$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: 5fnwz60gQy41Qf0uTNeTZ1MMiENj6anrGWDPKaRuyeQ= Subject key identifier: 56:E4:0B:4E:50:56:F5:0A:3E:C6:FB:C8:D4:67:2F:8D:FE:6B:FD:07 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 34C9 Signing time: Sun 20 Jul 2025 14:46:40 +0000 Manifest this update: Sun 20 Jul 2025 14:46:40 +0000 Manifest next update: Sun 27 Jul 2025 14:46:40 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: AA3Nx3vgN4cNN4VEXd3UuZgld3ErXfF/iZRJjXfp3gg=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Jul 20 14:46:40 2025 GMT Not After : Jul 27 14:46:40 2025 GMT Subject: CN=687d0150-687b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:12:1f:d4:9e:93:cc:c7:95:83:3e:86:fc: a6:39:af:b8:a3:cf:94:8a:62:f7:dc:48:0a:b8:e5: 80:9e:c5:33:34:a5:5c:44:96:20:c9:a5:43:39:70: 2b:2f:21:fb:48:3f:15:78:83:21:47:df:b8:17:e1: 43:8e:a6:ee:36:ed:52:f2:f2:54:ea:af:e7:31:f3: 3a:90:e8:fd:bc:74:4d:09:67:6a:70:49:14:8b:3a: 84:81:70:bb:1d:3f:7b:04:f8:5c:4b:81:c5:37:4a: 4c:c4:70:21:18:2f:7a:39:b9:88:bd:3f:ae:fa:16: fc:3d:b3:4c:d0:4f:53:57:24:41:8e:28:32:55:ef: 55:96:91:8b:79:04:7d:5d:1a:c7:40:90:9f:fa:1f: a3:d7:cb:c2:ea:1c:26:90:fe:b9:ff:6f:9f:9f:d0: 0d:f8:9d:8a:60:16:d2:7a:9d:80:82:bf:2f:86:64: 2f:5d:cf:99:7a:68:98:38:41:18:97:60:53:27:48: cc:06:72:60:ba:06:0b:eb:64:63:32:e6:2a:d8:d2: ff:7d:9b:75:ee:66:b5:4c:76:a6:b5:68:a1:0b:28: 01:bf:02:ad:f0:8a:d1:44:6e:79:85:c2:eb:b6:c3: b0:34:00:2c:50:c6:a4:9b:73:bb:f5:8a:96:7e:f9: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E4:0B:4E:50:56:F5:0A:3E:C6:FB:C8:D4:67:2F:8D:FE:6B:FD:07 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:48:91:13:1c:d7:da:2c:61:2f:62:28:0e:68:93:bc:74:84: 5e:05:e0:87:ce:c4:e2:c1:54:0a:32:d2:f1:18:e9:9a:ce:e8: d9:95:a0:ee:66:e1:5f:0d:fc:20:86:65:1a:7d:0c:a1:3f:75: 48:ef:45:cd:fb:5d:9e:0b:fb:9b:43:f9:9b:c3:58:64:a8:75: 40:1d:7c:aa:b1:e9:14:1b:6c:33:24:a6:89:27:e8:28:9f:68: 2b:6e:1c:5c:10:92:17:e1:17:62:60:8d:30:b5:fd:23:e1:8d: 38:f7:3b:fc:9c:db:f5:0f:ff:3f:a1:2e:f0:8b:c2:50:e9:b3: 6d:2b:6a:b7:8f:78:b8:14:ac:6e:24:3f:2b:12:ce:3b:02:5d: c6:8c:2f:fb:47:1a:f4:9f:83:ab:ae:27:9c:1d:c4:d6:fe:c4: 37:1a:61:ef:f4:1f:84:5b:22:6c:55:b6:5d:74:64:d2:61:69: 72:f8:81:34:35:e7:3f:62:21:63:78:6d:2c:f3:04:22:58:59: 1f:f9:d5:9c:80:ef:70:38:ae:4d:c0:45:e2:3d:eb:c1:fb:41: cd:ec:aa:18:f5:f6:31:95:e7:8a:1b:22:34:05:06:55:fe:0f: 04:42:e1:b4:c1:1b:69:3b:c5:95:63:3e:58:dc:01:12:a3:e4: 72:a7:02:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUwNzIwMTQ0NjQwWhcNMjUwNzI3MTQ0NjQwWjAYMRYwFAYD VQQDEw02ODdkMDE1MC02ODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1akSH9Sek8zHlYM+hvymOa+4o8+UimL33EgKuOWAnsUzNKVcRJYgyaVDOXAr LyH7SD8VeIMhR9+4F+FDjqbuNu1S8vJU6q/nMfM6kOj9vHRNCWdqcEkUizqEgXC7 HT97BPhcS4HFN0pMxHAhGC96ObmIvT+u+hb8PbNM0E9TVyRBjigyVe9VlpGLeQR9 XRrHQJCf+h+j18vC6hwmkP65/2+fn9AN+J2KYBbSep2Agr8vhmQvXc+ZemiYOEEY l2BTJ0jMBnJgugYL62RjMuYq2NL/fZt17ma1THamtWihCygBvwKt8IrRRG55hcLr tsOwNAAsUMakm3O79YqWfvn0jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbkC05Q VvUKPsb7yNRnL43+a/0HMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxSJETHNfaLGEvYigOaJO8dIReBeCHzsTiwVQKMtLxGOmazujZlaDu ZuFfDfwghmUafQyhP3VI70XN+12eC/ubQ/mbw1hkqHVAHXyqsekUG2wzJKaJJ+go n2grbhxcEJIX4RdiYI0wtf0j4Y049zv8nNv1D/8/oS7wi8JQ6bNtK2q3j3i4FKxu JD8rEs47Al3GjC/7Rxr0n4OrriecHcTW/sQ3GmHv9B+EWyJsVbZddGTSYWly+IE0 Nec/YiFjeG0s8wQiWFkf+dWcgO9wOK5NwEXiPevB+0HN7KoY9fYxleeKGyI0BQZV /g8EQuG0wRtpO8WVYz5Y3AESo+RypwLx -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:43 2025 by rpki-client