$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: o4gsXhs8a1LQ4MkKluYiRRBCFOtAiEy0xeQimOjXPgQ= Subject key identifier: 09:55:B4:64:59:0C:E2:02:C5:9A:A3:D3:7C:41:52:D0:9E:E3:8A:D7 Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 0819 Signing time: Sun 20 Jul 2025 21:01:15 +0000 Manifest this update: Sun 20 Jul 2025 21:01:15 +0000 Manifest next update: Sun 27 Jul 2025 21:01:15 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: FUcwgj5q13onpm3VwcRzTNPMJ1C3ATOTT9r3tw3W9ys=) 2: 5CC56600558F11F084E6F15EC4F9AE02.roa (hash: xIBKPrrFFxiQYfc9KkaEQ4EE2NMobEqzAjMwpy97Iaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: Jul 20 21:01:15 2025 GMT Not After : Jul 27 21:01:15 2025 GMT Subject: CN=687d591b-32a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:6d:f1:6c:e1:95:93:77:2a:a5:8c:2e:3e: c0:57:74:be:ea:69:aa:b3:e2:56:5a:44:e2:aa:0e: 3b:27:d6:fa:19:8f:09:9d:32:66:cc:0c:d3:17:57: ef:37:81:1f:f2:2d:b8:02:39:b4:a4:04:37:b7:18: 15:1c:19:95:50:26:b4:91:16:fa:3e:1c:b7:50:f3: 2d:b3:81:77:d0:8c:81:3e:2d:fb:bd:79:37:58:b6: ef:05:2e:80:49:d1:c1:1c:e4:bc:70:47:33:b9:2f: b9:ff:5e:5b:b3:4d:30:6a:af:c4:25:b5:27:ee:93: ce:f7:e6:c8:50:2e:08:12:3b:a2:75:02:65:28:55: 05:60:3f:80:55:ea:c3:81:8e:12:9e:1d:52:36:9e: 04:5e:0a:92:d0:d5:7c:54:9c:22:31:cb:09:f5:75: a4:2b:32:be:3a:79:3b:d7:b5:ba:37:34:78:33:8f: 06:c3:99:10:db:9d:92:a1:2c:93:76:b2:db:19:d2: fc:b7:b4:c4:45:14:c5:b8:49:54:c6:8f:57:4b:8d: da:79:22:ab:b1:11:27:3e:25:48:6a:2e:e4:98:ee: 98:74:51:57:3b:a7:86:bf:4f:11:c7:a9:14:85:fa: 5a:0c:79:ca:9a:3a:e3:a0:0d:e0:af:7c:35:40:45: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:55:B4:64:59:0C:E2:02:C5:9A:A3:D3:7C:41:52:D0:9E:E3:8A:D7 X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3e:9e:62:c5:cd:d8:67:5e:d2:39:54:81:09:ab:99:cc:2e: 6e:3b:0a:56:c0:4b:82:4d:02:61:c3:ac:a0:ba:83:4a:27:e7: ca:15:fb:2c:0e:e2:91:e0:92:c1:c0:8c:39:8a:b3:ed:2a:42: c6:a5:47:21:6a:bc:5c:dd:79:4a:a9:54:05:0d:c5:e7:bb:20: c8:2d:9d:ed:67:32:30:ae:4e:c1:0e:df:4a:10:92:50:c0:db: 3b:71:bf:54:c5:3e:cd:e1:1f:f1:c3:22:99:df:61:25:a9:02: 5c:12:8f:01:31:1b:57:21:f0:e7:48:53:0b:5f:65:0a:70:61: 04:31:d4:71:c0:04:be:71:b4:db:4f:48:d6:04:a2:27:a9:c9: f2:9f:70:6d:f6:20:d0:36:d3:cb:25:8a:42:e9:53:5c:d0:7a: 7d:35:5f:f7:e2:28:70:9d:31:8e:51:e5:57:ab:bf:dd:d0:b1: c3:14:1d:d2:fd:54:a7:48:7b:ec:4c:89:01:f1:21:9d:3c:2c: 5f:97:d9:e0:42:23:51:78:cd:d3:16:2e:c1:c7:33:1c:2e:b7: 86:b5:47:37:90:08:a3:cd:6e:de:97:63:01:78:f0:00:ff:76: 73:86:e0:f7:a2:f5:08:ca:4a:bc:55:ab:49:a3:02:29:92:09: 8b:a4:d8:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUwNzIwMjEwMTE1WhcNMjUwNzI3MjEwMTE1WjAYMRYwFAYD VQQDEw02ODdkNTkxYi0zMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mpt8WzhlZN3KqWMLj7AV3S+6mmqs+JWWkTiqg47J9b6GY8JnTJmzAzTF1fv N4Ef8i24Ajm0pAQ3txgVHBmVUCa0kRb6Phy3UPMts4F30IyBPi37vXk3WLbvBS6A SdHBHOS8cEczuS+5/15bs00waq/EJbUn7pPO9+bIUC4IEjuidQJlKFUFYD+AVerD gY4Snh1SNp4EXgqS0NV8VJwiMcsJ9XWkKzK+Onk717W6NzR4M48Gw5kQ252SoSyT drLbGdL8t7TERRTFuElUxo9XS43aeSKrsREnPiVIai7kmO6YdFFXO6eGv08Rx6kU hfpaDHnKmjrjoA3gr3w1QEUFOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlVtGRZ DOICxZqj03xBUtCe44rXMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Pp5ixc3YZ17SOVSBCauZzC5uOwpWwEuCTQJhw6yguoNKJ+fKFfss DuKR4JLBwIw5irPtKkLGpUcharxc3XlKqVQFDcXnuyDILZ3tZzIwrk7BDt9KEJJQ wNs7cb9UxT7N4R/xwyKZ32ElqQJcEo8BMRtXIfDnSFMLX2UKcGEEMdRxwAS+cbTb T0jWBKInqcnyn3Bt9iDQNtPLJYpC6VNc0Hp9NV/34ihwnTGOUeVXq7/d0LHDFB3S /VSnSHvsTIkB8SGdPCxfl9ngQiNReM3TFi7BxzMcLreGtUc3kAijzW7el2MBePAA /3ZzhuD3ovUIykq8VatJowIpkgmLpNgk -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:19 2025 by rpki-client