$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: SXeb4S3fFeg/spPtqnBVes16MW7QIZlVMD9W9nQk5N4= Subject key identifier: A6:77:61:E4:F8:C3:51:CC:69:32:86:91:AC:93:B9:77:A0:90:9F:20 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 76 Signing time: Sun 01 Jun 2025 06:35:07 +0000 Manifest this update: Sun 01 Jun 2025 06:35:07 +0000 Manifest next update: Sun 08 Jun 2025 06:35:07 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: qME9kpXJSVjMgk0vyDbSDapgLs8I43m3bIKSIZhreR8=) 2: 1A4E810A9C4711EFBCAF2961C4F9AE02.roa (hash: H/SNFy0blXHf51g3f4tDsQMfyr+dfN3zT3EjfHQV3so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Jun 1 06:35:07 2025 GMT Not After : Jun 8 06:35:07 2025 GMT Subject: CN=683bf49b-5b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:c2:c4:39:dc:6c:65:cb:4b:ee:23:f3:d5: 07:b8:a8:ed:ae:bb:28:88:24:74:8b:8d:f3:f7:27: 07:99:cf:21:c3:4b:8e:0a:23:97:a7:0f:71:88:3b: 27:15:0f:e4:b9:fb:21:b9:8f:b5:c7:3e:00:74:7a: 26:a6:74:f6:29:0e:4f:8a:25:65:5b:4b:34:9e:18: f3:29:50:4c:57:9b:70:31:cc:d8:5b:6b:f5:c6:ae: e3:3d:13:96:92:cb:9a:79:5b:ef:94:ac:4a:1f:d4: 01:68:79:49:c0:f3:ba:ed:04:88:43:56:75:08:e5: 43:16:06:09:e0:33:62:2b:85:b3:9a:e4:a7:6f:bb: f4:60:bf:ca:a6:1b:a3:49:1a:a5:24:bc:7e:6a:3b: 73:56:b0:e5:1e:b3:d9:ba:1a:9c:53:fb:fc:fd:c8: d0:85:61:8f:81:86:c8:9f:6d:d7:fe:51:89:dc:af: 0d:e5:38:de:b5:f4:ce:75:8a:12:ab:95:99:9f:02: e6:56:25:b7:fc:61:7c:62:17:80:08:6b:a3:37:64: b1:a9:af:27:2f:f5:c2:ad:a1:5c:a9:f6:7b:bd:97: dc:1e:f4:5c:0a:63:f4:92:bc:62:36:2d:49:3a:cf: f6:b5:1c:ee:e5:dc:ec:74:29:b1:2a:de:71:c3:d1: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:77:61:E4:F8:C3:51:CC:69:32:86:91:AC:93:B9:77:A0:90:9F:20 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f1:29:f5:f0:d9:44:cd:71:04:9f:79:0a:35:df:87:cf:f3: 88:ed:73:9b:f4:c5:9d:53:18:97:f4:ad:af:1a:3b:10:21:c2: bf:4e:0a:69:86:47:ce:c1:d7:32:7b:f8:b8:b4:5b:ee:b5:e1: 41:7a:1b:5b:1f:58:77:99:06:c3:eb:cc:5c:fa:ed:27:67:0a: 88:72:34:20:a9:8f:a4:b5:7c:37:87:58:91:5e:08:e7:5d:5c: 89:c0:b6:78:9e:b2:1d:64:de:ff:a8:de:a2:a4:08:92:cd:e4: 84:33:66:59:ff:ec:b1:3d:48:50:db:54:2d:9e:ef:ee:ea:8d: 62:7e:23:21:de:0d:f3:a5:ce:40:ba:8c:8b:00:b6:dd:fb:0f: 8c:e2:3e:de:a9:34:7e:90:bd:02:b8:cd:14:d4:95:bb:91:3a: 69:f8:7c:36:fd:09:fa:ac:b1:c5:14:9d:7d:72:7f:a9:f9:14: 0a:17:31:37:8a:84:44:ca:03:ee:ef:d2:69:1a:43:eb:d2:54: a0:3c:e3:b0:b8:b2:2b:a1:0a:67:9d:9a:f5:30:71:cf:26:90: a3:a4:78:1d:bb:97:a1:8d:bf:e3:b2:7c:13:cb:53:cd:fb:3c: 9a:a3:b1:2b:5c:df:99:d5:81:5c:13:7a:83:58:24:9f:b5:ac: b7:26:df:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkM5NDExMC8GA1UEBRMoNjUzQ0I4QTc1MTBEQjlCNkMxQTI3RDg3N0QyMTIxRTZE RjQyMTk4MjAeFw0yNTA2MDEwNjM1MDdaFw0yNTA2MDgwNjM1MDdaMBgxFjAUBgNV BAMTDTY4M2JmNDliLTViOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx6cLEOdxsZctL7iPz1Qe4qO2uuyiIJHSLjfP3JweZzyHDS44KI5enD3GIOycV D+S5+yG5j7XHPgB0eiamdPYpDk+KJWVbSzSeGPMpUExXm3AxzNhba/XGruM9E5aS y5p5W++UrEof1AFoeUnA87rtBIhDVnUI5UMWBgngM2IrhbOa5Kdvu/Rgv8qmG6NJ GqUkvH5qO3NWsOUes9m6GpxT+/z9yNCFYY+Bhsifbdf+UYncrw3lON619M51ihKr lZmfAuZWJbf8YXxiF4AIa6M3ZLGprycv9cKtoVyp9nu9l9we9FwKY/SSvGI2LUk6 z/a1HO7l3Ox0KbEq3nHD0UY1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpndh5PjD UcxpMoaRrJO5d6CQnyAwHwYDVR0jBBgwFoAUZTy4p1ENubbBon2HfSEh5t9CGYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQzk0L0E4Q0QwMTY0OTRE QTExRUY4OTA4NkQyMUM0RjlBRTAyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWlR5NHAxRU51YmJCb24ySGZTRWg1dDlDR1lJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Qzk0L0E4Q0QwMTY0OTREQTExRUY4OTA4NkQyMUM0RjlBRTAyL1pUeTRwMUVOdWJi Qm9uMkhmU0VoNXQ5Q0dZSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTxKfXw2UTNcQSfeQo134fP84jtc5v0xZ1TGJf0ra8aOxAhwr9OCmmG R87B1zJ7+Li0W+614UF6G1sfWHeZBsPrzFz67SdnCohyNCCpj6S1fDeHWJFeCOdd XInAtniesh1k3v+o3qKkCJLN5IQzZln/7LE9SFDbVC2e7+7qjWJ+IyHeDfOlzkC6 jIsAtt37D4ziPt6pNH6QvQK4zRTUlbuROmn4fDb9CfqsscUUnX1yf6n5FAoXMTeK hETKA+7v0mkaQ+vSVKA847C4siuhCmedmvUwcc8mkKOkeB27l6GNv+OyfBPLU837 PJqjsStc35nVgVwTeoNYJJ+1rLcm33o= -----END CERTIFICATE-----Generated at Mon Jun 2 19:58:16 2025 by rpki-client