$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: 43/GvhsRE33idIPzJVk4W0FHpmFSlBnaCgZU3IhKLYw= Subject key identifier: 72:58:68:A1:4B:FB:39:0A:79:8E:61:4F:EE:1C:C8:BF:AD:D3:B2:34 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 01D1 Signing time: Mon 21 Jul 2025 02:56:53 +0000 Manifest this update: Mon 21 Jul 2025 02:56:53 +0000 Manifest next update: Mon 28 Jul 2025 02:56:53 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: nlhsVNMaY3X346c+p+oyZY0EiwcgvTmRAkoHn4Z4wYk=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: agT8B/KOnCHYQpfkAexNJsFp5T4PhjfgQqzkODGUs5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Jul 21 02:56:53 2025 GMT Not After : Jul 28 02:56:53 2025 GMT Subject: CN=687dac75-77e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:27:7c:50:58:c9:29:df:20:59:eb:e2:87: 73:e7:4a:8e:dd:c9:f3:b6:76:0a:4d:96:8f:b8:bd: 93:a1:4a:1f:6c:25:81:68:2d:ca:85:71:9e:45:94: e5:d5:11:a1:3e:53:22:82:37:c8:e6:c0:90:e6:7a: 1e:33:4f:f2:43:24:d0:12:83:e9:6c:4e:db:6e:5b: 62:cf:9c:4b:fe:be:7d:42:bb:70:8c:81:f3:aa:1b: 29:3a:96:d3:54:9f:ac:e3:d8:c4:ff:62:94:88:fe: 42:ef:ba:39:fd:f4:23:8b:19:32:e5:11:f7:92:54: 7b:30:c0:f6:3a:61:ef:53:82:21:bc:e0:e7:fd:ac: af:32:3b:41:06:ae:62:e7:4f:52:98:ac:fa:7d:5f: da:7a:62:69:28:cc:7c:e6:ff:42:d3:c6:a3:8c:f4: 23:8b:a1:c7:d3:17:d9:3f:20:c5:ce:6a:98:15:f6: 66:3d:f7:ea:6c:f6:9f:05:89:7c:cd:6d:b2:3f:d0: 1e:31:f1:65:b5:30:4d:7a:02:3d:99:b0:a0:bf:58: 80:51:3e:42:28:16:51:b8:cb:aa:00:d3:6c:c7:51: e9:d1:26:09:75:82:fb:1b:da:ea:16:33:fe:56:4b: 4e:7d:4e:68:35:ac:88:76:ee:a9:d7:07:e2:2a:62: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:58:68:A1:4B:FB:39:0A:79:8E:61:4F:EE:1C:C8:BF:AD:D3:B2:34 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:44:5d:c3:a0:47:65:2f:f8:ba:f1:c5:86:d9:f5:3e:98:19: 65:cd:b9:c7:54:0e:17:49:54:0a:7f:8c:cd:8c:4b:b9:0c:70: 0a:9e:0f:c7:19:4a:86:e0:d0:a0:38:4a:ee:ea:23:d8:35:c0: 96:34:49:b2:53:40:db:fd:59:5a:92:c5:7f:5d:6b:1c:1e:1b: d1:b3:b2:6c:92:8d:95:94:34:82:08:b4:1a:b3:9c:46:98:c7: e2:43:51:dc:48:d5:33:6f:1b:51:83:24:73:a5:94:a4:f3:40: 3b:1b:e0:8d:87:19:4b:21:27:29:51:52:6d:dc:fc:b2:b0:a1: 6c:1d:21:a7:42:4e:96:77:bf:6b:1a:05:0b:46:d9:a3:0d:bb: 57:92:3c:f7:5b:24:9d:45:38:7b:be:4b:34:0d:af:99:36:1f: 2f:0a:08:a8:f6:ac:c1:8d:c3:cd:23:8e:88:8d:6a:dd:d0:bd: 68:5e:06:ec:b8:28:7f:92:62:3a:43:35:aa:1d:76:91:2d:ec: 98:3f:3b:21:cf:cc:c0:e3:20:83:43:fc:11:2f:91:02:d0:a8: c2:2e:6d:02:dc:52:43:21:db:78:6f:67:06:6f:b0:93:1a:99: b2:ca:88:ec:9d:f0:1f:8a:78:63:87:d6:8d:84:b6:c7:31:16: 4d:70:ac:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjUwNzIxMDI1NjUzWhcNMjUwNzI4MDI1NjUzWjAYMRYwFAYD VQQDEw02ODdkYWM3NS03N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rcnfFBYySnfIFnr4odz50qO3cnztnYKTZaPuL2ToUofbCWBaC3KhXGeRZTl 1RGhPlMigjfI5sCQ5noeM0/yQyTQEoPpbE7bbltiz5xL/r59QrtwjIHzqhspOpbT VJ+s49jE/2KUiP5C77o5/fQjixky5RH3klR7MMD2OmHvU4IhvODn/ayvMjtBBq5i 509SmKz6fV/aemJpKMx85v9C08ajjPQji6HH0xfZPyDFzmqYFfZmPffqbPafBYl8 zW2yP9AeMfFltTBNegI9mbCgv1iAUT5CKBZRuMuqANNsx1Hp0SYJdYL7G9rqFjP+ VktOfU5oNayIdu6p1wfiKmI8bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJYaKFL +zkKeY5hT+4cyL+t07I0MB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjRF3DoEdlL/i68cWG2fU+mBllzbnHVA4XSVQKf4zNjEu5DHAKng/H GUqG4NCgOEru6iPYNcCWNEmyU0Db/VlaksV/XWscHhvRs7Jsko2VlDSCCLQas5xG mMfiQ1HcSNUzbxtRgyRzpZSk80A7G+CNhxlLIScpUVJt3PyysKFsHSGnQk6Wd79r GgULRtmjDbtXkjz3WySdRTh7vks0Da+ZNh8vCgio9qzBjcPNI46IjWrd0L1oXgbs uCh/kmI6QzWqHXaRLeyYPzshz8zA4yCDQ/wRL5EC0KjCLm0C3FJDIdt4b2cGb7CT GpmyyojsnfAfinhjh9aNhLbHMRZNcKwG -----END CERTIFICATE-----Generated at Mon Jul 21 05:45:17 2025 by rpki-client