$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: 2GKonsQtyFQ4R43hVcNJL/7r3+26F+uMOz9LkZPhkKA= Subject key identifier: 56:8B:F2:6A:D4:A6:44:24:89:13:14:89:77:C3:A3:A8:09:C9:77:88 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 01EC Signing time: Thu 21 Aug 2025 02:39:17 +0000 Manifest this update: Thu 21 Aug 2025 02:39:17 +0000 Manifest next update: Thu 28 Aug 2025 02:39:17 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: BVO6daFhKWBul4E9ksaSEpaT9MrnyC0xCu4rVGJmgh0=) 2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: 4hy1f5KhPhwHVnBrwdKHHsp/qGx5VbOvDT16foHwuRM=) 3: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: l3pw7Z4d1Nkw0APH0xp6K2791IsFOtCcx1C4farScNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Aug 21 02:39:17 2025 GMT Not After : Aug 28 02:39:17 2025 GMT Subject: CN=68a686d5-42ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:c9:7c:9b:9b:45:91:17:b1:88:d6:aa:6c: c6:27:27:6a:8e:b7:a8:6e:cb:b4:8c:b5:47:d4:cc: 09:c3:8a:cb:92:2c:de:67:b5:20:74:9c:07:2b:ee: 48:a5:a8:4a:79:11:0a:f9:b4:55:91:a3:2a:f3:63: 67:ff:c5:bb:37:69:a4:0e:d9:b6:6b:95:da:02:00: 83:8c:65:34:ac:2a:da:12:79:fa:b0:bf:70:a0:f4: a1:4a:7e:cc:ce:82:c2:1b:d5:77:7e:c2:ea:c5:0c: 1f:b8:5f:5a:76:f0:7a:b3:bf:ea:f3:cb:55:c1:fe: 69:fd:02:9b:5a:d9:ff:24:66:d6:45:22:a5:89:de: 20:a4:be:e4:af:11:29:94:ed:52:3a:83:e6:c8:3f: 4d:b3:ed:05:3d:54:85:d1:e3:eb:24:9e:e3:a1:db: c8:72:29:3c:05:48:3e:19:76:7a:b8:c8:6b:72:02: 15:58:34:f7:b7:b9:f3:0d:6f:d1:b5:c3:26:bc:bb: 83:44:fc:0a:70:14:09:68:d1:7a:d3:1b:ea:0b:74: b6:35:e1:00:ea:4d:34:9c:25:13:9c:00:0c:32:4c: e9:03:43:86:1d:4d:c7:b2:a9:b6:7a:f5:dc:4f:82: 3d:3c:59:25:91:23:58:1f:f8:94:f1:7a:52:bd:3c: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8B:F2:6A:D4:A6:44:24:89:13:14:89:77:C3:A3:A8:09:C9:77:88 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:25:ec:97:ed:a5:cb:15:11:45:ff:79:67:a0:e8:9c:7c:1b: 63:54:d1:ee:18:d3:6e:1f:3e:69:fd:6b:21:fd:eb:ec:de:62: 35:1a:c9:ef:79:da:3f:2b:23:54:ee:2e:ba:96:2f:c2:ee:e9: b2:30:a2:12:ba:ab:42:00:ac:35:d8:7f:ad:66:76:57:b6:ec: ac:cb:43:74:e4:70:60:82:26:84:38:2a:1b:e8:3e:9c:fb:31: 09:fa:f9:fb:fe:38:b8:a7:83:4c:51:1d:d6:42:c7:71:55:49: 10:16:8d:5c:f2:fb:03:2c:39:8e:41:fb:9c:a2:c5:38:e5:c5: 27:11:ed:6b:60:b9:4a:c6:b1:1c:84:aa:05:d4:55:de:a9:b2: 31:74:1b:51:63:55:de:e2:9d:f8:49:6f:31:38:51:dc:57:b2: b2:e7:c1:0b:4a:28:d8:bd:98:55:7b:81:6d:df:0b:59:62:23: ac:62:d4:a7:ee:a8:40:7c:52:10:bc:6d:b2:74:a0:6d:55:b3: 94:27:b6:f3:86:20:a7:fc:90:bb:ad:c1:01:b7:1f:80:18:0a: 92:b2:0c:e4:58:97:65:19:41:18:7d:27:f9:c0:1b:a1:13:3a: 4e:9c:77:6b:27:2d:df:06:79:b6:ff:bc:4d:15:95:10:c3:96: 57:5f:d9:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUwODIxMDIzOTE3WhcNMjUwODI4MDIzOTE3WjAYMRYwFAYD VQQDEw02OGE2ODZkNS00MmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8rJfJubRZEXsYjWqmzGJydqjreobsu0jLVH1MwJw4rLkizeZ7UgdJwHK+5I pahKeREK+bRVkaMq82Nn/8W7N2mkDtm2a5XaAgCDjGU0rCraEnn6sL9woPShSn7M zoLCG9V3fsLqxQwfuF9advB6s7/q88tVwf5p/QKbWtn/JGbWRSKlid4gpL7krxEp lO1SOoPmyD9Ns+0FPVSF0ePrJJ7jodvIcik8BUg+GXZ6uMhrcgIVWDT3t7nzDW/R tcMmvLuDRPwKcBQJaNF60xvqC3S2NeEA6k00nCUTnAAMMkzpA0OGHU3Hsqm2evXc T4I9PFklkSNYH/iU8XpSvTxpWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaL8mrU pkQkiRMUiXfDo6gJyXeIMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOJeyX7aXLFRFF/3lnoOicfBtjVNHuGNNuHz5p/Wsh/evs3mI1Gsnv edo/KyNU7i66li/C7umyMKISuqtCAKw12H+tZnZXtuysy0N05HBggiaEOCob6D6c +zEJ+vn7/ji4p4NMUR3WQsdxVUkQFo1c8vsDLDmOQfucosU45cUnEe1rYLlKxrEc hKoF1FXeqbIxdBtRY1Xe4p34SW8xOFHcV7Ky58ELSijYvZhVe4Ft3wtZYiOsYtSn 7qhAfFIQvG2ydKBtVbOUJ7bzhiCn/JC7rcEBtx+AGAqSsgzkWJdlGUEYfSf5wBuh EzpOnHdrJy3fBnm2/7xNFZUQw5ZXX9nF -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:06 2025 by rpki-client