$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft File: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft (raw, json) Hash identifier: WctPg79OA6hWxH+hugIWjgvWAjI4y3KPmuhQTyVvltM= Subject key identifier: B1:2D:6E:66:73:96:8F:89:B1:F1:96:59:76:73:5F:A4:A0:29:A9:84 Authority key identifier: 65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD Certificate issuer: /CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft Manifest number: 08A6 Signing time: Sun 08 Jun 2025 20:15:13 +0000 Manifest this update: Sun 08 Jun 2025 20:15:12 +0000 Manifest next update: Sun 15 Jun 2025 20:15:12 +0000 Files and hashes: 1: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl (hash: 4h8l6ypxQSLkjD3PyKpmOYaHB+rKXlaOWrWABzlnmTg=) 2: 1B2E0738BB7011EA93F7DE4EC4F9AE02.roa (hash: Kkq3FSGMJtrxAckL14K8lEjZBbSHWGV4MxpopXgePZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4743, serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Validity Not Before: Jun 8 20:15:12 2025 GMT Not After : Jun 15 20:15:12 2025 GMT Subject: CN=6845ef51-467a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:29:c5:8a:26:12:6e:e5:a6:de:b8:0f:cf: fe:9a:fa:a8:7d:51:f2:56:b3:3e:bc:45:a9:b8:1a: a3:7e:94:be:28:85:55:c6:82:e4:61:7e:5f:e9:97: e9:f8:35:3f:5a:78:18:27:17:66:2b:ea:a4:1f:51: 80:37:76:ba:6b:e1:3c:f2:8e:99:08:56:90:bb:0d: d4:09:39:f9:80:3e:2f:9a:37:c3:68:15:a5:fe:a4: 38:d8:2f:83:aa:8e:c5:1d:71:7f:b0:93:c4:65:e9: ce:ef:cb:e9:f6:8e:e2:c7:6a:29:aa:d4:c1:ac:a5: 24:8d:37:2d:8c:50:fd:f8:be:fa:34:ab:cc:dd:2a: 70:0c:e3:81:fc:ac:e4:57:88:84:0c:66:9e:9b:63: 50:4b:76:56:78:71:93:c8:0e:4f:8c:70:bd:50:ed: 28:c9:35:b3:ea:e2:fe:56:eb:2f:86:32:02:a4:01: 2c:3d:98:a1:b1:87:6b:bf:fc:cb:c9:b5:db:bd:af: c4:55:61:f1:49:bf:40:e1:df:d5:ac:03:04:d6:42: 52:4e:6f:0b:10:c4:25:70:43:cb:9d:8c:be:e3:5d: e1:14:63:88:a1:21:d0:94:a6:8d:36:d2:20:4f:c3: 9e:7c:c3:d2:75:08:72:65:17:c7:73:9a:8c:26:8f: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2D:6E:66:73:96:8F:89:B1:F1:96:59:76:73:5F:A4:A0:29:A9:84 X509v3 Authority Key Identifier: keyid:65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9b:aa:0e:20:b1:e9:0e:35:cd:47:3f:ba:ee:5a:57:bf:64: 19:ee:30:81:a5:a6:82:e3:4b:60:22:61:f3:43:0f:a3:c6:26: 6f:7a:f4:ce:d1:12:12:22:e2:c8:f9:80:0e:7d:a1:fd:80:b8: b1:3b:39:a5:74:9a:33:93:8d:c7:28:06:e5:62:95:68:61:b0: 67:87:2e:66:d6:4a:fc:90:d3:19:5e:f5:24:20:ff:a7:31:08: 31:7a:ce:67:e1:21:03:0b:be:10:4a:44:13:c6:d3:af:6d:cb: 36:18:f6:33:95:db:0c:aa:21:62:82:4d:d8:3d:25:3f:41:9b: 71:9a:de:10:c9:5f:1e:6b:0c:56:39:4c:78:e5:3e:c7:5d:04: 75:87:50:cd:90:27:0a:0b:f2:e0:2d:f7:54:ab:14:d9:20:33: 1d:13:5c:f3:18:6c:0a:a9:da:a9:09:10:38:aa:f2:ab:17:be: cc:c8:4d:91:99:1d:5a:0f:67:d0:dc:4f:f9:41:16:4f:7b:3a: 4e:67:22:e2:37:85:5f:9a:80:6c:d6:51:b5:ff:8d:83:e2:b4: 92:5f:05:83:2d:fb:9f:46:77:ab:14:62:07:0d:8a:81:9f:26: 32:41:9d:fc:2c:80:67:36:70:ac:d0:f7:a7:b6:52:dc:01:f7: 19:b8:18:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3NDMxMTAvBgNVBAUTKDY1NTQyQ0VDMjgxMTFGQzU0QkEzRDJBRUUzM0Y0Q0U4 N0I3RjkwQUQwHhcNMjUwNjA4MjAxNTEyWhcNMjUwNjE1MjAxNTEyWjAYMRYwFAYD VQQDEw02ODQ1ZWY1MS00NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnMpxYomEm7lpt64D8/+mvqofVHyVrM+vEWpuBqjfpS+KIVVxoLkYX5f6Zfp +DU/WngYJxdmK+qkH1GAN3a6a+E88o6ZCFaQuw3UCTn5gD4vmjfDaBWl/qQ42C+D qo7FHXF/sJPEZenO78vp9o7ix2opqtTBrKUkjTctjFD9+L76NKvM3SpwDOOB/Kzk V4iEDGaem2NQS3ZWeHGTyA5PjHC9UO0oyTWz6uL+VusvhjICpAEsPZihsYdrv/zL ybXbva/EVWHxSb9A4d/VrAME1kJSTm8LEMQlcEPLnYy+413hFGOIoSHQlKaNNtIg T8OefMPSdQhyZRfHc5qMJo/idQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEtbmZz lo+JsfGWWXZzX6SgKamEMB8GA1UdIwQYMBaAFGVULOwoER/FS6PSruM/TOh7f5Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDc0My82NzBGODA5MkJC NkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4VkxvOUt1NHo5TTZIdF9r SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUXM3Q2dSSDhWTG85S3U0ejlNNkh0X2tLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDc0My82NzBGODA5MkJCNkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4 VkxvOUt1NHo5TTZIdF9rSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+m6oOILHpDjXNRz+67lpXv2QZ7jCBpaaC40tgImHzQw+jxiZvevTO 0RISIuLI+YAOfaH9gLixOzmldJozk43HKAblYpVoYbBnhy5m1kr8kNMZXvUkIP+n MQgxes5n4SEDC74QSkQTxtOvbcs2GPYzldsMqiFigk3YPSU/QZtxmt4QyV8eawxW OUx45T7HXQR1h1DNkCcKC/LgLfdUqxTZIDMdE1zzGGwKqdqpCRA4qvKrF77MyE2R mR1aD2fQ3E/5QRZPezpOZyLiN4VfmoBs1lG1/42D4rSSXwWDLfufRnerFGIHDYqB nyYyQZ38LIBnNnCs0PentlLcAfcZuBjw -----END CERTIFICATE-----Generated at Sun Jun 8 23:30:40 2025 by rpki-client