$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: eA5uC5hxqEIlHITyYgJBzwxrXyJ76wOJm9HBMHj91NM= Subject key identifier: 9E:E1:CA:5C:E0:CE:E0:B7:09:C4:81:30:98:37:0E:26:8C:40:88:50 Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 07BE Signing time: Fri 18 Jul 2025 21:28:54 +0000 Manifest this update: Fri 18 Jul 2025 21:28:54 +0000 Manifest next update: Fri 25 Jul 2025 21:28:54 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: 0bTY+b8TU5StHlPXJtzdDsO65tjbVnLZlO8Lm2wg9Wg=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: qTxqjLafp1eHZVEFc07aPaguHdK/MmmTaVfaOIj+sXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: Jul 18 21:28:54 2025 GMT Not After : Jul 25 21:28:54 2025 GMT Subject: CN=687abc96-c2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:41:26:0e:79:99:0e:6e:1b:13:37:90:63: 60:4b:2b:c8:74:58:da:5e:c1:cc:2e:c5:d8:45:5d: ba:0b:89:07:10:36:d2:cd:18:8a:1d:74:da:9e:66: 09:4c:09:35:e4:14:c2:e2:44:cd:e8:2d:98:f8:fb: e9:89:e8:2e:04:66:68:b6:e3:96:f3:6a:d8:5d:34: f2:a8:26:e6:4d:8c:ba:5c:19:92:c1:e3:7f:d2:be: 96:5c:8b:f9:c8:a8:a7:1b:eb:6a:37:02:be:c9:d9: 58:39:07:ac:5f:30:56:64:ba:83:9c:d6:c1:3c:23: 8d:4d:73:a9:6d:be:08:e7:6f:2d:4d:d2:fb:f4:3c: 3b:7f:8c:96:9c:2e:95:0c:64:df:b7:5d:a2:cf:12: 35:96:f1:e6:2c:3f:93:74:d1:e2:ba:58:61:e2:28: 14:84:2a:fb:49:9b:9e:d7:63:c7:a5:52:87:7d:83: b1:18:d8:96:43:20:46:77:80:bf:b4:df:e0:04:46: 3d:cd:b4:7d:1d:ca:40:2f:81:ae:0c:04:c6:32:47: 2f:11:d1:9f:e7:5e:c5:37:b9:fb:4d:1f:cc:57:15: 14:ee:d8:12:01:b9:93:05:43:f5:5b:77:57:3a:48: 4a:fb:c1:f4:76:62:aa:71:2a:5b:50:68:4f:91:b4: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E1:CA:5C:E0:CE:E0:B7:09:C4:81:30:98:37:0E:26:8C:40:88:50 X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:43:8b:5f:df:11:ba:d0:36:81:12:84:e4:21:66:cf:ee:20: 53:70:47:b9:9a:cb:90:d1:ac:20:c6:79:d3:a7:65:c0:24:06: 15:c6:c2:7f:28:93:6b:00:33:71:f4:0d:b9:61:66:df:c4:fe: 27:4e:9b:2b:ae:95:59:5f:5f:ce:5d:6b:ed:10:ee:89:d2:99: a7:c1:6d:4e:e5:d2:dc:53:27:0e:4f:22:a8:1c:00:26:be:a3: 27:99:37:13:cc:9b:08:a5:4e:6c:53:4e:3c:27:32:24:35:1f: 35:d4:db:ca:3f:70:9e:f4:2c:13:6d:52:e0:ff:60:d1:60:4d: 04:8f:29:ea:8b:3d:cf:db:5e:a1:51:98:77:b1:68:e5:da:4a: cb:a1:59:e9:f2:22:6e:60:be:24:42:5b:6f:0a:a9:dc:e7:38: 7c:52:07:09:87:5c:3b:bf:d2:7a:25:06:9a:22:2f:50:f3:96: d8:a9:ee:92:31:8a:fd:0d:1f:3c:7d:f5:a9:fb:20:f5:b7:fb: 04:5f:27:f3:9d:f6:44:d4:2b:a2:c2:46:94:c5:6c:55:66:55: f2:f6:f6:2e:9e:14:2c:88:97:5c:9b:05:37:e0:ed:c0:cf:fd: f2:08:b1:ef:7d:43:05:5b:2d:e6:23:4c:80:08:5f:ac:b9:36: d6:b4:55:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjUwNzE4MjEyODU0WhcNMjUwNzI1MjEyODU0WjAYMRYwFAYD VQQDEw02ODdhYmM5Ni1jMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbFBJg55mQ5uGxM3kGNgSyvIdFjaXsHMLsXYRV26C4kHEDbSzRiKHXTanmYJ TAk15BTC4kTN6C2Y+PvpieguBGZotuOW82rYXTTyqCbmTYy6XBmSweN/0r6WXIv5 yKinG+tqNwK+ydlYOQesXzBWZLqDnNbBPCONTXOpbb4I528tTdL79Dw7f4yWnC6V DGTft12izxI1lvHmLD+TdNHiulhh4igUhCr7SZue12PHpVKHfYOxGNiWQyBGd4C/ tN/gBEY9zbR9HcpAL4GuDATGMkcvEdGf517FN7n7TR/MVxUU7tgSAbmTBUP1W3dX OkhK+8H0dmKqcSpbUGhPkbQ2TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7hylzg zuC3CcSBMJg3DiaMQIhQMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZQ4tf3xG60DaBEoTkIWbP7iBTcEe5msuQ0awgxnnTp2XAJAYVxsJ/ KJNrADNx9A25YWbfxP4nTpsrrpVZX1/OXWvtEO6J0pmnwW1O5dLcUycOTyKoHAAm vqMnmTcTzJsIpU5sU048JzIkNR811NvKP3Ce9CwTbVLg/2DRYE0Ejynqiz3P216h UZh3sWjl2krLoVnp8iJuYL4kQltvCqnc5zh8UgcJh1w7v9J6JQaaIi9Q85bYqe6S MYr9DR88ffWp+yD1t/sEXyfznfZE1CuiwkaUxWxVZlXy9vYunhQsiJdcmwU34O3A z/3yCLHvfUMFWy3mI0yACF+suTbWtFV+ -----END CERTIFICATE-----Generated at Sun Jul 20 15:05:27 2025 by rpki-client