$ rpki-client -vvf rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft File: Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft (raw, json) Hash identifier: f6CdB/NHQnoGRl+K6u7te0qjouf8p1YgA7SnOo56/yQ= Subject key identifier: 98:18:7B:69:9A:B7:13:2E:8E:AD:09:80:2A:BA:B8:42:F2:52:C1:E1 Authority key identifier: 67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 Certificate issuer: /CN=A91180E8/serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft Manifest number: 6F Signing time: Wed 17 Sep 2025 07:35:53 +0000 Manifest this update: Wed 17 Sep 2025 07:35:53 +0000 Manifest next update: Wed 24 Sep 2025 07:35:53 +0000 Files and hashes: 1: Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl (hash: GJm3+1GNp32NRdBB0ta/Z56O1uYI6upWyX/u47AtZQ0=) 2: E368BEF2E9D611EFAC604979C4F9AE02.roa (hash: HfXLWtads28iS5LrLz0AFXei2F6BGIFKfg02w7QPxkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91180E8, serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Validity Not Before: Sep 17 07:35:53 2025 GMT Not After : Sep 24 07:35:53 2025 GMT Subject: CN=68ca64d9-e077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:ec:5d:9a:ae:77:46:35:73:85:a5:9b:40: ba:6d:ee:6e:1c:30:2e:5f:e3:ae:77:ab:16:19:05: 26:94:03:56:1f:5c:e2:0c:14:ad:c1:bb:9b:eb:05: 52:6e:90:8f:20:6e:20:4b:f3:46:ab:69:d8:fa:e5: b7:2d:1d:8d:14:b5:51:b5:ae:d8:60:0c:d2:58:8a: 3b:2a:89:fa:a9:b9:8f:67:e2:b9:13:a2:05:fc:f7: 12:93:f4:d5:06:2d:13:2d:7a:76:04:87:4d:64:bd: 0d:03:86:c7:a6:f8:6c:d6:38:b3:b9:d5:13:ba:4c: f5:f3:50:ed:c1:cb:ec:b0:23:7c:18:0d:ea:88:f0: 89:60:a7:48:cd:69:ae:3b:7d:b1:7f:d3:0c:b2:db: 61:3c:2d:9a:6f:c1:be:ca:86:2f:83:30:b4:cd:06: 37:07:16:bd:9b:3f:72:68:6a:71:74:d9:f0:cf:cc: 1e:80:4b:f4:c3:91:96:52:5b:35:93:54:36:3c:0c: 05:60:e9:97:ac:6b:6e:0e:56:3f:a9:c5:b5:ce:c5: 24:0e:b9:c0:d1:a4:2a:14:c3:ac:9c:02:06:b2:cb: 3a:be:2f:7c:a3:1b:b7:d5:a7:4f:93:9f:2c:53:b4: 29:a7:57:3c:4e:54:ef:c4:62:41:5b:ed:5d:7c:a5: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:18:7B:69:9A:B7:13:2E:8E:AD:09:80:2A:BA:B8:42:F2:52:C1:E1 X509v3 Authority Key Identifier: keyid:67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8f:bc:aa:34:0d:25:cf:b3:6d:03:e8:6c:0b:c8:19:7f:ad: f7:0f:c5:0f:0a:92:4d:3b:f8:3e:7b:5a:6f:4d:06:e8:9d:5a: 3d:1d:b5:c9:38:d5:82:f2:a5:33:92:ea:84:a6:81:83:f7:59: 87:d7:f1:ca:d8:ba:7c:3c:c2:16:7e:f9:9b:92:e2:e1:c6:b4: 98:06:dc:61:77:a4:00:b4:02:7a:29:03:57:89:bb:a7:a1:94: e6:76:b5:38:b1:7b:a3:87:20:e9:ce:4d:8a:35:7b:35:a2:39: f3:55:cd:ab:34:6e:78:21:bd:d2:e7:b6:f0:76:e9:e6:40:d7: 06:7e:0f:d1:5e:9f:24:4e:1e:d5:a3:58:5f:c8:7f:e1:93:62: ea:cd:98:83:7f:b6:37:24:90:ed:8f:39:e9:47:45:6c:bd:b8: 74:b9:77:08:7a:89:56:e1:b6:f6:45:8c:98:e7:5d:e1:da:ee: f2:87:0e:cd:f1:3b:04:f5:23:35:ab:ae:9f:04:d8:f7:89:01: 37:f2:dd:79:82:95:7e:45:36:77:fe:20:13:ce:38:36:8b:c2: 42:b9:ad:72:3c:4a:19:10:05:89:f3:6e:19:65:7c:b0:6e:88: 23:87:2f:7a:09:43:6e:1e:83:74:2c:61:6f:b8:d1:81:f5:10: 73:a2:ae:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODBFODExMC8GA1UEBRMoNjdGMjlCMzVBODk0MkFBNkI3RjQxQUVGQjM0QTA2NzZG RDY5NTA5NzAeFw0yNTA5MTcwNzM1NTNaFw0yNTA5MjQwNzM1NTNaMBgxFjAUBgNV BAMTDTY4Y2E2NGQ5LWUwNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Q+xdmq53RjVzhaWbQLpt7m4cMC5f4653qxYZBSaUA1YfXOIMFK3Bu5vrBVJu kI8gbiBL80aradj65bctHY0UtVG1rthgDNJYijsqifqpuY9n4rkTogX89xKT9NUG LRMtenYEh01kvQ0Dhsem+GzWOLO51RO6TPXzUO3By+ywI3wYDeqI8Ilgp0jNaa47 fbF/0wyy22E8LZpvwb7Khi+DMLTNBjcHFr2bP3JoanF02fDPzB6AS/TDkZZSWzWT VDY8DAVg6Zesa24OVj+pxbXOxSQOucDRpCoUw6ycAgayyzq+L3yjG7fVp0+TnyxT tCmnVzxOVO/EYkFb7V18pc9BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmBh7aZq3 Ey6OrQmAKrq4QvJSweEwHwYDVR0jBBgwFoAUZ/KbNaiUKqa39Brvs0oGdv1pUJcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4MEU4LzNBOUZBQzU0RTlE NjExRUY4RDA0QjY3N0M0RjlBRTAyL1pfS2JOYWlVS3FhMzlCcnZzMG9HZHYxcFVK Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWl9LYk5haVVLcWEzOUJydnMwb0dkdjFwVUpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 MEU4LzNBOUZBQzU0RTlENjExRUY4RDA0QjY3N0M0RjlBRTAyL1pfS2JOYWlVS3Fh MzlCcnZzMG9HZHYxcFVKYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHePvKo0DSXPs20D6GwLyBl/rfcPxQ8Kkk07+D57Wm9NBuidWj0dtck4 1YLypTOS6oSmgYP3WYfX8crYunw8whZ++ZuS4uHGtJgG3GF3pAC0AnopA1eJu6eh lOZ2tTixe6OHIOnOTYo1ezWiOfNVzas0bnghvdLntvB26eZA1wZ+D9FenyROHtWj WF/If+GTYurNmIN/tjckkO2POelHRWy9uHS5dwh6iVbhtvZFjJjnXeHa7vKHDs3x OwT1IzWrrp8E2PeJATfy3XmClX5FNnf+IBPOODaLwkK5rXI8ShkQBYnzbhllfLBu iCOHL3oJQ24eg3QsYW+40YH1EHOirp0= -----END CERTIFICATE-----Generated at Thu Sep 18 23:50:04 2025 by rpki-client