$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: +A+33jgRBZTP6HC1IrMO7R/bODhizor8e/vwT6fgKOk= Subject key identifier: B4:5C:31:23:35:67:70:C4:19:EA:98:B1:4A:DC:4E:6E:D1:34:24:2D Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: 9FAA Signing time: Sun 20 Jul 2025 14:30:41 +0000 Manifest this update: Sun 20 Jul 2025 14:30:40 +0000 Manifest next update: Sun 27 Jul 2025 14:30:40 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: Yx+65yL+J79A7w/Eln9JLT3aHf2zY7y1bz/ZS/QLYQI=) 2: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: RYynr8uizf4mxXQD/bYs58a0i9OmwI4vdpj7nHmjiJU=) 3: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: oMF/P2hGXRHcLkAXgbmeUw5lcthqUMWdcFQRgDGmw2Q=) 4: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: 68iXhMXoCKzkvFm4ZJIC/ibhTxkbyNkKn12MmIsJUjc=) 5: 191363A69DD911EC99D91668C4F9AE02.roa (hash: oqniAucPfqcKV0mTFTmt9sxkwi/yyX2GOXb0nYNRsyI=) 6: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: SpN5g9M2rsSW+Cra37fKcK/lk5XqYbPAMh8S4vUS9qk=) 7: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: U9RF+JaWcsKZTr1DEGw1Y5hTdB+oWxy9sRXTz5ZgIuo=) 8: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: Y+JgutBZqKB0sr/67XUkEfaEMyqBwPZIYt+9Yv44r5c=) 9: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: kjWRly5sP345NgQNsNa2Y38tsuhMAJkUf7cDKkslnxQ=) 10: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: Dnw6VZCydK3JoKDSOzotlEvfgmRpxLVN7ezEA2ZyyGo=) 11: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: Y+xehgtewaeOdOL6PowHHRPVgAd4mQJAADuq74in7FA=) 12: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: +Q2D0d9yEIcvHWqL458RmFQjgHnoWa/Nyf3wOjdRqJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6907 (0x1afb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Jul 20 14:30:40 2025 GMT Not After : Jul 27 14:30:40 2025 GMT Subject: CN=687cfd91-fd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:75:e9:1e:2a:cd:b9:92:26:39:0e:cb:be: f3:4a:bf:1e:19:84:2f:ed:fb:3b:56:3a:5f:78:2f: e2:d6:8b:18:1a:8b:20:b7:f8:c6:ec:3c:1f:60:25: 12:8f:ec:4a:62:cf:7f:6c:f9:9a:9a:17:88:f6:d9: 37:fc:20:3f:a3:d1:8c:71:03:90:e3:53:4b:51:4e: df:41:5e:1d:67:97:8a:98:08:ec:6f:4e:f5:43:3c: 58:bf:69:98:2f:65:3e:e8:3d:71:75:cd:56:6a:39: 80:1d:57:e6:96:a8:f2:b7:d7:0b:80:6f:c0:71:8a: c1:4b:b7:a5:d5:26:69:c8:a4:b4:df:61:da:a6:0f: 2d:5d:7d:ef:18:99:4c:66:9b:e3:cd:99:7e:66:f1: 87:ca:e3:6c:49:ac:38:b1:03:f3:2d:46:8a:70:5d: 45:3d:dc:b2:bd:67:06:2e:db:2e:9f:2d:07:ff:f5: d6:fd:ed:64:e5:1e:05:b1:83:3c:bd:bd:51:2e:d9: 37:23:68:07:23:8e:2f:96:69:b0:3a:62:28:93:94: e9:77:23:59:31:dc:0b:1c:ba:66:e9:18:88:da:00: 96:3c:71:32:39:bd:eb:12:73:54:4d:83:67:f9:7a: 76:55:28:9e:42:62:02:bb:e3:c0:62:ea:48:14:69: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5C:31:23:35:67:70:C4:19:EA:98:B1:4A:DC:4E:6E:D1:34:24:2D X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d3:38:1a:23:16:3a:e9:18:59:00:23:02:c6:40:07:d2:ff: de:35:1f:f7:40:e7:73:66:a3:75:51:77:09:00:9d:33:be:f6: e8:ab:ac:b9:4b:06:89:74:69:b2:25:83:b0:7b:2e:c1:02:20: 10:be:1f:a4:75:c5:53:a8:36:95:94:f5:e7:71:67:e8:fc:ac: d1:ab:cf:0c:bb:90:07:7a:2e:70:87:c5:36:1e:d9:34:6c:f6: e4:2e:92:ea:f8:34:5b:09:41:fb:b7:46:3c:87:08:d9:b0:3c: 9b:47:eb:96:35:23:6f:d8:91:be:59:ea:26:b8:d0:b2:e8:d3: 99:8e:8e:68:6b:c1:51:77:0b:04:e3:68:6f:91:4c:a9:60:3a: 2a:04:13:08:b2:b0:b4:65:19:c3:fb:06:b6:e8:a4:52:8d:98: a0:ac:86:53:84:b4:97:29:20:67:3a:34:31:58:f2:08:96:48: 46:37:43:5d:30:4d:a1:95:d6:34:bb:af:dd:33:3c:11:75:e3: 28:9e:14:2e:9b:64:9b:7f:bc:b9:70:2f:ef:4a:c7:8e:58:ce: 8c:c0:57:ec:bb:ea:29:e0:ce:a7:06:cb:0a:a8:a0:55:c7:81: 52:ae:d5:92:5b:ae:99:ab:04:56:f8:8a:4f:21:b0:ad:56:7f: ea:e1:f6:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwNzIwMTQzMDQwWhcNMjUwNzI3MTQzMDQwWjAYMRYwFAYD VQQDEw02ODdjZmQ5MS1mZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+N16R4qzbmSJjkOy77zSr8eGYQv7fs7VjpfeC/i1osYGosgt/jG7DwfYCUS j+xKYs9/bPmamheI9tk3/CA/o9GMcQOQ41NLUU7fQV4dZ5eKmAjsb071QzxYv2mY L2U+6D1xdc1WajmAHVfmlqjyt9cLgG/AcYrBS7el1SZpyKS032Hapg8tXX3vGJlM ZpvjzZl+ZvGHyuNsSaw4sQPzLUaKcF1FPdyyvWcGLtsuny0H//XW/e1k5R4FsYM8 vb1RLtk3I2gHI44vlmmwOmIok5TpdyNZMdwLHLpm6RiI2gCWPHEyOb3rEnNUTYNn +Xp2VSieQmICu+PAYupIFGnxowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRcMSM1 Z3DEGeqYsUrcTm7RNCQtMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA10zgaIxY66RhZACMCxkAH0v/eNR/3QOdzZqN1UXcJAJ0zvvboq6y5 SwaJdGmyJYOwey7BAiAQvh+kdcVTqDaVlPXncWfo/KzRq88Mu5AHei5wh8U2Htk0 bPbkLpLq+DRbCUH7t0Y8hwjZsDybR+uWNSNv2JG+WeomuNCy6NOZjo5oa8FRdwsE 42hvkUypYDoqBBMIsrC0ZRnD+wa26KRSjZigrIZThLSXKSBnOjQxWPIIlkhGN0Nd ME2hldY0u6/dMzwRdeMonhQum2Sbf7y5cC/vSseOWM6MwFfsu+op4M6nBssKqKBV x4FSrtWSW66ZqwRW+IpPIbCtVn/q4fZI -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:09 2025 by rpki-client