$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: qlsGx/ZxiksMTO3h2TsK64TPHCepNc1sFZLt98WbRHo= Subject key identifier: 31:37:26:03:78:EC:3C:70:C5:AB:CB:A2:09:5F:7E:C7:34:79:CC:F3 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 1805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 17F2 Signing time: Sun 20 Jul 2025 16:34:49 +0000 Manifest this update: Sun 20 Jul 2025 16:34:49 +0000 Manifest next update: Sun 27 Jul 2025 16:34:49 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: zW5EApm5WzRSTy8U+FVH3jci5lo4OJzvobAZelh5caM=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: o72VLQ1AaTbDR0LUWxX7H2rR6ueROwUZcL0xiM3p7KI=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: XSMOrkD+VKk/yODIQVEJZLLi9dBXNMbWFRIFf5Gr+QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6149 (0x1805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: Jul 20 16:34:49 2025 GMT Not After : Jul 27 16:34:49 2025 GMT Subject: CN=687d1aa9-3347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:e5:8c:47:65:14:db:51:51:fd:0b:98:04: 3a:a3:1f:47:14:ea:43:d8:44:25:ed:19:48:ee:f9: 07:8e:f0:96:de:49:a0:27:0d:2f:b1:5a:c4:b8:a3: 44:cb:5b:3d:3a:01:cd:88:36:77:44:0c:1c:78:b1: 01:71:39:5b:e0:ce:c2:0c:08:60:87:0a:56:96:30: 8f:8a:89:76:5a:74:2e:54:3f:e2:91:5c:df:80:30: 22:83:cd:e5:67:23:0c:0c:4d:7b:49:ea:7c:9e:76: 79:cc:5e:a3:8a:0d:29:e4:c1:04:0a:d8:9a:52:1b: 35:86:52:c3:36:b1:5c:0f:d9:39:1e:db:27:5f:f1: 49:43:c3:f2:38:f9:55:81:a9:f9:a5:c3:51:c8:53: 02:54:6b:0e:02:a3:63:6a:ac:58:bb:35:1e:1e:af: 30:2f:80:dc:70:7a:76:a6:e2:c9:e1:f9:7b:35:32: ff:32:06:8a:f3:6f:85:14:ac:12:8f:fa:fc:2b:e0: 5a:74:50:e2:af:92:fc:6e:16:b3:88:bd:25:50:ae: ce:82:fa:d3:d6:53:7e:45:b0:5c:97:91:f7:53:ea: 19:c9:ef:b9:d0:e0:ce:c2:a8:51:c6:06:d5:5a:02: e2:73:51:e9:14:0e:15:7a:03:30:76:55:a3:1f:5c: 2b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:26:03:78:EC:3C:70:C5:AB:CB:A2:09:5F:7E:C7:34:79:CC:F3 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:05:e6:6d:24:b4:2f:ba:5b:5a:8d:f9:4c:39:95:ac:09:95: 8a:d5:b9:3d:f3:3c:3f:ce:90:e9:36:c7:1b:7e:02:bf:ac:36: 97:b1:11:94:22:27:a6:1e:2d:cf:a1:0f:eb:32:03:c8:3d:43: d8:a0:52:24:62:8c:f4:8a:25:82:03:de:ba:6e:e9:d6:28:97: 49:38:72:75:e6:32:bd:51:3f:0f:8a:be:4f:a9:5a:24:44:6f: 96:c0:79:77:6c:56:0a:d6:65:43:9e:22:72:a0:38:f1:03:53: c6:02:e5:b0:8f:a3:d6:c9:3b:8b:9f:2c:3d:ca:24:71:38:e5: 90:91:3f:c6:ca:a8:00:d5:9e:f1:07:5a:90:19:ab:51:77:87: ad:0d:76:2b:fe:d6:2d:73:45:1a:23:f5:33:d8:f4:01:2c:f9: 31:6c:bf:ff:b6:c8:e7:a5:01:53:0f:2c:e5:f4:e8:5e:9a:1d: 98:ca:21:2c:c3:ce:df:20:60:50:d0:17:0f:aa:c5:e8:f8:f5: 27:01:e0:08:ef:b6:f2:e8:97:93:26:55:5b:87:13:1f:d6:9e: 8c:0f:0a:e8:4f:10:cc:7b:2e:cc:9c:40:d5:38:d8:48:ce:e2: 40:00:5f:4d:c7:e3:23:c6:2c:ef:ac:12:b5:a7:c2:55:ea:10: f3:9e:b3:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjUwNzIwMTYzNDQ5WhcNMjUwNzI3MTYzNDQ5WjAYMRYwFAYD VQQDEw02ODdkMWFhOS0zMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6bljEdlFNtRUf0LmAQ6ox9HFOpD2EQl7RlI7vkHjvCW3kmgJw0vsVrEuKNE y1s9OgHNiDZ3RAwceLEBcTlb4M7CDAhghwpWljCPiol2WnQuVD/ikVzfgDAig83l ZyMMDE17Sep8nnZ5zF6jig0p5MEECtiaUhs1hlLDNrFcD9k5HtsnX/FJQ8PyOPlV gan5pcNRyFMCVGsOAqNjaqxYuzUeHq8wL4DccHp2puLJ4fl7NTL/MgaK82+FFKwS j/r8K+BadFDir5L8bhaziL0lUK7OgvrT1lN+RbBcl5H3U+oZye+50ODOwqhRxgbV WgLic1HpFA4VegMwdlWjH1wrQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE3JgN4 7DxwxavLoglffsc0eczzMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfBeZtJLQvultajflMOZWsCZWK1bk98zw/zpDpNscbfgK/rDaXsRGU IiemHi3PoQ/rMgPIPUPYoFIkYoz0iiWCA966bunWKJdJOHJ15jK9UT8Pir5PqVok RG+WwHl3bFYK1mVDniJyoDjxA1PGAuWwj6PWyTuLnyw9yiRxOOWQkT/GyqgA1Z7x B1qQGatRd4etDXYr/tYtc0UaI/Uz2PQBLPkxbL//tsjnpQFTDyzl9Ohemh2YyiEs w87fIGBQ0BcPqsXo+PUnAeAI77by6JeTJlVbhxMf1p6MDwroTxDMey7MnEDVONhI zuJAAF9Nx+MjxizvrBK1p8JV6hDznrON -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:33 2025 by rpki-client