$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: 2sSFhgzqFnu5pYQZEt8WxGEB+fMA8pih48sK1BPscpw= Subject key identifier: BD:3C:90:17:4A:A7:90:1A:29:70:DB:F7:E3:82:49:A9:E4:51:41:1D Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1A54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A38 Signing time: Sun 20 Jul 2025 16:23:37 +0000 Manifest this update: Sun 20 Jul 2025 16:23:36 +0000 Manifest next update: Sun 27 Jul 2025 16:23:36 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: pftq+DmqtlSsMOIeuUO5gjgXVXHYY1AAHWYwWHES28M=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: nliRTAkVAtJ8FfxKEHQS9HqVovT0tZ32fPM48Sk/l8k=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: EijUWJlocJ1+GHXxh5XIDZa+yD2/CG2e199ekLmtdEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6740 (0x1a54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Jul 20 16:23:36 2025 GMT Not After : Jul 27 16:23:36 2025 GMT Subject: CN=687d1809-ef83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:12:55:a2:d2:dc:ee:15:3d:07:58:96:03: 84:6b:9d:d4:df:bd:c0:5f:87:2b:74:0c:e2:dc:a1: 4c:13:da:39:6b:95:d9:f5:51:6f:d3:c4:bc:d6:39: 6d:73:0e:15:2e:e7:e1:aa:c0:7a:9e:07:c1:2a:8d: 23:cc:29:89:88:29:76:d2:fd:a2:80:91:ee:8d:61: 12:92:70:69:9e:55:b1:cc:fd:83:c3:71:e0:9d:e8: ab:01:58:86:2b:cc:6a:11:60:aa:52:9a:39:e6:b5: 16:d5:6c:cb:65:a3:cf:4e:69:fa:1e:2b:a7:7c:96: 42:29:bc:4a:c4:5b:f8:90:e8:0f:71:94:5a:65:12: dd:fc:4a:e3:0f:d8:bf:b2:5e:78:8a:e7:28:a6:51: 72:11:d4:6f:99:66:54:aa:20:6b:b5:f6:af:47:34: 58:6d:95:48:7d:3b:42:9f:1c:1d:3e:04:f2:66:83: 1a:41:b5:cc:4c:71:e0:d9:17:68:b1:eb:59:5f:30: 2f:7d:97:3d:96:86:9e:9c:26:71:eb:e2:2b:68:8b: 3b:01:47:ed:30:a1:99:c7:6b:d3:c0:0c:71:44:d3: fb:65:0a:ba:9c:f2:d4:ef:6f:e5:9d:81:74:e6:37: d7:a6:47:22:07:eb:f0:bc:1e:e5:70:6c:4b:a0:fd: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3C:90:17:4A:A7:90:1A:29:70:DB:F7:E3:82:49:A9:E4:51:41:1D X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:77:fd:be:f3:4e:46:7d:83:0a:06:70:21:b3:5e:3a:62:ed: d9:f1:8c:cf:f6:9d:28:10:91:63:82:7f:96:3d:83:da:7f:dc: 9d:d0:03:08:55:6a:07:ee:88:40:14:ee:42:c6:7e:51:cf:01: 2a:b5:8e:fd:c1:2d:64:c9:fc:ba:e2:20:47:35:cf:e7:a3:fa: 4d:6d:39:10:32:9d:53:0c:d9:19:07:db:1e:ea:6e:33:f9:fb: 61:58:01:02:3b:74:76:57:6a:a9:ff:b9:ef:8f:6c:d4:80:20: bf:4c:a8:38:3a:59:a5:c9:4c:66:68:00:19:39:3f:7c:c5:ff: ed:e8:e7:66:66:fb:e9:79:83:e2:7a:8e:d5:a9:e3:68:07:63: b5:9e:e8:15:f8:e1:6c:a9:cf:b4:2a:ef:50:e9:fe:eb:a6:31: c5:86:94:f5:9b:cc:40:63:a5:02:77:c1:18:38:c1:d9:ab:50: e1:c0:a1:b8:f1:d8:69:5a:45:68:f3:e8:7f:b2:c9:cd:4b:71: 56:2b:ff:a5:e0:22:cb:ea:51:f0:33:2d:26:6d:08:12:dd:a8: 17:82:f2:b8:02:35:61:3b:9e:a6:e3:a8:01:3e:00:8f:e7:68: dc:52:cf:7b:24:aa:86:b3:91:16:65:02:16:62:b2:da:7a:cb: 0b:14:a3:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUwNzIwMTYyMzM2WhcNMjUwNzI3MTYyMzM2WjAYMRYwFAYD VQQDEw02ODdkMTgwOS1lZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Z4SVaLS3O4VPQdYlgOEa53U373AX4crdAzi3KFME9o5a5XZ9VFv08S81jlt cw4VLufhqsB6ngfBKo0jzCmJiCl20v2igJHujWESknBpnlWxzP2Dw3HgneirAViG K8xqEWCqUpo55rUW1WzLZaPPTmn6HiunfJZCKbxKxFv4kOgPcZRaZRLd/ErjD9i/ sl54iucoplFyEdRvmWZUqiBrtfavRzRYbZVIfTtCnxwdPgTyZoMaQbXMTHHg2Rdo setZXzAvfZc9loaenCZx6+IraIs7AUftMKGZx2vTwAxxRNP7ZQq6nPLU72/lnYF0 5jfXpkciB+vwvB7lcGxLoP2zbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL08kBdK p5AaKXDb9+OCSankUUEdMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEd/2+805GfYMKBnAhs146Yu3Z8YzP9p0oEJFjgn+WPYPaf9yd0AMI VWoH7ohAFO5Cxn5RzwEqtY79wS1kyfy64iBHNc/no/pNbTkQMp1TDNkZB9se6m4z +fthWAECO3R2V2qp/7nvj2zUgCC/TKg4OlmlyUxmaAAZOT98xf/t6OdmZvvpeYPi eo7VqeNoB2O1nugV+OFsqc+0Ku9Q6f7rpjHFhpT1m8xAY6UCd8EYOMHZq1DhwKG4 8dhpWkVo8+h/ssnNS3FWK/+l4CLL6lHwMy0mbQgS3agXgvK4AjVhO56m46gBPgCP 52jcUs97JKqGs5EWZQIWYrLaessLFKOi -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:32 2025 by rpki-client