$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: 6A/H3rBiVY+LOpaV6gxMVsKB3pzc+NH57hRSv80ZLxw= Subject key identifier: FD:41:BB:9F:FF:68:71:D9:58:98:29:B2:BA:15:C9:C2:5D:53:E1:AE Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 015C Signing time: Wed 23 Jul 2025 04:15:56 +0000 Manifest this update: Wed 23 Jul 2025 04:15:56 +0000 Manifest next update: Wed 30 Jul 2025 04:15:56 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: AAVmdt4ukY+cTIvFwZ0ftJl3nyoQC4mst4e+ze/Jrto=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Jul 23 04:15:56 2025 GMT Not After : Jul 30 04:15:56 2025 GMT Subject: CN=688061fc-f633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:ee:99:26:df:49:1a:3d:9b:f9:c2:14:ab: 43:3c:b5:21:5c:9c:50:32:ff:53:d2:e6:c3:78:5d: a5:db:20:d8:cf:10:44:97:25:8a:6f:f6:3d:62:34: db:6d:0a:c9:63:69:9a:62:28:16:c7:fa:10:8b:89: a5:3a:c1:38:8e:4a:dd:7a:51:3e:06:cd:f0:c4:26: 73:21:53:73:df:03:3b:19:a3:1d:92:3f:5f:25:5a: 27:1f:72:63:0e:9a:46:f7:88:83:49:7b:a4:8b:41: fa:24:16:62:b2:f9:c0:d1:56:40:51:f9:e9:83:ab: ed:58:b0:22:5b:ee:42:46:83:58:dc:3b:71:60:49: c4:15:06:c3:c5:f5:1c:f6:c5:c8:d3:3f:29:3e:7e: f9:75:16:44:d3:66:4e:2a:20:79:49:ad:10:46:27: 03:e7:84:f1:8a:5e:ea:64:5b:52:78:1e:d6:29:14: 9f:cc:73:fd:d5:eb:a0:e0:aa:e6:fb:5a:63:8a:47: b2:67:d6:68:da:13:f3:eb:78:96:7b:94:4e:91:29: 25:c5:57:5c:dd:11:b1:64:89:16:7b:8b:ef:86:91: 49:a4:1c:77:79:a2:cf:70:80:2e:38:2d:36:e0:4c: dd:45:6f:11:7a:6a:ba:86:6a:7a:53:b8:7a:da:e2: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:41:BB:9F:FF:68:71:D9:58:98:29:B2:BA:15:C9:C2:5D:53:E1:AE X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9f:13:a0:0c:23:6e:1e:c8:09:d8:56:00:df:6b:7a:15:00: 80:6f:0e:ec:c8:3e:8e:84:b5:5a:64:cc:91:ab:62:d2:16:ee: d8:73:71:6e:bb:d6:88:e6:2b:40:46:8d:66:5b:b9:ee:c0:60: 24:47:f6:66:59:d5:a0:28:b0:e7:09:96:b5:83:ed:34:c9:ad: a2:47:a2:6f:e9:6a:7c:91:06:1f:45:5b:90:84:73:66:62:a1: 90:7a:05:f4:55:37:71:1d:86:b6:50:f1:01:03:84:7a:33:9b: f4:05:d2:3c:d6:66:b7:71:a7:fe:5e:95:6e:6e:9f:4c:3b:f7: 0a:0e:96:de:dc:49:5b:f0:f5:88:fe:90:20:55:d7:10:84:6f: ae:3a:f5:6c:8b:5b:e7:f9:17:27:e5:a2:e6:1b:41:83:1c:68: 8a:6c:8b:ed:e5:c6:29:10:07:40:63:89:c2:87:e1:0d:6a:4b: e6:ff:61:74:87:e2:9d:ef:e5:01:14:3f:24:0d:7b:f7:42:0b: 5a:6e:b0:56:d1:dc:85:b9:9e:08:7e:5a:b9:28:fb:79:87:63: ba:a1:af:69:e9:19:9e:4d:c8:69:70:57:27:37:80:39:e9:1d: 50:ed:00:a4:8b:92:78:9f:60:1c:b6:ed:d2:f7:65:f3:71:f0: 17:b6:7c:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjUwNzIzMDQxNTU2WhcNMjUwNzMwMDQxNTU2WjAYMRYwFAYD VQQDEw02ODgwNjFmYy1mNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpjumSbfSRo9m/nCFKtDPLUhXJxQMv9T0ubDeF2l2yDYzxBElyWKb/Y9YjTb bQrJY2maYigWx/oQi4mlOsE4jkrdelE+Bs3wxCZzIVNz3wM7GaMdkj9fJVonH3Jj DppG94iDSXuki0H6JBZisvnA0VZAUfnpg6vtWLAiW+5CRoNY3DtxYEnEFQbDxfUc 9sXI0z8pPn75dRZE02ZOKiB5Sa0QRicD54Txil7qZFtSeB7WKRSfzHP91eug4Krm +1pjikeyZ9Zo2hPz63iWe5ROkSklxVdc3RGxZIkWe4vvhpFJpBx3eaLPcIAuOC02 4EzdRW8Remq6hmp6U7h62uKIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1Bu5// aHHZWJgpsroVycJdU+GuMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhnxOgDCNuHsgJ2FYA32t6FQCAbw7syD6OhLVaZMyRq2LSFu7Yc3Fu u9aI5itARo1mW7nuwGAkR/ZmWdWgKLDnCZa1g+00ya2iR6Jv6Wp8kQYfRVuQhHNm YqGQegX0VTdxHYa2UPEBA4R6M5v0BdI81ma3caf+XpVubp9MO/cKDpbe3Elb8PWI /pAgVdcQhG+uOvVsi1vn+Rcn5aLmG0GDHGiKbIvt5cYpEAdAY4nCh+ENakvm/2F0 h+Kd7+UBFD8kDXv3QgtabrBW0dyFuZ4Iflq5KPt5h2O6oa9p6RmeTchpcFcnN4A5 6R1Q7QCki5J4n2Actu3S92XzcfAXtnxN -----END CERTIFICATE-----Generated at Thu Jul 24 12:18:50 2025 by rpki-client