$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: sbwvUsCXUuw6bIUsBjz1BJi65K2L+ZUoNvCxJhARXW8= Subject key identifier: DB:67:BB:56:6E:C8:80:FD:63:44:09:0C:4C:38:55:DD:0F:44:AC:9D Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 68 Signing time: Sat 19 Jul 2025 07:11:15 +0000 Manifest this update: Sat 19 Jul 2025 07:11:14 +0000 Manifest next update: Sat 26 Jul 2025 07:11:14 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: 5voEtEF9gNkWZRZ9uXyGAcHmS2IfxlttRF/mZ1vOdkM=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Jul 19 07:11:14 2025 GMT Not After : Jul 26 07:11:14 2025 GMT Subject: CN=687b4513-ab76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:ae:ef:d2:e0:bb:5a:af:3e:83:e7:00:86: 89:c5:7c:f7:1d:c0:74:6f:13:98:e1:e9:f6:08:92: 61:d4:77:8b:c6:bf:74:f0:6b:0b:7c:b8:c1:a4:62: e6:f6:a1:04:a9:ec:65:26:05:e3:b7:ec:43:0e:fc: df:59:fb:ba:4b:53:12:87:25:58:a9:f1:b6:83:ca: 22:5f:92:ab:a0:8d:99:9a:dc:2c:a1:df:20:74:bc: 20:63:8c:e7:7b:ff:59:f7:76:56:aa:7b:38:94:d1: b8:6e:17:90:89:e1:2c:74:55:52:20:13:b8:0e:7c: 17:a5:7c:87:5b:18:78:e2:3b:97:4c:aa:e9:08:48: 3f:99:db:52:d4:ef:8d:6d:98:a4:97:fa:27:61:df: 9e:9c:a7:45:89:20:08:34:95:b4:cb:6e:6a:4e:d5: 13:eb:51:d2:d4:29:0c:ea:a3:67:a0:91:b4:11:93: 19:db:5e:df:37:6a:d5:bc:a0:c4:0d:ff:61:60:3a: 83:c6:80:94:c2:1a:a8:ec:fc:ee:91:2e:96:27:58: 40:c7:84:07:03:33:ff:fd:38:74:5a:49:f2:84:12: d2:cc:48:b9:6b:66:e4:83:07:9f:92:0a:48:2f:7d: f9:df:c4:ed:b7:4a:27:ce:9e:a4:f9:bc:21:72:a5: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:67:BB:56:6E:C8:80:FD:63:44:09:0C:4C:38:55:DD:0F:44:AC:9D X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:df:ab:74:21:dd:6d:ac:fa:47:d5:2e:34:17:0b:18:bb: c8:30:72:11:db:7e:2d:fc:9b:9c:83:04:c7:4b:b7:b1:77:a3: 27:74:6e:d0:db:b8:8d:c3:f2:ff:7f:33:09:83:c2:44:5e:ae: 6d:e1:2d:f1:6f:ba:25:30:b7:92:b9:08:7f:9f:df:26:31:a6: 67:cf:67:74:c5:9d:43:2e:5a:92:11:9d:5e:23:8e:c4:7d:45: 39:fc:27:e0:5d:40:cd:de:03:a2:6e:c5:f9:c0:be:3a:7a:4d: 3e:09:8a:98:86:3d:f3:2f:5b:7b:23:8f:10:1a:77:93:18:4a: 36:b3:b6:27:6f:37:14:5f:3a:35:d6:a7:47:fd:e8:06:a3:7e: 2e:50:e3:68:36:5c:0e:ca:8a:03:9a:a0:6a:d0:ef:ca:47:fe: 8e:ec:0a:3d:f2:55:0e:36:88:db:71:7a:d8:08:b0:6a:4c:f4: ac:7b:09:b3:c2:54:1a:47:4e:46:c0:53:05:14:c0:c9:23:e2: 8b:b4:50:b9:ea:cc:d9:1e:d1:d8:8e:ab:4f:2c:be:95:92:34: 13:4e:e4:46:dd:ed:c0:97:af:e7:46:83:c0:35:9f:82:72:f4: 5d:08:09:f0:ad:e3:d6:92:16:12:f3:16:54:f2:b4:b6:6b:e7: cb:34:dd:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoNjVBOEQwOEIyRUM4RjQyRDQzQjlBQTdBNDIzNTE3MkJC N0VEMTY2NTAeFw0yNTA3MTkwNzExMTRaFw0yNTA3MjYwNzExMTRaMBgxFjAUBgNV BAMTDTY4N2I0NTEzLWFiNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqRK7v0uC7Wq8+g+cAhonFfPcdwHRvE5jh6fYIkmHUd4vGv3Twawt8uMGkYub2 oQSp7GUmBeO37EMO/N9Z+7pLUxKHJVip8baDyiJfkqugjZma3Cyh3yB0vCBjjOd7 /1n3dlaqeziU0bhuF5CJ4Sx0VVIgE7gOfBelfIdbGHjiO5dMqukISD+Z21LU741t mKSX+idh356cp0WJIAg0lbTLbmpO1RPrUdLUKQzqo2egkbQRkxnbXt83atW8oMQN /2FgOoPGgJTCGqjs/O6RLpYnWEDHhAcDM//9OHRaSfKEEtLMSLlrZuSDB5+SCkgv ffnfxO23SifOnqT5vCFypX8rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU22e7Vm7I gP1jRAkMTDhV3Q9ErJ0wHwYDVR0jBBgwFoAUZajQiy7I9C1Duap6QjUXK7ftFmUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzY0QkE0QkE4QzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFqUWl5N0k5QzFEdWFwNlFqVVhLN2Z0Rm1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzY0QkE0QkE4QzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMx RHVhcDZRalVYSzdmdEZtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWP36t0Id1trPpH1S40FwsYu8gwchHbfi38m5yDBMdLt7F3oyd0btDb uI3D8v9/MwmDwkRerm3hLfFvuiUwt5K5CH+f3yYxpmfPZ3TFnUMuWpIRnV4jjsR9 RTn8J+BdQM3eA6JuxfnAvjp6TT4JipiGPfMvW3sjjxAad5MYSjaztidvNxRfOjXW p0f96Aajfi5Q42g2XA7KigOaoGrQ78pH/o7sCj3yVQ42iNtxetgIsGpM9Kx7CbPC VBpHTkbAUwUUwMkj4ou0ULnqzNke0diOq08svpWSNBNO5Ebd7cCXr+dGg8A1n4Jy 9F0ICfCt49aSFhLzFlTytLZr58s03fk= -----END CERTIFICATE-----Generated at Sun Jul 20 20:33:19 2025 by rpki-client