$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: DzCJrm082R3RD04rIq7fHQzzQLoDEUZUlI2uM1XGjU0= Subject key identifier: C6:79:40:7A:A2:39:E2:B0:12:75:20:61:98:20:3B:7D:D1:06:A8:EE Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06D8 Signing time: Tue 22 Jul 2025 22:47:08 +0000 Manifest this update: Tue 22 Jul 2025 22:47:08 +0000 Manifest next update: Tue 29 Jul 2025 22:47:08 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: ZVwJf03XMt5Egx8ahmOD3sbgFChjYYj3nk+EN5c9x5M=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Jul 22 22:47:08 2025 GMT Not After : Jul 29 22:47:08 2025 GMT Subject: CN=688014ec-ef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:4a:40:e7:1f:b5:83:77:71:b8:ac:cf:c4: 4a:b4:38:8f:5d:4c:9c:3d:94:28:ca:a1:8e:e5:ea: 01:b6:b1:17:ba:4f:8b:61:43:ed:dd:2e:ab:21:46: cf:22:d3:2d:84:19:f4:37:8a:2b:eb:ec:f5:4a:f4: 8b:21:cb:a5:32:b9:33:18:cb:f3:a1:7b:9e:48:e2: dd:8c:69:fe:52:c4:be:ee:10:55:a0:93:88:90:bf: 37:36:b3:51:7a:9a:a8:eb:0f:4f:bc:4b:dc:f8:86: 62:32:bd:b3:03:94:3b:53:09:69:80:fb:ae:6a:27: 6b:3c:d7:b0:84:e4:a7:2b:62:da:ef:ad:57:62:8c: 6a:b6:9a:f6:b8:bc:66:36:e9:cd:fd:4a:eb:ca:5c: 41:2d:a6:08:4c:d5:8c:2c:97:d0:e9:13:71:3e:4e: 75:2f:52:96:45:47:5e:4a:5a:ed:04:d0:f9:8c:ed: 85:5c:90:37:a8:66:42:fd:c4:25:d0:ec:3c:02:5f: b5:68:b0:52:21:96:4c:ff:4a:be:86:06:d4:30:36: 06:b1:1a:81:6a:5f:76:d8:03:b8:72:fd:0d:0b:db: 34:67:40:5d:72:f0:a4:f9:e4:f2:39:21:4d:e8:e4: c6:7f:b1:db:be:87:ac:d4:87:66:29:21:36:45:20: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:79:40:7A:A2:39:E2:B0:12:75:20:61:98:20:3B:7D:D1:06:A8:EE X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:85:81:50:1c:0e:0f:43:e0:27:b2:fe:01:ea:1c:50:29:35: 8a:2a:b8:61:92:4a:a3:0c:a0:30:03:fc:0e:bc:b2:07:87:10: 7a:ce:5d:30:6e:8f:07:a6:0e:0b:70:61:c2:6d:38:30:65:e7: 78:e1:7f:96:99:a1:fa:64:b7:b8:05:57:31:03:98:cb:7f:cb: ec:86:21:0e:18:a4:6f:91:44:86:2e:f9:f3:3f:01:f4:23:71: 06:16:87:a5:4d:ee:bf:c1:c6:5a:ee:00:c0:e6:a8:48:d5:8b: 2e:21:00:91:75:b6:de:55:28:c1:4a:7f:e2:6e:6a:c2:c9:58: 2b:e6:a5:ee:01:f1:f9:5c:67:fd:aa:87:13:c4:c7:96:0c:a2: 16:e9:4e:63:f7:70:e7:24:fa:d3:94:9b:90:32:d9:1f:dd:77: c3:a1:7e:64:78:b3:c2:a7:e6:e8:e0:57:59:a4:af:9a:34:31: 95:aa:72:b3:6a:f9:41:53:e0:93:31:9a:da:ce:ed:57:7b:5a: c8:64:f6:63:59:40:39:37:f9:40:18:2a:14:68:37:0b:0e:93: b5:52:be:ad:0b:16:70:2a:93:65:7d:0e:ed:cf:8f:f5:d7:d1: ea:52:f1:28:11:c0:a6:8d:a6:52:f2:23:a7:64:4f:82:34:1c: 68:b2:b5:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwNzIyMjI0NzA4WhcNMjUwNzI5MjI0NzA4WjAYMRYwFAYD VQQDEw02ODgwMTRlYy1lZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL5KQOcftYN3cbisz8RKtDiPXUycPZQoyqGO5eoBtrEXuk+LYUPt3S6rIUbP ItMthBn0N4or6+z1SvSLIculMrkzGMvzoXueSOLdjGn+UsS+7hBVoJOIkL83NrNR epqo6w9PvEvc+IZiMr2zA5Q7UwlpgPuuaidrPNewhOSnK2La761XYoxqtpr2uLxm NunN/UrrylxBLaYITNWMLJfQ6RNxPk51L1KWRUdeSlrtBND5jO2FXJA3qGZC/cQl 0Ow8Al+1aLBSIZZM/0q+hgbUMDYGsRqBal922AO4cv0NC9s0Z0BdcvCk+eTyOSFN 6OTGf7Hbvoes1IdmKSE2RSC7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ5QHqi OeKwEnUgYZggO33RBqjuMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNhYFQHA4PQ+Ansv4B6hxQKTWKKrhhkkqjDKAwA/wOvLIHhxB6zl0w bo8Hpg4LcGHCbTgwZed44X+WmaH6ZLe4BVcxA5jLf8vshiEOGKRvkUSGLvnzPwH0 I3EGFoelTe6/wcZa7gDA5qhI1YsuIQCRdbbeVSjBSn/ibmrCyVgr5qXuAfH5XGf9 qocTxMeWDKIW6U5j93DnJPrTlJuQMtkf3XfDoX5keLPCp+bo4FdZpK+aNDGVqnKz avlBU+CTMZrazu1Xe1rIZPZjWUA5N/lAGCoUaDcLDpO1Ur6tCxZwKpNlfQ7tz4/1 19HqUvEoEcCmjaZS8iOnZE+CNBxosrUZ -----END CERTIFICATE-----Generated at Thu Jul 24 05:06:16 2025 by rpki-client