$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: t0aE8IaaDrFFqfE/83TcLglpyIy+sbprA/JjYNJLV/4= Subject key identifier: 53:40:C8:96:93:FB:A6:40:B5:04:7D:49:FD:41:A3:40:24:36:AA:5E Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 0915 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 0906 Signing time: Sun 20 Jul 2025 20:28:14 +0000 Manifest this update: Sun 20 Jul 2025 20:28:13 +0000 Manifest next update: Sun 27 Jul 2025 20:28:13 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: gMnwqEzBEg/8+lWpSrHVerG+rlaAEouZDKKYY5BX00U=) 2: 6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa (hash: u6H4P2TM61hqsziMp+QKQRj8V8OU+PakHeQt/LegiXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2325 (0x915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Jul 20 20:28:13 2025 GMT Not After : Jul 27 20:28:13 2025 GMT Subject: CN=687d515e-3a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:c6:9a:a1:ea:b3:59:79:a6:6a:6c:a3:34: 6c:37:7e:11:7c:f8:86:be:ed:94:cc:9d:ed:4d:a0: 10:49:0e:d5:07:85:7d:6a:e8:45:dc:00:62:e4:7c: 16:fa:5c:b5:ef:9e:ed:b4:f6:be:a3:07:c8:e3:4d: 0d:ee:e7:41:d8:51:73:13:bf:2f:5f:d1:22:ea:3e: cb:04:42:d3:e5:32:9a:c3:d6:05:e9:11:a8:b2:e6: ff:f3:80:59:f8:ec:80:bf:5a:45:f4:76:cf:88:f7: c9:2c:e9:2f:bb:fd:75:69:79:eb:14:3e:b1:d3:34: 4d:30:b0:88:da:c6:ef:cc:db:14:92:2b:58:9f:d1: eb:47:87:47:28:10:3d:ae:3d:6e:46:33:f7:aa:2c: 91:f4:64:ed:4b:05:e9:dc:d6:04:e0:5b:01:dc:dd: fa:91:d1:46:6f:07:48:c8:3d:92:91:bc:2d:93:b1: f5:25:08:69:f5:34:7d:0f:d6:c0:cb:ef:8e:5b:f0: ca:36:ab:f1:1a:38:f2:99:ae:f9:de:82:20:5b:32: a8:51:93:6c:0a:ee:4a:c9:5b:a5:ac:6e:88:7a:3a: 06:17:59:86:e5:d7:ec:e6:70:63:4f:e8:ed:cf:16: 06:6a:dc:6e:65:fd:96:f1:e3:60:5a:a4:12:5a:67: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:40:C8:96:93:FB:A6:40:B5:04:7D:49:FD:41:A3:40:24:36:AA:5E X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:7c:91:4d:17:f3:05:6a:e6:bd:ec:53:24:e5:ce:f4:5e:58: a9:20:66:9e:4e:b9:f4:4b:46:c3:fa:27:fa:0f:5a:b0:0d:b4: 37:5f:28:7e:62:1f:0c:1a:02:95:23:e1:57:8b:19:de:23:f2: 82:c6:2a:f2:67:a7:a5:26:87:71:f3:3e:5f:9b:4d:4b:7a:e9: e3:b8:45:62:45:ab:70:1f:2d:86:bc:b7:9e:ed:bd:87:0e:ef: 50:68:5b:a0:8a:92:8d:44:46:09:06:15:87:88:10:94:12:4a: 8c:17:57:ef:56:1c:2a:59:2e:ff:f3:db:98:34:30:f7:e7:d0: 20:77:e6:ee:66:e1:a8:b3:48:83:eb:99:6f:b1:bd:af:0a:50: a5:a5:c2:bc:bd:36:57:4d:78:e0:f1:28:11:88:b2:f4:d3:c5: 24:7d:9d:ea:a1:9c:78:6f:9c:4f:7e:ab:70:2b:80:ec:6c:3d: 27:1f:85:a0:0a:fc:d7:a6:91:a0:1a:72:78:73:e1:4c:1d:f5: 5a:86:d1:f2:b5:d1:a3:d8:83:f9:d0:68:25:fa:b1:60:ba:40: ee:40:d0:28:1d:5f:6e:2b:16:47:7a:44:ae:28:10:86:11:31: 90:98:6f:b8:59:62:13:26:fb:f1:99:bd:64:5b:fa:34:ce:89: d8:6f:a3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjUwNzIwMjAyODEzWhcNMjUwNzI3MjAyODEzWjAYMRYwFAYD VQQDEw02ODdkNTE1ZS0zYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO3GmqHqs1l5pmpsozRsN34RfPiGvu2UzJ3tTaAQSQ7VB4V9auhF3ABi5HwW +ly1757ttPa+owfI400N7udB2FFzE78vX9Ei6j7LBELT5TKaw9YF6RGosub/84BZ +OyAv1pF9HbPiPfJLOkvu/11aXnrFD6x0zRNMLCI2sbvzNsUkitYn9HrR4dHKBA9 rj1uRjP3qiyR9GTtSwXp3NYE4FsB3N36kdFGbwdIyD2Skbwtk7H1JQhp9TR9D9bA y++OW/DKNqvxGjjyma753oIgWzKoUZNsCu5KyVulrG6IejoGF1mG5dfs5nBjT+jt zxYGatxuZf2W8eNgWqQSWmfycQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNAyJaT +6ZAtQR9Sf1Bo0AkNqpeMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHfJFNF/MFaua97FMk5c70XlipIGaeTrn0S0bD+if6D1qwDbQ3Xyh+ Yh8MGgKVI+FXixneI/KCxiryZ6elJodx8z5fm01LeunjuEViRatwHy2GvLee7b2H Du9QaFugipKNREYJBhWHiBCUEkqMF1fvVhwqWS7/89uYNDD359Agd+buZuGos0iD 65lvsb2vClClpcK8vTZXTXjg8SgRiLL008UkfZ3qoZx4b5xPfqtwK4DsbD0nH4Wg CvzXppGgGnJ4c+FMHfVahtHytdGj2IP50Ggl+rFgukDuQNAoHV9uKxZHekSuKBCG ETGQmG+4WWITJvvxmb1kW/o0zonYb6OF -----END CERTIFICATE-----Generated at Mon Jul 21 07:17:11 2025 by rpki-client