$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: 3DwKCPLwHrzecO4DIUHlI/bZosxaFzU25CSstLM/Dx0= Subject key identifier: 39:BB:24:A9:E0:D4:9F:83:E6:63:19:0A:C1:58:76:4E:BA:F2:5A:6B Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: 012D Signing time: Wed 17 Sep 2025 05:20:22 +0000 Manifest this update: Wed 17 Sep 2025 05:20:22 +0000 Manifest next update: Wed 24 Sep 2025 05:20:22 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: P2Dwmo4h1cckJHejf1UkkAV5cgVvhBnuhslFNaOo0gE=) 2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: Sep 17 05:20:22 2025 GMT Not After : Sep 24 05:20:22 2025 GMT Subject: CN=68ca4516-b8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:36:4b:42:38:86:91:48:29:1f:2a:2d:ca: 62:5a:6d:c7:e9:99:bc:32:a3:de:33:b5:4d:7f:7e: 77:70:c3:80:f8:2f:7a:70:ed:e2:70:42:7d:45:d3: 2f:2f:cd:73:53:4f:e8:a6:63:04:c8:db:1c:77:61: 69:a1:71:27:a6:ab:20:c7:57:bf:22:d0:11:38:fb: 3e:3f:1e:c6:0a:17:c0:02:44:fc:02:4c:5a:b5:ce: f9:56:91:29:d1:d5:6a:60:eb:38:49:c4:07:3e:51: 6d:55:45:8c:40:b5:00:23:ec:9b:7b:9c:2d:af:bb: d7:ce:e0:97:ca:58:23:c0:41:7a:5e:4d:25:71:8c: 9a:24:ae:65:cb:6c:d2:92:d0:cb:72:09:71:fe:7c: ee:d7:e6:86:f4:15:19:7c:fa:eb:f0:2b:f4:2b:63: 43:4c:f3:b8:a3:3f:79:f8:d8:43:4b:79:3e:a0:22: 57:53:48:1a:d0:f5:5d:e4:30:20:38:be:10:de:14: 57:90:30:f4:00:30:6d:cd:d2:62:b6:2f:96:2e:81: ee:3c:a8:a3:66:9d:7c:f1:57:c1:e0:a4:ca:1f:9d: c0:53:cd:64:65:9e:67:24:30:e2:11:2d:e4:f5:67: 94:d5:fd:47:be:5c:0c:19:41:8e:0f:88:04:58:ea: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BB:24:A9:E0:D4:9F:83:E6:63:19:0A:C1:58:76:4E:BA:F2:5A:6B X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:29:c8:ea:30:e8:fa:3c:60:cf:8a:68:fe:d7:05:de:cb:06: fb:30:60:b7:50:a6:b2:ba:f7:3d:b2:74:a3:df:48:6d:33:13: 62:cd:cc:42:3e:bd:39:40:bd:43:c5:39:dd:b3:47:60:52:85: 0f:c7:d5:fd:64:32:0a:f1:fd:71:96:1b:b6:d3:fc:ac:de:d5: 05:80:e0:9c:ce:7e:4e:28:81:3f:2c:f6:9a:6f:ca:29:12:02: f7:d2:37:fe:ab:e1:70:b4:96:cc:59:6c:e9:08:75:b3:d0:8e: 88:0e:76:7b:f0:c3:b8:89:8c:fe:ad:14:87:59:7b:3c:b3:a0: dc:20:75:8e:de:a0:d2:1b:a0:2a:c9:06:3e:4f:17:4c:7a:1a: 19:7e:34:37:2d:81:ea:9f:a7:63:47:10:74:22:f0:12:26:4e: de:f0:40:29:74:8c:f1:60:0d:d7:6c:f8:1d:1c:22:e4:95:87: fb:9e:8d:d1:fc:17:7f:68:0e:c1:9a:bb:fe:71:08:8b:b8:fa: 1a:97:2b:74:ad:48:b2:ef:39:58:25:23:ed:49:c7:7b:ed:cc: 89:7b:3f:3d:cf:bb:88:f3:e4:2a:0f:56:53:ab:ba:f4:3f:97: 75:43:42:6e:82:2d:ad:3c:b3:3e:c8:81:49:5d:88:29:bc:26: ea:b8:0d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB QTczMUI1NTIwHhcNMjUwOTE3MDUyMDIyWhcNMjUwOTI0MDUyMDIyWjAYMRYwFAYD VQQDEw02OGNhNDUxNi1iOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVg2S0I4hpFIKR8qLcpiWm3H6Zm8MqPeM7VNf353cMOA+C96cO3icEJ9RdMv L81zU0/opmMEyNscd2FpoXEnpqsgx1e/ItAROPs+Px7GChfAAkT8Akxatc75VpEp 0dVqYOs4ScQHPlFtVUWMQLUAI+ybe5wtr7vXzuCXylgjwEF6Xk0lcYyaJK5ly2zS ktDLcglx/nzu1+aG9BUZfPrr8Cv0K2NDTPO4oz95+NhDS3k+oCJXU0ga0PVd5DAg OL4Q3hRXkDD0ADBtzdJiti+WLoHuPKijZp188VfB4KTKH53AU81kZZ5nJDDiES3k 9WeU1f1HvlwMGUGOD4gEWOqtjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm7JKng 1J+D5mMZCsFYdk668lprMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5 RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwKcjqMOj6PGDPimj+1wXeywb7MGC3UKayuvc9snSj30htMxNizcxC Pr05QL1DxTnds0dgUoUPx9X9ZDIK8f1xlhu20/ys3tUFgOCczn5OKIE/LPaab8op EgL30jf+q+FwtJbMWWzpCHWz0I6IDnZ78MO4iYz+rRSHWXs8s6DcIHWO3qDSG6Aq yQY+TxdMehoZfjQ3LYHqn6djRxB0IvASJk7e8EApdIzxYA3XbPgdHCLklYf7no3R /Bd/aA7Bmrv+cQiLuPoalyt0rUiy7zlYJSPtScd77cyJez89z7uI8+QqD1ZTq7r0 P5d1Q0Jugi2tPLM+yIFJXYgpvCbquA3T -----END CERTIFICATE-----Generated at Fri Sep 19 05:30:09 2025 by rpki-client