$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: YpiKs73pEuGW74zsn/alws9su/8DTl6JRrQU1NbCAww= Subject key identifier: 9F:CC:E3:3F:52:0B:D7:4A:69:F3:F9:BF:4F:72:88:E5:AC:27:2D:A9 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: B5 Signing time: Sat 19 Jul 2025 06:11:22 +0000 Manifest this update: Sat 19 Jul 2025 06:11:22 +0000 Manifest next update: Sat 26 Jul 2025 06:11:21 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: nrr8XZUaX4+F1BdmjF7o+Cz4pHlfkAZgRK1FuS6YuR4=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Jul 19 06:11:22 2025 GMT Not After : Jul 26 06:11:21 2025 GMT Subject: CN=687b370a-d001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:bc:79:9e:12:d8:e2:f5:1e:91:40:e4:2a: dd:07:b3:b2:0a:5d:53:91:4e:b2:3b:c2:c2:28:4e: 22:8b:7b:d1:7d:44:ae:79:85:f3:60:43:6d:ab:9d: 2b:9b:fe:4b:43:a6:20:eb:34:28:78:db:9c:7f:ff: 57:f6:86:4c:e5:dc:b1:ee:c5:de:eb:b0:9b:c2:c1: 58:7c:b2:9d:56:f8:ff:01:58:a4:5a:40:82:a9:6b: 93:cd:cf:5c:95:5e:96:00:58:14:4c:34:f9:d0:1d: b7:3f:1f:b5:63:b5:89:8b:ef:bf:be:41:f1:05:ed: 5f:b8:ed:3c:bd:e9:85:35:cd:9b:90:bd:5f:3a:43: de:74:bc:35:54:3d:07:b9:d5:82:32:5b:f8:74:07: 53:7a:4d:7f:a8:c0:62:c8:3b:93:70:0f:ef:1a:a7: 0e:36:4a:b7:e5:86:26:b3:72:42:42:8a:d7:93:ab: fe:9a:d3:13:ab:05:36:60:26:0b:b1:0a:a2:e6:b5: 2a:31:50:1a:1a:b5:67:2e:b0:31:06:7b:f8:1e:b0: 91:10:14:f8:19:98:1b:94:9c:36:70:d8:c9:0b:fa: 5e:de:09:7f:41:9b:6e:e3:f0:e6:2d:f3:59:66:9c: 92:74:98:bb:88:a1:5f:5b:84:29:0b:50:51:2b:2f: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CC:E3:3F:52:0B:D7:4A:69:F3:F9:BF:4F:72:88:E5:AC:27:2D:A9 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:08:c5:5f:83:77:ae:b4:6c:42:ca:85:1f:aa:42:c5:27:87: a4:93:de:51:19:72:b8:47:56:42:1e:fe:10:bc:2b:8c:a9:02: f8:9e:59:a7:56:5a:6a:fa:86:f0:2e:14:ca:5a:42:34:b7:2e: 39:4c:a8:b2:c6:26:b0:2c:f6:67:fc:e7:d8:e3:3f:74:7f:99: f2:39:17:eb:00:9c:71:3b:63:d3:52:5b:70:2c:cb:0f:66:fd: 37:e3:9c:89:fc:fd:69:7c:85:6c:1f:21:e2:79:29:50:e5:bf: 90:41:9c:3e:ae:73:ce:71:dd:db:5f:2d:a2:9b:8e:b2:10:a8: f1:62:09:c7:a6:2d:c7:37:e5:47:76:07:d6:bb:c0:24:f7:72: 5c:36:17:b2:aa:94:4f:03:bb:25:28:2a:c1:d3:0d:22:10:ae: 43:c7:2c:1e:75:09:b8:11:a7:3d:49:95:f7:88:cd:73:3e:53: 33:bf:e1:0f:76:d0:b0:f3:1e:56:ce:dd:93:28:6f:74:7e:c3: a2:6f:10:4b:0c:aa:92:cf:b3:32:10:ba:13:4c:29:5c:de:63: 42:2d:c5:05:ef:5f:82:eb:12:f3:0b:3d:4f:58:5a:4b:57:d7: ab:7a:34:e7:4b:90:a9:42:28:92:b5:60:7b:f8:9a:3c:b4:71: 76:52:c7:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUwNzE5MDYxMTIyWhcNMjUwNzI2MDYxMTIxWjAYMRYwFAYD VQQDEw02ODdiMzcwYS1kMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8e8eZ4S2OL1HpFA5CrdB7OyCl1TkU6yO8LCKE4ii3vRfUSueYXzYENtq50r m/5LQ6Yg6zQoeNucf/9X9oZM5dyx7sXe67CbwsFYfLKdVvj/AVikWkCCqWuTzc9c lV6WAFgUTDT50B23Px+1Y7WJi++/vkHxBe1fuO08vemFNc2bkL1fOkPedLw1VD0H udWCMlv4dAdTek1/qMBiyDuTcA/vGqcONkq35YYms3JCQorXk6v+mtMTqwU2YCYL sQqi5rUqMVAaGrVnLrAxBnv4HrCREBT4GZgblJw2cNjJC/pe3gl/QZtu4/DmLfNZ ZpySdJi7iKFfW4QpC1BRKy/klQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/M4z9S C9dKafP5v09yiOWsJy2pMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsCMVfg3eutGxCyoUfqkLFJ4ekk95RGXK4R1ZCHv4QvCuMqQL4nlmn Vlpq+obwLhTKWkI0ty45TKiyxiawLPZn/OfY4z90f5nyORfrAJxxO2PTUltwLMsP Zv0345yJ/P1pfIVsHyHieSlQ5b+QQZw+rnPOcd3bXy2im46yEKjxYgnHpi3HN+VH dgfWu8Ak93JcNheyqpRPA7slKCrB0w0iEK5DxywedQm4Eac9SZX3iM1zPlMzv+EP dtCw8x5Wzt2TKG90fsOibxBLDKqSz7MyELoTTClc3mNCLcUF71+C6xLzCz1PWFpL V9erejTnS5CpQiiStWB7+Jo8tHF2Usc/ -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:00 2025 by rpki-client