$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json) Hash identifier: 3enlWiT7Brn5oq2ScxeHGKQQ9OttcI8syTu5h/MLMF4= Subject key identifier: 26:E3:D6:89:D8:9A:86:D9:D7:88:B3:99:1A:0D:42:21:85:08:F7:93 Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft Manifest number: 93 Signing time: Sun 01 Jun 2025 06:06:29 +0000 Manifest this update: Sun 01 Jun 2025 06:06:29 +0000 Manifest next update: Sun 08 Jun 2025 06:06:29 +0000 Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: 3eh7MJTqEJXdYB/2KShMzB1r8w46ttTFMrdCj9hADZ8=) 2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: ap2qykakUMtuugznllb9ElqWzxnqoH122Li4BLMbH9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Validity Not Before: Jun 1 06:06:29 2025 GMT Not After : Jun 8 06:06:29 2025 GMT Subject: CN=683bede5-3c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:75:d5:61:5c:19:84:17:1b:ba:4b:a0:65: d6:e2:0b:f2:64:aa:a9:10:72:52:5b:ab:fe:5f:41: 4e:23:13:a3:e6:1a:89:ea:da:7e:dc:8a:aa:c4:1f: 23:22:8a:32:98:1f:82:5c:82:61:d5:eb:cb:ee:50: 8c:3a:25:75:76:e7:ff:15:5a:d2:08:46:c5:27:49: 0d:31:b6:6f:ef:21:79:09:aa:65:fa:e6:06:81:b9: f7:a1:97:0f:c5:3e:87:68:27:7f:27:48:5c:ff:33: f4:49:9a:2b:51:65:d5:02:55:0f:70:0c:89:15:a3: 69:94:8a:d4:22:ce:84:c1:41:79:3a:8a:f2:fc:02: 98:7b:2c:ff:eb:67:ec:d0:42:e0:d8:5b:62:3a:7a: 83:ca:ed:94:e3:8b:d6:3d:42:f3:48:ef:05:fc:2b: 1c:16:f0:b4:54:9c:de:51:30:f9:77:1a:be:f1:16: a0:65:40:16:56:a3:01:b2:fc:05:86:a5:7d:43:42: a1:61:16:71:f1:f9:cd:43:b1:ed:20:b9:0f:6a:69: c1:2f:84:09:8c:7e:37:cc:57:50:71:d4:99:f8:31: 09:96:99:dc:68:ef:84:64:69:4f:d6:31:dd:1c:7d: ea:14:4a:1f:71:a8:bf:9e:41:ee:3d:e0:b9:b3:40: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E3:D6:89:D8:9A:86:D9:D7:88:B3:99:1A:0D:42:21:85:08:F7:93 X509v3 Authority Key Identifier: keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ab:57:ee:98:22:7c:9c:31:d0:48:04:2b:51:df:51:fe:54: 50:4e:69:15:1c:60:37:f6:bf:a1:57:ce:79:af:dc:1f:0a:bd: 68:4e:e1:8d:b1:ff:ae:05:e5:fe:11:ac:7a:0c:78:6e:21:f2: 88:de:92:0c:14:06:51:ee:e3:ef:ec:37:67:5e:11:2e:93:d0: bd:f4:4f:49:c5:b3:3f:99:cf:ec:50:32:a3:06:ed:f9:67:be: 3c:d8:91:e2:4a:6f:17:91:a1:e0:71:25:19:c3:df:70:a4:26: 6c:6d:17:1a:36:43:08:12:c8:22:37:82:82:d0:09:58:2a:d9: f4:c1:81:ff:94:d0:1d:0d:bb:c3:02:60:f9:9a:66:a4:5d:1d: f8:ba:bf:ea:6c:3a:ae:d6:cb:07:09:39:77:c0:57:3f:45:d9: 6b:1b:69:0b:b2:59:4b:bd:ac:f9:3e:f3:ac:dd:8c:94:7f:89: 21:c7:a9:5a:66:0c:3b:7a:7e:fb:35:56:b2:43:46:27:b4:6f: b9:dc:a0:d6:a8:07:b2:ba:80:71:16:94:dc:53:13:76:09:2b: cb:82:e2:75:b3:d0:77:7f:fe:1f:29:c1:30:a5:f2:31:6f:79: da:c2:39:c5:8f:76:f3:4a:4e:e6:c4:1a:5c:a8:78:c5:45:c0: 98:1b:c0:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKENGQkIwMzhGREI4Mzg2NTQyMDQ5NjI5ODBBRDIyMUM5 NDE1RDVDRkYwHhcNMjUwNjAxMDYwNjI5WhcNMjUwNjA4MDYwNjI5WjAYMRYwFAYD VQQDEw02ODNiZWRlNS0zYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27t11WFcGYQXG7pLoGXW4gvyZKqpEHJSW6v+X0FOIxOj5hqJ6tp+3IqqxB8j IooymB+CXIJh1evL7lCMOiV1duf/FVrSCEbFJ0kNMbZv7yF5Capl+uYGgbn3oZcP xT6HaCd/J0hc/zP0SZorUWXVAlUPcAyJFaNplIrUIs6EwUF5Oory/AKYeyz/62fs 0ELg2FtiOnqDyu2U44vWPULzSO8F/CscFvC0VJzeUTD5dxq+8RagZUAWVqMBsvwF hqV9Q0KhYRZx8fnNQ7HtILkPamnBL4QJjH43zFdQcdSZ+DEJlpncaO+EZGlP1jHd HH3qFEofcai/nkHuPeC5s0BqJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbj1onY mobZ14izmRoNQiGFCPeTMB8GA1UdIwQYMBaAFM+7A4/bg4ZUIElimArSIclBXVz/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi9GOTAyRTUzMDVE QkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhsUWdTV0tZQ3RJaHlVRmRY UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o3c0RqOXVEaGxRZ1NXS1lDdEloeVVGZFhQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi9GOTAyRTUzMDVEQkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhs UWdTV0tZQ3RJaHlVRmRYUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjq1fumCJ8nDHQSAQrUd9R/lRQTmkVHGA39r+hV855r9wfCr1oTuGN sf+uBeX+Eax6DHhuIfKI3pIMFAZR7uPv7DdnXhEuk9C99E9JxbM/mc/sUDKjBu35 Z7482JHiSm8XkaHgcSUZw99wpCZsbRcaNkMIEsgiN4KC0AlYKtn0wYH/lNAdDbvD AmD5mmakXR34ur/qbDqu1ssHCTl3wFc/RdlrG2kLsllLvaz5PvOs3YyUf4khx6la Zgw7en77NVayQ0YntG+53KDWqAeyuoBxFpTcUxN2CSvLguJ1s9B3f/4fKcEwpfIx b3nawjnFj3bzSk7mxBpcqHjFRcCYG8Dm -----END CERTIFICATE-----Generated at Mon Jun 2 20:18:05 2025 by rpki-client