$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: 7IQte/hUssbN8u2UOEFlbA1K74gMSE1I1YgAqmK0rAk= Subject key identifier: 00:3B:94:D4:68:F8:B8:85:34:BE:4B:56:E5:C7:75:5B:26:EA:3A:39 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 74 Signing time: Sat 19 Jul 2025 07:04:32 +0000 Manifest this update: Sat 19 Jul 2025 07:04:32 +0000 Manifest next update: Sat 26 Jul 2025 07:04:32 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: axiQi6kR6ufY9RsnJp+d7rOP+APilrwdIHHHc2Yt1is=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Jul 19 07:04:32 2025 GMT Not After : Jul 26 07:04:32 2025 GMT Subject: CN=687b4380-4fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:08:b3:8f:e9:31:46:16:17:f8:1f:94:0f: 77:bc:89:a1:61:5a:dc:4e:09:9c:06:30:3b:f6:21: 79:d5:89:70:cc:aa:81:42:d1:98:e0:1a:ed:da:40: 33:e2:32:d6:99:be:27:3f:03:d2:18:a4:5a:d2:1a: dc:0f:a4:18:32:08:c7:d8:c6:82:22:fd:3e:46:49: 0d:d8:86:4f:d4:ad:b4:ac:c5:8e:97:8c:62:eb:ae: ce:4d:2b:83:7c:88:f4:d1:d4:f4:0c:dd:0c:e1:0f: 24:3d:1c:af:df:30:e1:c7:bf:73:fc:c0:40:68:d2: f2:77:96:f2:ef:c1:08:1d:65:9e:9a:9c:cc:2e:c6: 17:d3:d1:eb:76:65:4d:4d:3b:69:ab:37:8c:13:6d: 6f:b8:40:e2:7f:4e:f3:11:91:a0:ca:42:f1:02:35: dd:9f:35:bb:26:72:4b:1f:ec:39:82:82:74:3a:07: 2d:d2:26:62:5c:56:17:8a:c3:a5:14:66:26:0c:24: 13:4b:d6:5e:48:c5:f3:88:d5:8f:9c:bc:b8:a5:71: d7:e8:92:d6:fd:67:0c:2a:01:0f:97:ef:5d:5e:e8: 56:5c:b2:b9:bd:08:ad:c5:cd:5d:6d:13:0b:1e:02: e4:88:c6:28:57:6f:6f:eb:29:e3:7e:32:fa:92:ab: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:94:D4:68:F8:B8:85:34:BE:4B:56:E5:C7:75:5B:26:EA:3A:39 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:36:7d:f0:d4:25:65:b2:5d:e9:6b:a8:ac:b2:b2:13:44:a7: a0:41:61:71:2f:38:ad:54:5e:9b:23:b3:30:d0:5d:af:1d:26: d9:d4:de:d5:9e:f4:b1:4f:85:38:19:e0:cb:6a:3a:b6:1e:52: 3c:02:d3:de:84:ef:2c:da:7e:e6:76:58:80:1f:42:a8:22:62: 31:91:e0:26:99:b4:57:4d:ec:c5:2a:f4:1f:e2:fa:a9:b7:ae: 7f:a8:4b:cc:46:5d:88:c1:49:3a:9c:1e:4a:d3:0f:ec:c5:7a: bb:fc:b5:26:9d:8b:c8:94:87:01:78:d9:fe:d6:83:21:b8:c8: 6b:10:20:81:02:23:b1:07:dd:c1:83:61:20:41:52:42:a0:56: 6e:8e:15:2e:68:c5:0d:f2:2d:92:72:92:e8:51:97:b3:a9:a7: 1d:32:38:d7:97:a4:ce:4a:42:f7:d2:c0:fa:44:ba:7d:16:ca: 22:4e:2f:71:05:9f:d3:13:b5:2d:12:fb:30:08:c9:e8:6c:50: 08:e9:62:65:31:82:0e:59:98:2d:ab:9d:28:62:cd:b0:02:5c: 20:70:91:e2:35:9b:34:c5:d0:fc:05:0c:d2:d8:b8:1d:8b:ad: ec:fe:7f:0e:90:12:ff:58:de:f3:b1:d9:c2:29:02:19:18:98: fe:75:70:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNTA3MTkwNzA0MzJaFw0yNTA3MjYwNzA0MzJaMBgxFjAUBgNV BAMTDTY4N2I0MzgwLTRmYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7cAizj+kxRhYX+B+UD3e8iaFhWtxOCZwGMDv2IXnViXDMqoFC0ZjgGu3aQDPi MtaZvic/A9IYpFrSGtwPpBgyCMfYxoIi/T5GSQ3Yhk/UrbSsxY6XjGLrrs5NK4N8 iPTR1PQM3QzhDyQ9HK/fMOHHv3P8wEBo0vJ3lvLvwQgdZZ6anMwuxhfT0et2ZU1N O2mrN4wTbW+4QOJ/TvMRkaDKQvECNd2fNbsmcksf7DmCgnQ6By3SJmJcVheKw6UU ZiYMJBNL1l5IxfOI1Y+cvLilcdfoktb9ZwwqAQ+X711e6FZcsrm9CK3FzV1tEwse AuSIxihXb2/rKeN+MvqSq/pnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUADuU1Gj4 uIU0vktW5cd1WybqOjkwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEM2ffDUJWWyXelrqKyyshNEp6BBYXEvOK1UXpsjszDQXa8dJtnU3tWe 9LFPhTgZ4MtqOrYeUjwC096E7yzafuZ2WIAfQqgiYjGR4CaZtFdN7MUq9B/i+qm3 rn+oS8xGXYjBSTqcHkrTD+zFerv8tSadi8iUhwF42f7WgyG4yGsQIIECI7EH3cGD YSBBUkKgVm6OFS5oxQ3yLZJykuhRl7Oppx0yONeXpM5KQvfSwPpEun0WyiJOL3EF n9MTtS0S+zAIyehsUAjpYmUxgg5ZmC2rnShizbACXCBwkeI1mzTF0PwFDNLYuB2L rez+fw6QEv9Y3vOx2cIpAhkYmP51cHs= -----END CERTIFICATE-----Generated at Mon Jul 21 06:52:35 2025 by rpki-client