$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: acvgtFRdnXWYvT41D+NuEc8LANUTFxcdbzw/uk9G8uU= Subject key identifier: 8B:9E:31:C6:CF:6D:DD:C3:A3:0D:06:F7:96:40:37:69:8B:F7:BE:51 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E41 Signing time: Sun 20 Jul 2025 17:48:07 +0000 Manifest this update: Sun 20 Jul 2025 17:48:07 +0000 Manifest next update: Sun 27 Jul 2025 17:48:07 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: nIHARvGmmPNEHKmnfNVtbGWdc58VGj1RYz/LczWyZ2Y=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3663 (0xe4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Jul 20 17:48:07 2025 GMT Not After : Jul 27 17:48:07 2025 GMT Subject: CN=687d2bd7-04b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:2a:4e:14:61:58:02:63:38:34:c7:e0:0b: de:08:32:e6:31:45:6e:d9:79:2f:29:70:ea:51:7e: 52:ed:7e:e5:5e:0f:8a:1f:10:12:a6:a7:64:22:5f: e0:94:76:8a:8d:85:53:b6:43:02:00:ae:d0:d0:77: 74:53:c7:00:f5:6d:b8:53:ba:60:0c:15:0f:d8:47: 7f:36:7c:4b:2f:46:93:ca:6f:4d:c1:40:17:ec:78: 70:92:fa:af:9d:29:35:78:05:68:0c:91:33:15:1c: b1:ee:e1:ed:de:72:b5:a4:fe:1c:5a:56:03:8e:a3: 7d:84:70:6e:6a:04:57:2a:66:52:9e:53:e1:e9:3f: 9f:bc:9d:25:91:08:9a:18:e2:f3:e8:ee:61:d1:a5: 41:5a:7f:1e:14:c9:f8:8e:f8:df:61:17:00:b5:ac: 8b:95:e8:d0:21:78:3d:fb:8b:62:fc:7e:5f:3a:ab: 4a:fa:a3:a6:7a:0b:90:33:76:f9:28:a2:62:aa:a9: c3:50:60:a4:d1:87:08:85:be:ee:0a:0f:1d:92:5a: d4:eb:35:bc:4a:31:b4:a3:1d:c5:6f:a1:7d:04:71: 35:97:b4:28:b6:4d:bd:7c:4f:e5:8c:63:71:bb:73: 75:18:5a:63:d8:8b:4e:cb:c0:12:be:5f:ab:c2:56: da:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9E:31:C6:CF:6D:DD:C3:A3:0D:06:F7:96:40:37:69:8B:F7:BE:51 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:39:b5:da:dd:7f:78:62:4c:0f:8a:c4:1a:d9:8e:04:5a: 96:36:2f:87:50:ae:a9:a2:1a:dd:be:0f:97:09:08:f6:35:a2: 36:cf:dd:51:74:a3:08:62:56:2b:23:0c:d5:f6:d2:6d:64:6c: 1d:28:34:37:c3:08:18:6c:50:37:8d:29:f3:c7:de:06:47:c9: 2e:1d:5c:52:b6:81:e8:c0:c7:5b:1c:8a:08:6f:e6:fb:47:24: 47:03:16:5a:8d:67:eb:4d:3d:5f:8f:28:ae:a8:fe:56:d7:cb: bc:ed:c3:76:04:21:24:8c:ac:60:60:3e:e0:f9:24:c1:be:d6: 6f:3a:1c:e9:a6:68:ae:85:a9:ba:cd:a0:31:2a:f0:c6:d1:e6: 63:a2:74:1f:e5:8e:06:7b:b0:39:78:62:75:3a:70:23:0f:22: e7:af:6c:c4:4f:e4:65:21:e7:1b:69:b5:6f:b3:2b:b5:c8:89: f0:6f:64:65:74:d3:fc:e9:70:45:68:90:b7:1f:b7:92:07:15: 1e:99:75:73:e4:e2:c4:67:1c:3a:d2:f6:29:fb:81:9d:d2:d3: 38:bd:b9:fb:50:7a:71:68:ee:53:01:e1:7b:1b:8c:28:40:a0: ba:be:d7:a9:50:d1:a2:c7:54:f1:d9:d2:9f:c0:07:c3:f9:a2: 9b:6c:55:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUwNzIwMTc0ODA3WhcNMjUwNzI3MTc0ODA3WjAYMRYwFAYD VQQDEw02ODdkMmJkNy0wNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0isqThRhWAJjODTH4AveCDLmMUVu2XkvKXDqUX5S7X7lXg+KHxASpqdkIl/g lHaKjYVTtkMCAK7Q0Hd0U8cA9W24U7pgDBUP2Ed/NnxLL0aTym9NwUAX7Hhwkvqv nSk1eAVoDJEzFRyx7uHt3nK1pP4cWlYDjqN9hHBuagRXKmZSnlPh6T+fvJ0lkQia GOLz6O5h0aVBWn8eFMn4jvjfYRcAtayLlejQIXg9+4ti/H5fOqtK+qOmeguQM3b5 KKJiqqnDUGCk0YcIhb7uCg8dklrU6zW8SjG0ox3Fb6F9BHE1l7Qotk29fE/ljGNx u3N1GFpj2ItOy8ASvl+rwlbaHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIueMcbP bd3Dow0G95ZAN2mL975RMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq0Dm12t1/eGJMD4rEGtmOBFqWNi+HUK6pohrdvg+XCQj2NaI2z91R dKMIYlYrIwzV9tJtZGwdKDQ3wwgYbFA3jSnzx94GR8kuHVxStoHowMdbHIoIb+b7 RyRHAxZajWfrTT1fjyiuqP5W18u87cN2BCEkjKxgYD7g+STBvtZvOhzppmiuham6 zaAxKvDG0eZjonQf5Y4Ge7A5eGJ1OnAjDyLnr2zET+RlIecbabVvsyu1yInwb2Rl dNP86XBFaJC3H7eSBxUemXVz5OLEZxw60vYp+4Gd0tM4vbn7UHpxaO5TAeF7G4wo QKC6vtepUNGix1Tx2dKfwAfD+aKbbFWl -----END CERTIFICATE-----Generated at Mon Jul 21 07:01:27 2025 by rpki-client