$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: nFkDutCy8Qv4FspmH/pMj7GPlHTJPYVzcy0eqEyboFU= Subject key identifier: 62:EF:D5:5C:B9:86:0F:C0:3F:B7:80:1E:B4:E8:C0:1A:0D:92:07:74 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 0325 Signing time: Wed 17 Sep 2025 01:37:30 +0000 Manifest this update: Wed 17 Sep 2025 01:37:30 +0000 Manifest next update: Wed 24 Sep 2025 01:37:30 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: 5OKn9VxLNT6YEuVu1bMg9akbTKD1qKFeXN71IbeJMRw=) 2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: 3npwV8/+wiUK9JBAZyO0+8UedY3k/f+O7Td/WLjNjlA=) 3: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: RnbjFxdhVYxbEY3yp6uidgVt3+flm27oqhA1+XpnuB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Sep 17 01:37:30 2025 GMT Not After : Sep 24 01:37:30 2025 GMT Subject: CN=68ca10da-5c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:97:2a:fe:08:7b:ab:ca:06:02:41:98:21: 75:fa:56:79:18:06:c0:7f:08:c7:32:59:0e:bb:e3: 29:80:18:e1:8b:10:9d:9a:fd:8f:2f:09:db:82:33: 77:39:e0:bd:e1:fa:77:ce:f8:6c:0a:db:b2:f5:b1: cc:fa:52:fc:5d:e7:0e:96:25:51:46:a4:75:82:17: d2:70:c9:c7:18:33:15:1a:f5:6b:12:e3:57:7d:41: ab:21:f6:0a:a0:4d:01:cc:99:28:e0:33:62:3d:29: 23:55:b5:fb:48:bb:1d:7d:98:0d:e6:cf:7c:54:d0: 43:26:24:eb:53:96:78:e9:2d:bb:bc:60:5a:c9:c2: a6:0c:77:c5:36:c3:99:7b:49:e6:47:cb:ca:b3:41: 28:4d:99:cb:b3:f3:2f:fb:a4:44:82:d3:de:d9:e7: 73:1e:a1:fa:9c:08:2e:13:f9:19:5e:28:4d:40:26: a9:2e:d3:c1:e6:42:18:6e:df:14:ed:16:08:37:75: a2:e3:83:12:bc:ad:c1:26:11:21:37:8a:18:6a:e9: 42:48:43:c4:4e:cc:d3:1d:50:c0:16:07:13:99:6d: 23:da:b1:55:5a:b4:87:8c:4e:ea:04:60:a1:7e:a0: 58:57:50:3e:bb:dc:ea:50:76:1c:1f:f4:4e:5e:48: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EF:D5:5C:B9:86:0F:C0:3F:B7:80:1E:B4:E8:C0:1A:0D:92:07:74 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:49:8d:c8:46:d9:b9:30:ff:9a:ce:3f:54:dc:f6:8a:c3:09: ac:90:f1:6b:f8:f3:51:4b:5d:68:b2:e8:1f:6e:77:71:b0:fc: a2:23:73:e7:b7:f4:f3:4d:54:b4:5c:89:97:43:d6:32:95:5c: c6:67:59:da:91:8b:69:fc:76:5e:65:71:f5:a7:f5:30:21:4d: d8:a8:d9:a9:97:37:3a:23:95:c5:e2:79:d5:60:29:7b:c3:e6: 2f:6c:81:7f:41:02:f8:3d:90:0c:4b:8b:d3:79:e0:cd:a8:db: c3:c6:6d:6c:da:bb:83:d1:50:5d:c9:1a:90:cc:25:24:97:b3: 6e:b8:b5:07:3f:45:9f:11:66:8d:3a:0f:0f:0a:cf:2e:7b:21: 17:4a:9b:a4:58:18:36:c2:0c:db:8d:ec:2c:d5:9d:d0:15:50: 78:05:38:cb:a6:46:ca:55:db:c8:6c:cb:73:84:90:5b:93:98: 5d:2c:f5:1c:28:b6:6d:fa:f0:60:f4:dd:58:10:8e:7a:c5:5e: 84:f0:73:76:1a:59:bd:82:56:9f:ca:01:12:fd:42:52:24:f2: b6:69:9a:e4:4c:c0:a2:bd:30:e2:3d:92:96:f7:9d:cc:ff:ee: 1a:a0:7a:94:71:0b:98:d7:ad:b3:a1:c0:41:e4:8c:cc:95:20: c5:82:ce:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwOTE3MDEzNzMwWhcNMjUwOTI0MDEzNzMwWjAYMRYwFAYD VQQDEw02OGNhMTBkYS01YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW6XKv4Ie6vKBgJBmCF1+lZ5GAbAfwjHMlkOu+MpgBjhixCdmv2PLwnbgjN3 OeC94fp3zvhsCtuy9bHM+lL8XecOliVRRqR1ghfScMnHGDMVGvVrEuNXfUGrIfYK oE0BzJko4DNiPSkjVbX7SLsdfZgN5s98VNBDJiTrU5Z46S27vGBaycKmDHfFNsOZ e0nmR8vKs0EoTZnLs/Mv+6REgtPe2edzHqH6nAguE/kZXihNQCapLtPB5kIYbt8U 7RYIN3Wi44MSvK3BJhEhN4oYaulCSEPETszTHVDAFgcTmW0j2rFVWrSHjE7qBGCh fqBYV1A+u9zqUHYcH/ROXkjfVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLv1Vy5 hg/AP7eAHrTowBoNkgd0MB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApSY3IRtm5MP+azj9U3PaKwwmskPFr+PNRS11osugfbndxsPyiI3Pn t/TzTVS0XImXQ9YylVzGZ1nakYtp/HZeZXH1p/UwIU3YqNmplzc6I5XF4nnVYCl7 w+YvbIF/QQL4PZAMS4vTeeDNqNvDxm1s2ruD0VBdyRqQzCUkl7NuuLUHP0WfEWaN Og8PCs8ueyEXSpukWBg2wgzbjews1Z3QFVB4BTjLpkbKVdvIbMtzhJBbk5hdLPUc KLZt+vBg9N1YEI56xV6E8HN2Glm9glafygES/UJSJPK2aZrkTMCivTDiPZKW953M /+4aoHqUcQuY162zocBB5IzMlSDFgs6Q -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:45 2025 by rpki-client