$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: lHnDg3HMHqTMfqyFqrZ6wAfpdpzIEBF1eiXAOmy8VDA= Subject key identifier: BB:5B:16:96:3D:6C:1A:C4:32:CD:A9:AC:2D:1A:4D:FA:14:37:E7:CA Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 57 Signing time: Sat 19 Jul 2025 07:27:44 +0000 Manifest this update: Sat 19 Jul 2025 07:27:44 +0000 Manifest next update: Sat 26 Jul 2025 07:27:44 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: if4N9nX02hlJIiHDU/DRwB/JQjn2amK+SBPymbu3R2M=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: HEKgeQjMhMYDkC2JrcKXdt5Voc5+W7Do5jSGbSkekDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Jul 19 07:27:44 2025 GMT Not After : Jul 26 07:27:44 2025 GMT Subject: CN=687b48f0-a9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:19:58:83:a9:28:da:29:84:1d:3c:d6:b6: e5:16:08:5e:ca:e3:cc:21:ad:19:3a:a5:34:f4:1d: 8d:5d:59:11:9c:32:9e:70:5d:9c:4c:6d:1f:b6:f2: 2d:51:04:e1:cb:f5:fd:f2:de:52:eb:ee:7a:57:28: a8:f4:d3:52:db:d0:25:f6:12:68:6c:f2:48:34:f1: 4e:bb:e8:ec:5d:12:2d:33:39:84:46:53:df:13:6d: db:6a:f7:ad:b5:31:89:5f:e8:74:0c:5d:f6:57:c2: 9b:01:de:69:56:81:c9:9c:f1:d7:2a:34:66:98:02: 7e:a7:8b:de:1b:91:91:b9:b7:a7:78:cc:6d:12:81: f1:22:18:f1:ac:99:89:df:0c:cf:09:93:d2:f6:38: 9c:ab:de:26:0b:80:d8:47:4e:e9:0b:70:c8:ba:9f: d9:27:55:b6:6e:cd:13:0d:34:31:03:a6:31:76:20: d6:e8:e5:9b:19:b9:fb:37:55:e8:65:0c:f2:d2:8b: 2a:a0:4c:c0:71:61:63:29:1a:14:c1:2a:7f:dd:76: 0e:8c:de:78:00:f2:75:86:71:0b:8f:90:c4:69:c9: c6:4a:63:28:2e:c6:50:92:b6:4d:43:be:ea:7e:c9: 85:92:f9:4e:63:ec:d9:e4:ac:a2:1a:fc:ab:d3:c9: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5B:16:96:3D:6C:1A:C4:32:CD:A9:AC:2D:1A:4D:FA:14:37:E7:CA X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:6e:d3:94:03:e4:5f:25:e8:06:2b:93:20:12:ab:23:3c:1b: c5:0c:ea:f5:dd:38:f8:26:52:52:11:ea:f7:61:aa:08:44:c9: f5:3a:17:2f:b1:b8:dc:dc:3d:80:7f:ba:5e:73:4d:b6:53:01: 00:0c:45:d3:51:5f:1c:54:87:c4:5d:b9:bc:55:b6:a1:f8:a9: d6:24:c6:69:8a:f4:7a:96:ea:18:bc:e9:02:45:4a:a6:9d:84: f2:58:d4:2d:15:b5:b9:a6:ad:d4:9a:25:85:47:89:55:2d:25: 0c:cb:18:85:4e:45:8f:23:a4:1b:0c:3c:c9:77:70:81:53:8d: 63:c5:5c:9d:2e:3e:f6:01:55:34:a9:f6:bd:95:d4:cc:f2:81: a3:fa:b0:cc:fc:3e:64:7b:ad:e9:ca:fd:9f:93:29:d0:4d:3b: d9:e5:58:2d:6a:ce:10:b6:2c:4a:cd:37:80:3c:5a:7e:5c:d2: 25:e7:4e:5b:27:02:20:4a:48:a0:02:41:ea:a4:43:1e:9e:2a: c2:1f:85:48:53:c6:55:90:11:26:56:d1:8e:02:31:65:bb:e3: c8:be:f8:44:c5:cd:72:bc:1f:df:d9:25:06:a0:c2:e2:5d:53: 4b:aa:19:96:3a:16:34:e7:f6:49:2a:f3:e9:4d:4b:5f:3f:b0: ce:42:d9:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUMzMTExMC8GA1UEBRMoNjdENzlDM0IxMTE2RDM2RkI5RTE3MUQ2NjU4RjhGNDNC NTNDNzJGQTAeFw0yNTA3MTkwNzI3NDRaFw0yNTA3MjYwNzI3NDRaMBgxFjAUBgNV BAMTDTY4N2I0OGYwLWE5ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzPBlYg6ko2imEHTzWtuUWCF7K48whrRk6pTT0HY1dWRGcMp5wXZxMbR+28i1R BOHL9f3y3lLr7npXKKj001Lb0CX2Emhs8kg08U676OxdEi0zOYRGU98Tbdtq9621 MYlf6HQMXfZXwpsB3mlWgcmc8dcqNGaYAn6ni94bkZG5t6d4zG0SgfEiGPGsmYnf DM8Jk9L2OJyr3iYLgNhHTukLcMi6n9knVbZuzRMNNDEDpjF2INbo5ZsZufs3Vehl DPLSiyqgTMBxYWMpGhTBKn/ddg6M3ngA8nWGcQuPkMRpycZKYyguxlCStk1Dvup+ yYWS+U5j7NnkrKIa/KvTyeN5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu1sWlj1s GsQyzamsLRpN+hQ358owHwYDVR0jBBgwFoAUZ9ecOxEW02+54XHWZY+PQ7U8cvow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQzMxLzNDRjUzNjIyRTRB NDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjllY094RVcwMi01NFhIV1pZLVBRN1U4Y3ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QzMxLzNDRjUzNjIyRTRBNDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDIt NTRYSFdaWS1QUTdVOGN2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMJu05QD5F8l6AYrkyASqyM8G8UM6vXdOPgmUlIR6vdhqghEyfU6Fy+x uNzcPYB/ul5zTbZTAQAMRdNRXxxUh8RdubxVtqH4qdYkxmmK9HqW6hi86QJFSqad hPJY1C0VtbmmrdSaJYVHiVUtJQzLGIVORY8jpBsMPMl3cIFTjWPFXJ0uPvYBVTSp 9r2V1MzygaP6sMz8PmR7renK/Z+TKdBNO9nlWC1qzhC2LErNN4A8Wn5c0iXnTlsn AiBKSKACQeqkQx6eKsIfhUhTxlWQESZW0Y4CMWW748i++ETFzXK8H9/ZJQagwuJd U0uqGZY6FjTn9kkq8+lNS18/sM5C2dA= -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:14 2025 by rpki-client