$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: R+QEyWNzvghuQ3Ukt4eRDjgmVy2yscc++6IVIuuf8VI= Subject key identifier: 06:D7:AB:5B:56:0F:03:CF:B8:0F:62:7D:9C:5C:41:C2:DF:33:88:B3 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 04FE Signing time: Sat 19 Jul 2025 00:05:50 +0000 Manifest this update: Sat 19 Jul 2025 00:05:50 +0000 Manifest next update: Sat 26 Jul 2025 00:05:50 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: jxPYZqy/M7Gl2hJ6j1CBrA/CpjW2F7uPrm3fE7Mes+M=) 2: 0302AEA644EC11F0A3CAA17CC4F9AE02.roa (hash: 0z1waO+5HW62K3EJHAb4r2vi3xr/GTetqDAZuDYFPrM=) 3: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1301 (0x515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Jul 19 00:05:50 2025 GMT Not After : Jul 26 00:05:50 2025 GMT Subject: CN=687ae15e-fd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:20:02:78:22:0d:cd:3d:18:f2:bb:92:6b: 99:60:0f:56:a3:bb:1c:01:90:89:8b:ec:5e:48:44: 04:bc:4c:93:1b:12:55:28:2a:ea:12:d3:6b:1c:ef: e6:27:c4:43:55:87:97:d4:16:94:fc:6d:09:e2:fa: 2d:a5:ab:1a:e3:63:7c:a8:fc:10:40:e4:cd:a5:8b: df:e0:d0:d7:fc:71:0b:32:27:23:a2:b0:43:2e:04: aa:56:ee:f5:b1:44:4a:e8:da:61:16:1c:6e:7a:92: ea:15:0e:84:8d:87:8d:89:23:68:99:37:78:ac:a8: 06:5a:5f:9a:73:77:dd:1c:f2:03:54:7e:ac:31:5a: 50:8c:76:28:17:9e:ea:3b:b9:a4:eb:02:5b:68:6c: d5:87:8a:7a:f8:ef:1a:4d:95:fa:87:43:28:18:4a: 06:db:35:7b:53:97:43:af:e8:f3:64:d2:de:cc:05: 13:7b:66:d3:ca:68:96:ec:7f:4e:be:30:cf:bb:77: a2:7d:32:59:b7:35:2f:e9:69:b6:ab:7a:36:68:bd: bd:12:ad:fc:16:57:04:c4:07:55:23:e8:9b:da:2f: 2e:6d:b3:9b:08:74:3b:73:f6:cc:05:09:e5:ad:59: 16:4f:b8:a9:6e:67:49:ec:b9:25:70:19:be:67:3c: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D7:AB:5B:56:0F:03:CF:B8:0F:62:7D:9C:5C:41:C2:DF:33:88:B3 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:55:84:41:d8:e3:40:c8:ee:d2:97:d7:41:14:8b:97:4b:7f: b9:18:48:fc:48:c6:b4:37:92:f4:71:2c:3d:1a:01:e4:e4:b8: b6:5e:00:b8:1f:4f:2b:3e:1b:09:e4:2b:e8:39:39:aa:97:67: 70:88:ab:9e:f2:79:57:8a:15:ad:2d:86:0f:5a:37:e5:3a:e2: e8:71:a8:2f:7b:b0:f8:ac:af:2c:38:47:04:55:76:0d:70:9e: ba:0f:c7:e7:64:0d:24:2d:1c:a0:c1:37:5f:d2:af:0f:a8:47: d1:a7:e9:1c:a5:90:67:d0:9b:1c:c7:b6:d7:ea:96:86:d9:14: d3:6c:73:09:e0:77:38:45:4a:6a:f6:35:e1:5f:da:7a:9b:f7: 03:27:db:b5:bb:b2:26:1e:db:28:12:03:4b:2b:f5:69:9c:cd: c1:85:57:05:28:cb:93:2e:09:ee:a0:88:05:06:4d:4f:f4:b5: 62:05:0c:70:51:03:f6:7b:50:d0:cc:90:43:d6:17:27:c7:9c: 42:72:92:bf:87:89:b6:56:23:69:49:58:55:53:8b:a6:2f:1e: 8d:15:e6:29:fc:9f:e8:98:dc:d3:07:fd:07:1e:99:22:eb:b9: f8:90:ea:e5:dd:2d:06:18:06:ee:cc:4e:86:5c:7a:98:65:fa: e5:0c:d4:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUwNzE5MDAwNTUwWhcNMjUwNzI2MDAwNTUwWjAYMRYwFAYD VQQDEw02ODdhZTE1ZS1mZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLcgAngiDc09GPK7kmuZYA9Wo7scAZCJi+xeSEQEvEyTGxJVKCrqEtNrHO/m J8RDVYeX1BaU/G0J4votpasa42N8qPwQQOTNpYvf4NDX/HELMicjorBDLgSqVu71 sURK6NphFhxuepLqFQ6EjYeNiSNomTd4rKgGWl+ac3fdHPIDVH6sMVpQjHYoF57q O7mk6wJbaGzVh4p6+O8aTZX6h0MoGEoG2zV7U5dDr+jzZNLezAUTe2bTymiW7H9O vjDPu3eifTJZtzUv6Wm2q3o2aL29Eq38FlcExAdVI+ib2i8ubbObCHQ7c/bMBQnl rVkWT7ipbmdJ7LklcBm+ZzxOQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbXq1tW DwPPuA9ifZxcQcLfM4izMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLVYRB2ONAyO7Sl9dBFIuXS3+5GEj8SMa0N5L0cSw9GgHk5Li2XgC4 H08rPhsJ5CvoOTmql2dwiKue8nlXihWtLYYPWjflOuLocagve7D4rK8sOEcEVXYN cJ66D8fnZA0kLRygwTdf0q8PqEfRp+kcpZBn0Jscx7bX6paG2RTTbHMJ4Hc4RUpq 9jXhX9p6m/cDJ9u1u7ImHtsoEgNLK/VpnM3BhVcFKMuTLgnuoIgFBk1P9LViBQxw UQP2e1DQzJBD1hcnx5xCcpK/h4m2ViNpSVhVU4umLx6NFeYp/J/omNzTB/0HHpki 67n4kOrl3S0GGAbuzE6GXHqYZfrlDNQu -----END CERTIFICATE-----Generated at Sun Jul 20 11:27:45 2025 by rpki-client