$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: TA6xAHqMAb1iVDY9l25s5SvGGR6q9zm2ek8ZNbTdECo= Subject key identifier: CA:89:CD:A3:EF:7D:B4:D1:BF:F9:83:FF:60:D9:67:09:D9:A3:7D:7D Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 0121 Signing time: Sat 19 Jul 2025 05:11:12 +0000 Manifest this update: Sat 19 Jul 2025 05:11:11 +0000 Manifest next update: Sat 26 Jul 2025 05:11:11 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: G+eavdfy//ept0gO+ciCtj+7t8Inbn53HexI4bh7zNg=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Jul 19 05:11:11 2025 GMT Not After : Jul 26 05:11:11 2025 GMT Subject: CN=687b28f0-dc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:bc:d6:ad:1c:8a:07:97:b0:8d:77:3c:79: c6:ed:4b:9c:00:b7:c7:fd:2f:92:5b:4a:8e:2d:75: 9d:c5:d0:ea:56:b2:0a:1c:97:47:72:3a:64:5b:0e: 87:f8:1d:65:8f:9a:23:0d:1a:53:77:33:e2:37:0b: 4e:c3:ae:99:ec:3b:47:95:35:4b:7f:ae:bc:3d:01: 25:bf:5d:e0:55:ad:9e:19:da:15:09:76:74:7d:a7: 0b:fa:84:80:b9:b4:0a:1b:d3:77:7b:2d:b2:e5:e5: ba:6f:ed:91:06:65:89:f5:b1:91:c1:4e:13:29:53: f8:9e:4f:33:70:99:e5:c7:e3:e2:79:67:1d:5b:37: be:d7:2c:e3:2c:8e:8a:eb:9c:40:0d:6d:ed:99:8d: 6f:13:e1:f7:ff:b8:0e:bf:a5:87:db:fd:d6:38:18: 59:cd:9d:41:b0:30:24:ed:a6:72:be:64:6b:81:65: 06:8d:12:a7:55:25:cf:72:bd:1f:66:6e:ae:94:61: 86:81:53:4e:83:be:d2:30:5d:ca:3f:d3:bb:69:c3: 58:ff:19:64:81:1f:46:d1:6b:d2:2a:23:01:0a:2c: a0:6b:72:74:97:c9:a2:1a:07:59:06:dd:6d:c0:3b: a0:41:0c:1c:91:0f:aa:8b:ba:68:09:7e:4d:9d:2a: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:89:CD:A3:EF:7D:B4:D1:BF:F9:83:FF:60:D9:67:09:D9:A3:7D:7D X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:3e:13:2f:30:33:ca:03:e6:16:e6:c3:62:b2:74:fe:07:44: d0:e6:1b:3e:0e:47:50:82:03:77:c4:d2:77:4a:2a:7e:47:b4: 91:18:ff:96:70:04:bc:15:42:f6:85:ea:7b:a3:1b:4d:ac:44: 42:12:54:30:35:e6:90:d5:32:30:86:ab:be:68:5c:3a:a4:d1: 4b:52:c4:08:fa:f7:f4:2f:ee:19:6b:88:cd:37:58:23:a8:6b: df:10:ec:18:13:5c:c7:07:8f:94:a7:19:22:82:85:c1:c0:91: 20:65:19:1c:ed:0b:a4:2b:ba:b1:18:62:a8:2b:54:7a:2f:6e: 2a:78:17:60:8b:88:17:74:ea:36:4b:f8:04:81:db:56:b2:83: d6:a0:23:82:62:f3:83:3a:c7:65:ba:0a:47:d6:8a:04:4f:76: 8e:27:32:8f:5d:09:e9:d9:5e:b5:4f:05:35:69:a9:ba:b9:69: 7c:8e:12:5e:b9:a6:d1:54:c7:97:82:20:00:66:54:43:54:91: ee:26:fc:f5:aa:e9:fe:28:3f:5f:9d:9c:bd:91:d0:c4:9a:ea: de:6e:32:22:bd:a4:b7:40:9d:6e:31:99:95:d0:fc:17:e5:22: c0:e8:7d:d5:b6:b3:77:07:f3:8c:7d:36:7d:e6:ba:35:e2:f6: 56:27:f9:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUwNzE5MDUxMTExWhcNMjUwNzI2MDUxMTExWjAYMRYwFAYD VQQDEw02ODdiMjhmMC1kYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyW81q0cigeXsI13PHnG7UucALfH/S+SW0qOLXWdxdDqVrIKHJdHcjpkWw6H +B1lj5ojDRpTdzPiNwtOw66Z7DtHlTVLf668PQElv13gVa2eGdoVCXZ0facL+oSA ubQKG9N3ey2y5eW6b+2RBmWJ9bGRwU4TKVP4nk8zcJnlx+PieWcdWze+1yzjLI6K 65xADW3tmY1vE+H3/7gOv6WH2/3WOBhZzZ1BsDAk7aZyvmRrgWUGjRKnVSXPcr0f Zm6ulGGGgVNOg77SMF3KP9O7acNY/xlkgR9G0WvSKiMBCiyga3J0l8miGgdZBt1t wDugQQwckQ+qi7poCX5NnSqiNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqJzaPv fbTRv/mD/2DZZwnZo319MB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiPhMvMDPKA+YW5sNisnT+B0TQ5hs+DkdQggN3xNJ3Sip+R7SRGP+W cAS8FUL2hep7oxtNrERCElQwNeaQ1TIwhqu+aFw6pNFLUsQI+vf0L+4Za4jNN1gj qGvfEOwYE1zHB4+UpxkigoXBwJEgZRkc7QukK7qxGGKoK1R6L24qeBdgi4gXdOo2 S/gEgdtWsoPWoCOCYvODOsdlugpH1ooET3aOJzKPXQnp2V61TwU1aam6uWl8jhJe uabRVMeXgiAAZlRDVJHuJvz1qun+KD9fnZy9kdDEmurebjIivaS3QJ1uMZmV0PwX 5SLA6H3VtrN3B/OMfTZ95ro14vZWJ/nl -----END CERTIFICATE-----Generated at Sun Jul 20 06:19:43 2025 by rpki-client