ba:51:a1:a2:c2:12:2a:35:9b:80:32:4e:43:0c: cc:e3:52:4d:a5:bb:1a:6d:08:5f:c8:8d:9c:ec:e0: 04:00:c3:2f:1a:06:3e:4b:93:05:e6:eb:37:7a:a5: bc:96:7c:50:c9:98:d2:ea:90:cf:2e:69:c9:9f:c2: 8b:2e:cb:a8:c5:de:41:98:60:f3:ff:bc:78:a5:4a: 55:66:f6:c8:30:a5:f9:0f:6f:1c:e9:c3:c5:26:cc: 18:11:5b:93:c6:ce:16:0b:f9:a7:4c:73:a3:10:84: 03:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:03:EA:BC:5D:D3:D6:D8:B5:B8:33:F1:57:1F:02:40:4C:6D:C9:F0 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d3:6c:2b:1d:a6:b5:4d:d4:a2:60:a8:0f:8f:f6:41:d9:fa: 02:16:68:0e:a1:41:8b:e1:22:12:e6:5a:e8:92:4a:d2:7d:ac: b6:6f:3f:02:51:54:91:8f:70:73:6c:14:33:b6:6c:6f:9e:f3: 57:12:6e:dd:12:fd:aa:b2:80:b9:05:21:2c:d3:7d:90:76:51: 91:df:37:a4:90:dd:13:61:4f:9e:69:e8:21:98:dc:aa:9b:8e: 7c:c2:c1:b4:58:c8:48:53:51:a5:00:87:ca:41:9d:cd:a8:15: 9d:cc:88:00:b8:82:25:fd:fe:f1:8b:5a:ca:11:aa:3f:20:60: 4c:a7:6c:ac:90:3b:30:b6:c2:69:a0:77:98:2d:11:cb:d6:91: 30:00:1a:33:1f:e8:6e:e6:71:1b:03:e7:53:95:68:42:2e:ab: 3f:b8:57:8a:de:68:b7:ea:ca:48:e7:0c:e4:57:0d:58:cd:90: d6:80:71:a2:64:6b:8c:e2:27:5c:f3:36:de:10:6a:2f:0b:3f: 7c:a2:04:20:35:96:2b:95:c8:a4:ec:c2:22:74:61:5e:e3:b2: b3:d3:0d:13:1a:4f:ed:62:40:e7:27:39:57:7d:01:d5:6b:01: 31:2f:f7:78:3f:48:1f:54:50:36:aa:75:65:34:7b:32:96:09: 64:3f:1c:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUwNzIxMDQ1NDMyWhcNMjUwNzI4MDQ1NDMyWjAYMRYwFAYD VQQDEw02ODdkYzgwOC03MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hhG39JvxVYlj9DuSXZURRJx0EWwNmHWZuqrIYHXRrtYmCjM37uC0xRKPGxP Xukg9dvzSMQRsukD201/Ou25sDrX5W4NrZq+Q40C0kp7X2m4PrJmOdP+apRw4Eeo zWgA1hv7HPKH//CJuR1wFmzwP+IyDNCMHYcBL4ViIO0U4tGD80BiguSr7uNS8MQH Hw7WhCd6hu0ZulGhosISKjWbgDJOQwzM41JNpbsabQhfyI2c7OAEAMMvGgY+S5MF 5us3eqW8lnxQyZjS6pDPLmnJn8KLLsuoxd5BmGDz/7x4pUpVZvbIMKX5D28c6cPF JswYEVuTxs4WC/mnTHOjEIQDYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0D6rxd 09bYtbgz8VcfAkBMbcnwMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA602wrHaa1TdSiYKgPj/ZB2foCFmgOoUGL4SIS5lrokkrSfay2bz8C UVSRj3BzbBQztmxvnvNXEm7dEv2qsoC5BSEs032QdlGR3zekkN0TYU+eaeghmNyq m458wsG0WMhIU1GlAIfKQZ3NqBWdzIgAuIIl/f7xi1rKEao/IGBMp2yskDswtsJp oHeYLRHL1pEwABozH+hu5nEbA+dTlWhCLqs/uFeK3mi36spI5wzkVw1YzZDWgHGi ZGuM4idc8zbeEGovCz98ogQgNZYrlcik7MIidGFe47Kz0w0TGk/tYkDnJzlXfQHV awExL/d4P0gfVFA2qnVlNHsylglkPxw7 -----END CERTIFICATE-----Generated at Wed Jul 23 05:27:49 2025 by rpki-client