$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: R40qVtVFmAHP/sVKnPtvb9iT7h/ZQJsVWn07KBkCSeY= Subject key identifier: 24:70:1F:53:A2:D7:D3:5A:26:48:75:69:C9:23:1D:FB:54:27:CB:DB Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06D7 Signing time: Sun 20 Jul 2025 22:36:15 +0000 Manifest this update: Sun 20 Jul 2025 22:36:14 +0000 Manifest next update: Sun 27 Jul 2025 22:36:14 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: iqzq6BRDD0SuwkzlkWtos9x/lLkN5UrXPCsV+N+5SUc=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Jul 20 22:36:14 2025 GMT Not After : Jul 27 22:36:14 2025 GMT Subject: CN=687d6f5f-fdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:95:06:f6:e4:d3:88:2d:c4:4d:12:38:fa: b0:0d:57:db:0d:4e:ba:73:ca:f2:49:4d:d9:1f:a0: cf:1a:75:58:ea:0f:c5:49:64:c2:3f:cb:8c:ad:19: ec:e4:d1:ed:a6:8b:9e:d8:ee:b4:8b:7e:8a:63:d8: 97:bf:f3:19:10:ab:78:5a:19:03:f5:3b:73:82:b8: 88:f6:c3:7a:0e:3a:88:ce:58:f7:f1:bd:df:28:5b: d4:01:32:39:3d:e0:06:6c:1d:1d:d4:43:32:30:1a: c1:c8:7d:f8:4e:ad:10:c3:ad:28:39:1e:ca:94:bc: 38:b7:72:4c:cb:62:4e:5e:8a:8f:c5:0f:bd:25:08: 07:2a:e2:3d:2e:30:b4:e9:8b:3f:8f:d2:1f:14:56: b7:bd:e9:ff:0f:bb:05:27:54:ee:2e:5c:8c:d9:42: 59:c4:1d:ac:f9:cf:31:43:8e:3d:a8:46:5f:df:97: 2b:fd:ed:40:01:95:d6:9e:ca:f5:49:79:e9:1b:0b: 0b:45:15:7c:44:aa:bf:94:f7:4a:39:05:c0:3f:0f: aa:3a:fc:1b:44:4c:36:1e:66:14:9b:0c:90:97:81: 7c:69:72:55:60:ca:1f:22:a1:79:0e:f3:6a:9d:f4: c1:9f:02:6b:d3:3f:79:c4:90:b5:9d:e5:c4:69:f9: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:70:1F:53:A2:D7:D3:5A:26:48:75:69:C9:23:1D:FB:54:27:CB:DB X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:42:50:15:94:db:b9:f2:4a:dd:dc:05:23:1c:c7:b5:ba:da: 40:4d:9b:a0:9c:92:50:12:58:42:48:e8:cc:00:9b:00:d1:22: 31:85:af:96:38:b7:71:c0:e5:9c:9a:11:6d:cd:ed:63:18:d5: db:6c:d9:42:d6:86:77:04:d3:b3:b4:d8:df:53:56:23:48:1e: 63:17:65:8a:dc:86:8c:25:be:fc:76:2c:89:bf:4d:2e:b6:89: f4:0f:21:99:2b:d0:e0:aa:c0:bb:93:f9:85:2f:ca:f6:ae:50: 27:2c:f3:26:3b:39:ba:a1:64:ea:4c:03:00:e2:1a:42:a0:5f: 9c:2e:87:c7:74:f8:09:ec:c3:05:4c:bb:cc:57:55:30:56:84: 5a:79:4f:4b:8f:7d:fd:b1:99:f3:8a:44:63:ea:f7:81:ac:c8: dc:b1:f0:19:f9:8d:aa:72:59:e3:86:c0:4c:5e:d2:54:62:9d: 47:40:82:18:af:90:a3:f9:18:ee:71:bb:b7:2a:5b:b8:5e:b5: 89:0e:0b:6b:19:b7:48:a7:b9:36:de:08:51:aa:f3:26:c0:09: f7:13:fd:2a:91:38:9a:e6:68:c0:85:6e:35:59:c3:b9:53:c3: 0d:e8:b8:55:26:46:fe:91:92:aa:78:9e:96:94:80:44:24:78: 5b:12:8c:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwNzIwMjIzNjE0WhcNMjUwNzI3MjIzNjE0WjAYMRYwFAYD VQQDEw02ODdkNmY1Zi1mZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3iVBvbk04gtxE0SOPqwDVfbDU66c8rySU3ZH6DPGnVY6g/FSWTCP8uMrRns 5NHtpoue2O60i36KY9iXv/MZEKt4WhkD9TtzgriI9sN6DjqIzlj38b3fKFvUATI5 PeAGbB0d1EMyMBrByH34Tq0Qw60oOR7KlLw4t3JMy2JOXoqPxQ+9JQgHKuI9LjC0 6Ys/j9IfFFa3ven/D7sFJ1TuLlyM2UJZxB2s+c8xQ449qEZf35cr/e1AAZXWnsr1 SXnpGwsLRRV8RKq/lPdKOQXAPw+qOvwbREw2HmYUmwyQl4F8aXJVYMofIqF5DvNq nfTBnwJr0z95xJC1neXEaflZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRwH1Oi 19NaJkh1ackjHftUJ8vbMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQlAVlNu58krd3AUjHMe1utpATZugnJJQElhCSOjMAJsA0SIxha+W OLdxwOWcmhFtze1jGNXbbNlC1oZ3BNOztNjfU1YjSB5jF2WK3IaMJb78diyJv00u ton0DyGZK9DgqsC7k/mFL8r2rlAnLPMmOzm6oWTqTAMA4hpCoF+cLofHdPgJ7MMF TLvMV1UwVoRaeU9Lj339sZnzikRj6veBrMjcsfAZ+Y2qclnjhsBMXtJUYp1HQIIY r5Cj+Rjucbu3Klu4XrWJDgtrGbdIp7k23ghRqvMmwAn3E/0qkTia5mjAhW41WcO5 U8MN6LhVJkb+kZKqeJ6WlIBEJHhbEozF -----END CERTIFICATE-----Generated at Tue Jul 22 12:32:07 2025 by rpki-client