$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: pZrEZSs2y4F2JCrS9LcsjF15jV9vh3VdoVGoyrvLmvk= Subject key identifier: AD:03:D8:5B:08:26:53:D8:83:79:89:9A:D3:A2:6F:26:42:37:94:BB Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 8F Signing time: Mon 21 Jul 2025 06:44:08 +0000 Manifest this update: Mon 21 Jul 2025 06:44:08 +0000 Manifest next update: Mon 28 Jul 2025 06:44:08 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 75R4TH1NvIxRUZ4iJ762+CAHSZ/1t4vnYSOh0QcVbuI=) 2: 1A4E810A9C4711EFBCAF2961C4F9AE02.roa (hash: H/SNFy0blXHf51g3f4tDsQMfyr+dfN3zT3EjfHQV3so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Jul 21 06:44:08 2025 GMT Not After : Jul 28 06:44:08 2025 GMT Subject: CN=687de1b8-6319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:60:b5:58:d2:03:5e:f6:8b:3b:c5:57:b7: f1:e6:c3:20:b9:ae:e0:81:27:c4:93:ea:e6:65:4a: fe:5c:cc:03:4b:47:fd:05:7d:9d:22:f6:56:7b:0b: e5:74:e7:ea:8e:a7:20:e6:e4:e7:f2:cc:a6:50:f3: 67:6f:ac:17:c1:c9:34:db:0d:5a:80:f5:05:f4:73: 1c:be:77:72:cb:36:30:50:ad:d2:89:11:e2:e7:4e: f5:d2:ef:78:6c:eb:d2:b7:80:22:cb:54:0c:77:bd: 08:e3:2c:97:d3:de:67:b1:dd:01:21:e0:b6:ea:06: 64:51:f8:4f:ed:ed:ba:3b:7c:8f:42:12:f7:0b:55: f7:8f:e2:fa:aa:f0:84:ee:65:67:dc:cc:c5:68:da: c4:5f:d7:ac:60:f0:52:ff:16:e4:b2:9c:e6:ca:cb: 1b:d0:28:61:b2:53:25:72:19:d6:62:3f:de:3d:b7: cf:19:d2:2d:03:ba:01:e8:91:6f:92:b5:b0:15:82: 17:9d:43:3d:bb:66:ce:de:04:1f:b7:0c:03:41:2a: 0e:a3:3c:cd:fa:b1:28:58:ac:7d:b3:ea:1b:dd:f7: 4b:02:5b:f6:89:6a:5b:b6:50:fd:c0:4f:7c:13:ed: 96:9e:6f:38:01:da:08:82:b0:7b:29:01:be:57:f5: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:03:D8:5B:08:26:53:D8:83:79:89:9A:D3:A2:6F:26:42:37:94:BB X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:be:f1:e9:68:01:3f:1d:22:1b:cf:d0:c5:96:28:9c:92:57: a4:58:53:53:3f:4e:a8:5c:27:62:d8:eb:62:de:4e:17:a3:80: de:9e:c2:b5:17:83:45:a0:95:72:88:c4:f0:5d:3f:eb:4e:53: 50:ad:0b:df:63:d9:a7:26:ea:f6:21:8c:f7:4c:91:8b:e9:09: b1:a3:0d:11:b8:37:4a:61:76:29:46:b5:6b:ed:15:94:cf:2b: 5e:16:a6:af:cf:c2:5b:49:d6:a1:b4:11:d3:19:aa:cf:9e:0f: 74:88:6e:1b:ad:23:2f:b5:5e:18:cd:05:77:2c:8f:60:f9:12: 12:88:6d:9a:10:26:e8:74:ee:60:67:09:85:d0:71:91:00:0e: ab:76:41:ae:a1:87:c1:1c:be:0f:d2:ec:de:1e:55:c2:7a:35: bd:20:c3:06:c8:9e:82:03:5a:26:44:e8:1c:21:45:8a:79:fa: 47:6e:03:84:bd:a2:f6:14:c9:71:dc:96:22:23:7e:69:2e:2b: 04:0b:87:ac:4a:3b:a5:6b:11:16:3e:e9:41:c1:b3:f7:5b:03: cb:1e:ac:79:2a:96:87:a9:bc:5e:cf:fd:14:4c:66:9a:69:73: fd:50:a8:26:77:23:eb:22:a6:46:a4:13:d5:73:20:28:a6:6f: d9:86:2b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjUwNzIxMDY0NDA4WhcNMjUwNzI4MDY0NDA4WjAYMRYwFAYD VQQDEw02ODdkZTFiOC02MzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKhgtVjSA172izvFV7fx5sMgua7ggSfEk+rmZUr+XMwDS0f9BX2dIvZWewvl dOfqjqcg5uTn8symUPNnb6wXwck02w1agPUF9HMcvndyyzYwUK3SiRHi50710u94 bOvSt4Aiy1QMd70I4yyX095nsd0BIeC26gZkUfhP7e26O3yPQhL3C1X3j+L6qvCE 7mVn3MzFaNrEX9esYPBS/xbkspzmyssb0ChhslMlchnWYj/ePbfPGdItA7oB6JFv krWwFYIXnUM9u2bO3gQftwwDQSoOozzN+rEoWKx9s+ob3fdLAlv2iWpbtlD9wE98 E+2Wnm84AdoIgrB7KQG+V/VkQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0D2FsI JlPYg3mJmtOibyZCN5S7MB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYvvHpaAE/HSIbz9DFliicklekWFNTP06oXCdi2Oti3k4Xo4DensK1 F4NFoJVyiMTwXT/rTlNQrQvfY9mnJur2IYz3TJGL6Qmxow0RuDdKYXYpRrVr7RWU zyteFqavz8JbSdahtBHTGarPng90iG4brSMvtV4YzQV3LI9g+RISiG2aECbodO5g ZwmF0HGRAA6rdkGuoYfBHL4P0uzeHlXCejW9IMMGyJ6CA1omROgcIUWKefpHbgOE vaL2FMlx3JYiI35pLisEC4esSjulaxEWPulBwbP3WwPLHqx5KpaHqbxez/0UTGaa aXP9UKgmdyPrIqZGpBPVcyAopm/Zhit8 -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:20 2025 by rpki-client