$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: Z5d/tuv1vkUA0qTSaSliU5210j4oggJUqCBs7TIv1n8= Subject key identifier: 73:BC:C7:4C:F1:62:B4:4D:32:6D:E8:E6:31:6F:B4:31:B2:18:F3:8F Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: 85 Signing time: Thu 05 Jun 2025 05:56:51 +0000 Manifest this update: Thu 05 Jun 2025 05:56:51 +0000 Manifest next update: Thu 12 Jun 2025 05:56:51 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: PDpdPmy6c5qNl4OG3dxrhIwtYsyaT890iz51yRj2eao=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: dzWi4sOLyrk+Z9rQ/p2wnjoYw1tNJYcoqxBuYKWjT/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: Jun 5 05:56:51 2025 GMT Not After : Jun 12 05:56:51 2025 GMT Subject: CN=684131a3-fc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:f1:79:f4:91:be:c9:a4:70:c4:37:b3:90: b9:71:6d:f0:ba:af:04:5e:83:a4:fa:d6:1d:01:5d: 71:02:a2:1b:11:3a:ad:aa:69:57:70:97:61:c5:82: e5:86:c4:c4:b8:06:3a:f8:5f:ad:ad:db:3a:ee:57: 15:9c:1b:8b:84:26:fd:59:e4:ce:ac:12:dd:f1:c7: 63:09:2e:cb:a4:25:5e:2c:e3:27:4b:38:2f:1e:de: b7:95:af:a5:b3:3c:cb:4c:0c:e8:5f:0c:1c:ed:a1: 0b:ce:20:65:f2:ea:3b:61:49:24:ef:73:83:de:2b: 44:14:e5:2e:88:e9:8d:8d:76:e4:e9:31:56:e1:37: a0:b9:46:71:57:3d:cc:3c:83:23:15:9c:0c:f1:c2: ff:95:ff:83:a3:3e:c5:9a:a2:d1:72:ab:9e:dd:6b: bb:7c:d5:8b:5b:fc:6b:0e:cb:99:79:87:1f:1c:ac: c9:a4:ef:fc:99:ec:eb:e3:23:bd:d6:de:ca:70:75: bf:d1:c2:f3:6c:40:5c:86:3f:32:ed:f7:63:df:54: f7:7e:cd:3b:64:b5:d9:c1:ce:8f:20:b9:4e:63:f9: 0b:2a:43:12:96:0f:e7:10:3b:14:4c:3c:33:32:c3: 1e:14:c8:45:0e:b8:ea:53:21:15:e8:63:ae:f5:41: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BC:C7:4C:F1:62:B4:4D:32:6D:E8:E6:31:6F:B4:31:B2:18:F3:8F X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1e:de:46:fc:aa:bb:d9:72:22:34:9e:27:f9:1f:9f:88:de: ae:4a:cc:0e:e0:39:ca:ec:d7:1e:c7:a4:f7:b6:2a:e1:63:2b: e3:2e:ff:44:b0:e1:f6:5e:6c:7f:d7:58:4e:7e:12:4d:6c:66: ca:94:a7:14:01:d2:de:12:68:18:a5:95:0f:ba:7c:3d:9f:73: 83:a4:63:c0:f5:d4:14:ea:6f:b6:fe:a2:11:c7:0c:f2:af:31: e1:86:94:d9:ee:66:f9:28:6b:9e:02:1f:1b:c0:4f:85:f1:64: 6d:c8:4d:a8:f6:3a:18:cd:ee:ac:80:95:32:b2:c5:02:73:e7: a2:72:46:5d:01:86:70:8d:8c:19:5f:2f:2a:33:29:62:9f:c4: 97:13:eb:63:d2:d5:76:84:98:38:0a:20:69:79:9b:cc:5a:78: dc:13:57:bc:18:51:57:4b:4c:49:b8:58:e4:98:42:fc:05:44: 0a:d5:20:d8:2c:65:1f:7e:fd:a1:db:73:4a:f7:4f:fc:9f:1e: b9:58:d2:e0:18:7b:68:7e:78:0d:46:69:b1:3d:7a:c3:0d:2b: 65:d7:bf:95:13:44:fc:c1:f0:f4:9d:c8:f5:52:d9:0e:2a:c8: b6:8c:ba:22:76:21:9f:b0:51:f5:d5:bd:31:6c:d2:a8:2b:02: b6:88:bf:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3NTkxMTAvBgNVBAUTKDY0MTBCMzVBRDFBOEU5MUZFQkQ4NUI0NDM3NjY4QzJB NjlEQUE3REEwHhcNMjUwNjA1MDU1NjUxWhcNMjUwNjEyMDU1NjUxWjAYMRYwFAYD VQQDEw02ODQxMzFhMy1mYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mvxefSRvsmkcMQ3s5C5cW3wuq8EXoOk+tYdAV1xAqIbETqtqmlXcJdhxYLl hsTEuAY6+F+trds67lcVnBuLhCb9WeTOrBLd8cdjCS7LpCVeLOMnSzgvHt63la+l szzLTAzoXwwc7aELziBl8uo7YUkk73OD3itEFOUuiOmNjXbk6TFW4TeguUZxVz3M PIMjFZwM8cL/lf+Doz7FmqLRcque3Wu7fNWLW/xrDsuZeYcfHKzJpO/8mezr4yO9 1t7KcHW/0cLzbEBchj8y7fdj31T3fs07ZLXZwc6PILlOY/kLKkMSlg/nEDsUTDwz MsMeFMhFDrjqUyEV6GOu9UGf1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHO8x0zx YrRNMm3o5jFvtDGyGPOPMB8GA1UdIwQYMBaAFGQQs1rRqOkf69hbRDdmjCpp2qfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc1OS8xMDZDRkQ2NDc2 RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZSX3IyRnRFTjJhTUttbmFw OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc1OS8xMDZDRkQ2NDc2RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZS X3IyRnRFTjJhTUttbmFwOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyHt5G/Kq72XIiNJ4n+R+fiN6uSswO4DnK7Ncex6T3tirhYyvjLv9E sOH2Xmx/11hOfhJNbGbKlKcUAdLeEmgYpZUPunw9n3ODpGPA9dQU6m+2/qIRxwzy rzHhhpTZ7mb5KGueAh8bwE+F8WRtyE2o9joYze6sgJUyssUCc+eickZdAYZwjYwZ Xy8qMylin8SXE+tj0tV2hJg4CiBpeZvMWnjcE1e8GFFXS0xJuFjkmEL8BUQK1SDY LGUffv2h23NK90/8nx65WNLgGHtofngNRmmxPXrDDStl17+VE0T8wfD0ncj1UtkO Ksi2jLoidiGfsFH11b0xbNKoKwK2iL+O -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:50 2025 by rpki-client