$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: HaO8LxJ3xLaoYhtL+37HWPClrcfu1cfEkF5jGpgo1WA= Subject key identifier: 58:A3:1D:12:4C:03:C5:6B:8D:E0:70:0C:DA:B2:0B:A9:35:0D:6A:1D Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 24BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 24A3 Signing time: Fri 18 Jul 2025 15:52:56 +0000 Manifest this update: Fri 18 Jul 2025 15:52:55 +0000 Manifest next update: Fri 25 Jul 2025 15:52:55 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: f8CBCAr5pOD2uwJixoxtJybwMTZtQI8KcGpvEQCLbrs=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9405 (0x24bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Jul 18 15:52:55 2025 GMT Not After : Jul 25 15:52:55 2025 GMT Subject: CN=687a6dd7-babd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:8c:c3:2e:ca:08:e9:3f:0b:3f:78:3c:98: dd:a4:68:2d:3c:95:f6:06:1e:4b:06:c1:8e:84:50: 87:54:6e:7b:39:d6:f6:82:ad:2b:8f:ea:74:a3:ef: 37:17:9b:7a:75:13:df:7f:9d:1f:bd:0a:bf:e4:cf: af:7f:4d:d5:64:e8:df:6d:44:df:ea:3d:ae:f5:90: c1:a4:d7:23:ce:63:ff:bf:65:4f:63:5b:80:b9:a7: e2:24:14:f0:ed:10:8f:4e:76:b9:9e:60:9a:97:48: 7b:f1:31:3b:24:1d:fb:da:e4:66:94:ca:da:f1:5b: 8d:1c:c0:0a:e9:78:22:ca:96:94:17:e4:dc:ca:ec: bd:dc:dc:13:7f:bb:6a:c9:30:15:d8:65:05:11:4c: 28:13:fa:61:f2:72:5f:a6:9a:25:78:e3:ef:0e:0e: 77:0e:1f:37:81:4f:89:95:a1:f4:16:13:5c:49:ed: 62:08:f1:18:c9:6f:4d:53:f2:61:af:ca:1f:54:53: f7:cb:5d:49:c9:86:e8:83:26:58:6d:29:e1:be:1c: ca:a5:e3:84:ac:65:41:27:b6:9f:53:3f:82:06:1b: 17:be:ba:13:55:d8:92:cd:72:fb:55:37:5b:ae:0e: 25:03:de:15:e0:6c:dc:69:21:c8:25:5f:b9:f6:51: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:1D:12:4C:03:C5:6B:8D:E0:70:0C:DA:B2:0B:A9:35:0D:6A:1D X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:21:d7:45:21:a6:d4:cc:2b:de:81:a9:9c:d2:07:f4:61:a5: 50:ab:67:98:52:04:1d:2d:88:52:81:ce:ae:77:ab:a3:34:bf: 22:86:da:43:25:3d:f8:13:7a:fb:8c:ca:a7:ba:e0:35:70:66: 68:38:0e:5d:73:c9:29:e5:20:e2:e8:17:9c:4b:5a:a6:fa:e6: 84:94:c0:50:7d:85:ed:0a:d9:63:0c:ae:44:86:8d:ed:1b:42: 5b:e7:dc:20:5a:e9:23:8f:de:91:f9:ee:13:74:c1:cf:a3:be: e4:9f:86:2a:53:1f:e7:bd:b5:2e:32:a1:bf:34:4b:17:d5:f3: 47:33:20:b4:29:9d:1c:5e:03:02:4b:04:84:51:d4:21:03:7b: 3e:86:c4:94:82:c6:d5:47:d7:c7:16:64:95:8c:5c:59:be:9e: 0d:cc:d4:ec:ad:c8:b1:2c:39:55:fb:10:2f:9a:d2:5b:c2:e3: 2c:6b:b5:a5:4b:ec:bc:4d:e7:62:43:74:12:d1:20:89:ca:64: cf:b6:f7:12:59:46:4b:b0:eb:a7:b5:15:13:7e:7e:7e:62:f3: 01:24:14:69:38:a6:d0:d0:29:1a:8f:9a:47:d9:00:27:4c:9a: 61:9f:ef:91:7c:ff:ac:5f:d7:55:0a:5c:41:c3:82:fd:1a:c2: fe:b1:a5:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjUwNzE4MTU1MjU1WhcNMjUwNzI1MTU1MjU1WjAYMRYwFAYD VQQDEw02ODdhNmRkNy1iYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFiMwy7KCOk/Cz94PJjdpGgtPJX2Bh5LBsGOhFCHVG57Odb2gq0rj+p0o+83 F5t6dRPff50fvQq/5M+vf03VZOjfbUTf6j2u9ZDBpNcjzmP/v2VPY1uAuafiJBTw 7RCPTna5nmCal0h78TE7JB372uRmlMra8VuNHMAK6XgiypaUF+Tcyuy93NwTf7tq yTAV2GUFEUwoE/ph8nJfppoleOPvDg53Dh83gU+JlaH0FhNcSe1iCPEYyW9NU/Jh r8ofVFP3y11JyYbogyZYbSnhvhzKpeOErGVBJ7afUz+CBhsXvroTVdiSzXL7VTdb rg4lA94V4GzcaSHIJV+59lEHvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFijHRJM A8VrjeBwDNqyC6k1DWodMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjIddFIabUzCvegamc0gf0YaVQq2eYUgQdLYhSgc6ud6ujNL8ihtpD JT34E3r7jMqnuuA1cGZoOA5dc8kp5SDi6BecS1qm+uaElMBQfYXtCtljDK5Eho3t G0Jb59wgWukjj96R+e4TdMHPo77kn4YqUx/nvbUuMqG/NEsX1fNHMyC0KZ0cXgMC SwSEUdQhA3s+hsSUgsbVR9fHFmSVjFxZvp4NzNTsrcixLDlV+xAvmtJbwuMsa7Wl S+y8TediQ3QS0SCJymTPtvcSWUZLsOuntRUTfn5+YvMBJBRpOKbQ0Ckaj5pH2QAn TJphn++RfP+sX9dVClxBw4L9GsL+saXA -----END CERTIFICATE-----Generated at Sun Jul 20 10:57:11 2025 by rpki-client