$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: cFYwlv7SiijvVg+33XlKGq9RaTKdRmG6z3J2iI2ve8E= Subject key identifier: 11:35:93:BA:BF:27:E4:7E:7C:97:28:2D:DC:04:CD:98:4B:15:BC:5B Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06D9 Signing time: Thu 24 Jul 2025 22:44:15 +0000 Manifest this update: Thu 24 Jul 2025 22:44:15 +0000 Manifest next update: Thu 31 Jul 2025 22:44:15 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: ZEsn4KAfzzMPRb0m5bmtJEeh8/46xgYoZjErIub63Qk=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Jul 24 22:44:15 2025 GMT Not After : Jul 31 22:44:15 2025 GMT Subject: CN=6882b73f-de6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:de:2f:5d:7c:16:5d:3d:57:70:42:28:73: 77:9d:25:9f:d7:a5:7a:05:a2:66:c3:ee:04:d3:a6: 0c:3f:a8:a3:ed:a4:44:26:dc:dc:d5:bf:f2:85:c9: 49:1c:4d:60:ca:27:c6:d4:e6:e2:e3:2a:7e:e6:37: 3c:c1:5b:69:40:d4:09:26:46:a2:b2:85:29:6d:96: 0f:9b:04:84:0a:6b:ab:5a:65:be:66:e6:69:2c:ab: 00:6a:c9:49:32:9a:ec:bb:db:72:ae:58:ba:28:9f: be:24:80:9c:d8:28:d8:32:fa:e7:06:41:b1:1c:27: f6:19:5e:b7:d9:37:34:1b:6f:54:40:2e:86:44:d3: b6:cd:c6:27:cd:7a:96:3d:ef:8d:0a:77:8c:2f:07: b6:34:f0:10:c5:8e:9d:4b:2b:eb:e8:0e:d0:86:ee: 68:9a:77:b0:2c:b7:5b:76:1d:ab:3b:60:ec:dd:57: 4b:12:c4:6c:0c:79:d5:55:b6:39:84:f7:05:3a:7b: 67:74:af:cd:8d:7e:f2:03:16:de:c1:57:ad:00:c4: 28:ed:aa:10:9a:df:45:66:be:81:00:26:f1:87:22: 5f:35:48:56:ec:81:07:e6:31:7f:47:0b:c9:51:b5: fc:b8:a4:ec:83:48:ea:9a:d5:9b:04:5c:1e:81:2b: b6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:35:93:BA:BF:27:E4:7E:7C:97:28:2D:DC:04:CD:98:4B:15:BC:5B X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:0f:17:f6:04:f9:42:4f:5e:b4:5d:1c:12:a3:ab:25:3a:cc: 6f:dc:4a:ef:88:62:99:b1:a7:ae:05:22:c1:75:51:df:5e:0a: 46:6d:38:e9:dd:b9:2d:52:0f:b3:97:5e:fc:6f:d4:05:e5:c5: 82:9e:0a:d5:49:ea:98:13:2c:90:62:1d:28:65:00:48:8a:27: a7:71:ea:89:6b:e6:02:b5:51:0a:9d:f3:1f:27:48:76:c7:80: 75:ee:8e:ed:c8:99:17:15:93:97:6e:64:c1:39:d6:5e:85:e1: fb:bd:9b:c8:7b:78:41:f4:28:c6:3c:1e:e6:62:0a:04:ee:d9: 90:e8:74:9a:eb:9e:94:31:01:00:3d:fa:7a:f0:9b:d1:34:9c: 2f:e6:cb:f0:2b:c5:eb:db:f0:7e:1a:b7:f7:f4:2d:55:70:f7: f5:c3:bc:c6:a0:5c:b4:2b:80:72:23:b6:a7:24:7a:b6:46:44: 4c:ef:a5:89:eb:dd:d9:39:92:05:be:37:f9:cc:92:f0:e6:e9: 05:25:d0:c0:5d:59:a6:45:0b:8d:b3:b4:3f:1f:a0:c1:87:41: e5:19:25:97:61:57:eb:05:52:63:6d:91:c0:f8:e7:ab:a2:b1: e2:21:f8:09:3b:d7:96:b3:ac:ed:51:eb:9d:77:53:72:b3:16: 77:54:d1:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwNzI0MjI0NDE1WhcNMjUwNzMxMjI0NDE1WjAYMRYwFAYD VQQDEw02ODgyYjczZi1kZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlXeL118Fl09V3BCKHN3nSWf16V6BaJmw+4E06YMP6ij7aREJtzc1b/yhclJ HE1gyifG1Obi4yp+5jc8wVtpQNQJJkaisoUpbZYPmwSECmurWmW+ZuZpLKsAaslJ Mprsu9tyrli6KJ++JICc2CjYMvrnBkGxHCf2GV632Tc0G29UQC6GRNO2zcYnzXqW Pe+NCneMLwe2NPAQxY6dSyvr6A7Qhu5omnewLLdbdh2rO2Ds3VdLEsRsDHnVVbY5 hPcFOntndK/NjX7yAxbewVetAMQo7aoQmt9FZr6BACbxhyJfNUhW7IEH5jF/RwvJ UbX8uKTsg0jqmtWbBFwegSu2mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE1k7q/ J+R+fJcoLdwEzZhLFbxbMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Dxf2BPlCT160XRwSo6slOsxv3ErviGKZsaeuBSLBdVHfXgpGbTjp 3bktUg+zl178b9QF5cWCngrVSeqYEyyQYh0oZQBIiienceqJa+YCtVEKnfMfJ0h2 x4B17o7tyJkXFZOXbmTBOdZeheH7vZvIe3hB9CjGPB7mYgoE7tmQ6HSa656UMQEA Pfp68JvRNJwv5svwK8Xr2/B+Grf39C1VcPf1w7zGoFy0K4ByI7anJHq2RkRM76WJ 693ZOZIFvjf5zJLw5ukFJdDAXVmmRQuNs7Q/H6DBh0HlGSWXYVfrBVJjbZHA+Oer orHiIfgJO9eWs6ztUeudd1NysxZ3VNEY -----END CERTIFICATE-----Generated at Sat Jul 26 02:05:31 2025 by rpki-client