$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: e8lA3WMP88i7H9AL+VQ0y30qcMjI2XbZ4ULkD/o9roM= Subject key identifier: 87:CD:51:52:F8:D8:36:5B:82:06:14:35:06:AC:B8:1F:85:B8:96:80 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0C60 Signing time: Sun 24 Aug 2025 18:27:31 +0000 Manifest this update: Sun 24 Aug 2025 18:27:31 +0000 Manifest next update: Sun 31 Aug 2025 18:27:31 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: YExnO+Y7orYlBVMU6mbYRBC1p3+YuWoL1tCfEXk+dWc=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Aug 24 18:27:31 2025 GMT Not After : Aug 31 18:27:31 2025 GMT Subject: CN=68ab5993-cd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:39:df:18:cb:7c:40:42:97:84:ec:c8:5d: 4d:ee:46:4f:33:81:dd:60:d9:f9:71:aa:8f:eb:48: f1:f7:a6:44:8f:00:f1:53:85:f1:6a:cc:7e:72:a7: a4:d0:70:a6:08:5a:7b:ef:07:c2:83:49:d1:eb:06: 45:34:8a:79:3e:cb:de:fa:f8:7f:ea:72:c8:3b:e7: 76:e8:b9:46:a4:61:df:0b:49:70:68:cd:b2:c7:07: 4e:e7:51:d2:90:19:2b:30:cc:93:25:8e:d7:eb:54: 69:b2:4c:e8:b1:d0:fc:35:8b:6b:cb:b3:67:97:f8: e2:cd:92:85:19:72:d9:85:92:7a:10:e6:76:4a:9c: 8f:9e:d8:7b:af:0f:35:56:3a:9f:7c:2d:1b:8a:cf: d8:11:c9:82:8d:13:93:92:2e:e7:e9:e0:cd:07:a6: 0b:9d:04:b1:ca:6e:29:33:83:7f:67:91:08:d6:98: ad:52:5f:00:1b:bf:6a:90:85:23:4e:d6:43:aa:fd: 52:58:7b:f2:23:08:c9:95:7f:24:b0:73:dd:ce:1f: 2b:df:6d:49:87:bc:ec:84:5a:71:37:12:68:14:7a: 6b:6d:30:e5:22:33:a7:e6:fe:db:b0:00:11:e8:92: e8:cf:c5:fa:b4:86:df:b3:c0:31:2b:35:0e:6f:98: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:51:52:F8:D8:36:5B:82:06:14:35:06:AC:B8:1F:85:B8:96:80 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f7:44:82:29:9d:a1:96:67:9b:2c:d0:9b:f6:2c:b7:53:31: ab:cd:6c:3b:d1:7c:0d:53:57:4f:a7:e6:4d:1c:a3:59:7e:9b: 46:05:0a:7e:1b:b7:85:f6:2b:8b:b8:33:02:d5:55:d1:5b:e0: f2:0b:72:ca:d1:ec:0f:f7:ba:0b:17:7f:a2:ba:2f:c4:ed:92: 04:38:75:56:aa:17:6c:8c:14:0c:34:16:48:67:6f:ff:b7:5f: 3f:e2:80:51:7f:8a:bc:ef:b2:45:20:c0:cf:47:87:99:42:66: b4:6e:99:19:89:2f:c1:f1:0b:0d:a8:b4:d0:0f:94:d2:1f:af: 73:be:29:83:f1:a8:ea:4c:02:34:92:6f:ed:89:29:ea:23:f8: 9c:bd:15:d9:5e:26:88:47:53:58:bd:7c:eb:f9:bd:c3:50:96: 8f:00:53:34:d7:fc:d4:06:dd:02:12:53:5e:cc:43:75:20:72: b8:53:95:bd:78:09:94:70:41:ba:4a:bc:a3:d5:37:c6:44:34: 87:65:dc:24:9c:64:10:76:fb:5f:33:40:18:df:86:3e:dd:66: ec:ba:3d:d5:83:7f:7c:39:55:4d:a8:67:bf:35:15:7a:5d:6e: 5c:bf:c1:56:e8:96:27:06:29:58:1c:74:d0:21:90:c0:9d:63: 60:1c:bc:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUwODI0MTgyNzMxWhcNMjUwODMxMTgyNzMxWjAYMRYwFAYD VQQDEw02OGFiNTk5My1jZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MM53xjLfEBCl4TsyF1N7kZPM4HdYNn5caqP60jx96ZEjwDxU4Xxasx+cqek 0HCmCFp77wfCg0nR6wZFNIp5Psve+vh/6nLIO+d26LlGpGHfC0lwaM2yxwdO51HS kBkrMMyTJY7X61RpskzosdD8NYtry7Nnl/jizZKFGXLZhZJ6EOZ2SpyPnth7rw81 VjqffC0bis/YEcmCjROTki7n6eDNB6YLnQSxym4pM4N/Z5EI1pitUl8AG79qkIUj TtZDqv1SWHvyIwjJlX8ksHPdzh8r321Jh7zshFpxNxJoFHprbTDlIjOn5v7bsAAR 6JLoz8X6tIbfs8AxKzUOb5gcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfNUVL4 2DZbggYUNQasuB+FuJaAMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG90SCKZ2hlmebLNCb9iy3UzGrzWw70XwNU1dPp+ZNHKNZfptGBQp+ G7eF9iuLuDMC1VXRW+DyC3LK0ewP97oLF3+iui/E7ZIEOHVWqhdsjBQMNBZIZ2// t18/4oBRf4q877JFIMDPR4eZQma0bpkZiS/B8QsNqLTQD5TSH69zvimD8ajqTAI0 km/tiSnqI/icvRXZXiaIR1NYvXzr+b3DUJaPAFM01/zUBt0CElNezEN1IHK4U5W9 eAmUcEG6Sryj1TfGRDSHZdwknGQQdvtfM0AY34Y+3Wbsuj3Vg398OVVNqGe/NRV6 XW5cv8FW6JYnBilYHHTQIZDAnWNgHLzY -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:37 2025 by rpki-client