$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: c3fRAwsB5KYJy/OyRStNReB+p5KX0ZHCEZdwD8C7Cwk= Subject key identifier: 3E:34:9A:47:2D:38:9F:33:9D:58:D0:7F:3F:4F:11:E5:9F:3D:37:50 Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0E41 Signing time: Sun 20 Jul 2025 18:08:26 +0000 Manifest this update: Sun 20 Jul 2025 18:08:25 +0000 Manifest next update: Sun 27 Jul 2025 18:08:25 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: XmENFJZ3EX1GmWMQZEVdvKyB+cEQKaQaSqaSIYYfahU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Jul 20 18:08:25 2025 GMT Not After : Jul 27 18:08:25 2025 GMT Subject: CN=687d309a-aa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:69:62:3c:a2:e5:7a:90:e8:6a:bb:c4:4d: 06:ce:8b:bc:91:93:e6:9b:31:cb:fb:03:63:0c:e7: 93:a7:57:67:f6:90:ea:7c:80:4b:f7:dc:87:67:cf: ab:2e:e0:1d:64:44:d9:5c:fe:c5:29:61:66:a2:aa: bd:30:0b:61:9c:a6:3a:67:66:0a:57:03:ae:a8:9b: 9e:25:65:b7:82:a8:07:b7:4c:2f:8f:00:c5:51:72: ad:6f:09:b4:46:34:da:c0:c4:42:46:9d:5a:3c:c6: 3c:1b:69:26:07:26:39:cb:91:5e:88:53:55:6c:84: 0f:a8:5f:5e:a8:15:ae:09:37:a3:5b:87:3e:f3:42: ad:e5:86:60:06:6a:db:ba:76:34:e5:49:03:c2:b2: cc:ed:81:c1:a2:6d:d4:7a:1a:9f:88:25:32:cc:6e: e7:a6:a1:33:2e:b0:e7:88:3c:6f:25:70:a8:2a:4a: 3a:c0:ee:19:8a:85:54:3a:90:2b:a5:4b:cc:d1:c1: 62:52:7a:a1:4f:a3:82:f9:5a:8f:5a:18:e6:b1:e8: e9:86:d8:1a:26:2d:6c:ff:58:96:f5:00:f4:00:1c: dd:fb:e0:dd:b8:c5:19:fb:50:fb:2f:a3:c6:5c:16: f3:fc:44:df:24:d9:14:08:e5:c3:a7:bf:d2:de:e5: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:34:9A:47:2D:38:9F:33:9D:58:D0:7F:3F:4F:11:E5:9F:3D:37:50 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:77:fd:76:f6:e1:8b:16:72:2d:27:0f:cf:31:d3:dc:96:04: 8d:df:07:79:b9:19:ee:74:7f:fc:35:70:77:e4:92:e7:6e:17: 28:45:be:59:90:71:5d:52:73:8a:52:bd:f9:0c:1c:b9:33:dd: ad:e0:5c:fa:76:0e:43:88:ba:b9:8b:9a:d9:1d:0c:57:e5:79: c8:d0:ea:f7:dd:27:70:68:59:1c:13:e3:c4:86:eb:03:9f:e6: 21:9e:8c:bc:3f:a2:18:9e:87:3c:ec:6f:c1:80:ac:44:30:c1: f1:86:ee:b9:8a:97:f4:a2:bb:a3:99:fe:50:c6:96:dc:cf:b9: 48:aa:74:07:a7:0b:09:1b:7a:4b:6e:86:59:55:e2:f8:12:b1: 0d:73:0d:11:b8:00:0f:bf:09:91:83:91:57:85:c7:dd:71:03: 85:a1:35:0d:66:7d:87:2d:02:a2:5a:f6:76:de:5b:ec:f9:a9: 2a:84:9a:a2:ef:64:88:fc:b9:20:a1:b5:56:05:62:26:b8:d6: ba:bd:5a:df:5d:54:8c:bf:dd:58:ec:55:fa:d0:48:8d:52:37: 88:8f:75:ed:9e:4b:05:5a:59:cb:11:80:a0:d3:13:cb:60:fb: 1d:8c:3e:b1:e6:9b:fa:70:b2:2c:61:c6:49:0e:e1:c0:df:ea: 5f:8f:f2:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjUwNzIwMTgwODI1WhcNMjUwNzI3MTgwODI1WjAYMRYwFAYD VQQDEw02ODdkMzA5YS1hYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU1pYjyi5XqQ6Gq7xE0Gzou8kZPmmzHL+wNjDOeTp1dn9pDqfIBL99yHZ8+r LuAdZETZXP7FKWFmoqq9MAthnKY6Z2YKVwOuqJueJWW3gqgHt0wvjwDFUXKtbwm0 RjTawMRCRp1aPMY8G2kmByY5y5FeiFNVbIQPqF9eqBWuCTejW4c+80Kt5YZgBmrb unY05UkDwrLM7YHBom3UehqfiCUyzG7npqEzLrDniDxvJXCoKko6wO4ZioVUOpAr pUvM0cFiUnqhT6OC+VqPWhjmsejphtgaJi1s/1iW9QD0ABzd++DduMUZ+1D7L6PG XBbz/ETfJNkUCOXDp7/S3uUX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD40mkct OJ8znVjQfz9PEeWfPTdQMB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCed/129uGLFnItJw/PMdPclgSN3wd5uRnudH/8NXB35JLnbhcoRb5Z kHFdUnOKUr35DBy5M92t4Fz6dg5DiLq5i5rZHQxX5XnI0Or33SdwaFkcE+PEhusD n+Yhnoy8P6IYnoc87G/BgKxEMMHxhu65ipf0orujmf5Qxpbcz7lIqnQHpwsJG3pL boZZVeL4ErENcw0RuAAPvwmRg5FXhcfdcQOFoTUNZn2HLQKiWvZ23lvs+akqhJqi 72SI/LkgobVWBWImuNa6vVrfXVSMv91Y7FX60EiNUjeIj3XtnksFWlnLEYCg0xPL YPsdjD6x5pv6cLIsYcZJDuHA3+pfj/IJ -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:00 2025 by rpki-client