$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json) Hash identifier: KQ1n5hgi17rQfbYsGtidThkUo1TftKBMdRO8ir/D2ck= Subject key identifier: 48:4E:82:92:EE:E1:9A:3A:DD:8A:E1:14:A5:D3:41:93:F0:5E:7E:B3 Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft Manifest number: 0679 Signing time: Fri 22 Aug 2025 14:39:51 +0000 Manifest this update: Fri 22 Aug 2025 14:39:51 +0000 Manifest next update: Fri 29 Aug 2025 14:39:51 +0000 Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: V7Ruu/Excc88+SWnGjmFQpKETQLE2jChHP0XvrYLs/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Validity Not Before: Aug 22 14:39:51 2025 GMT Not After : Aug 29 14:39:51 2025 GMT Subject: CN=68a88137-3325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:99:f1:5b:a1:ef:c6:ee:9d:1e:17:e7:2e:ca: 56:cc:92:4f:b6:74:7e:ec:89:7b:7c:b1:86:55:9b: 76:a3:f4:76:87:fc:c4:9a:e2:af:99:47:47:96:a1: 9e:99:ce:79:57:8e:5b:de:d6:e8:d5:b7:e3:52:6b: 5b:71:d2:46:ac:bc:16:64:61:fc:4f:9e:b1:19:56: 3e:c3:fb:07:be:ea:89:1e:87:ef:69:c5:53:a9:57: cc:06:22:2d:0c:92:74:ba:6d:29:1a:c6:db:0f:a1: 13:16:48:1d:44:3b:86:15:63:af:3c:fb:cc:3d:91: 04:8a:81:9b:a0:f8:18:ca:09:2b:c3:51:99:11:a7: cf:fd:02:9d:4d:96:9b:f3:0a:34:74:78:5b:5d:a2: c7:93:1e:d0:87:95:65:af:53:8d:f6:76:80:26:85: 0e:41:e0:b0:b0:8b:9a:2f:19:e8:6e:c2:40:99:15: c1:ca:99:18:93:11:c2:b8:6a:22:a3:a3:3f:78:a0: 9e:6e:af:a9:e7:2b:6e:8f:da:09:41:3e:59:c1:0f: 4f:8d:cd:dc:0a:6b:4f:ac:d0:9b:22:4c:8f:04:c8: fd:7e:c6:cd:21:29:2f:ed:62:e7:67:c7:a6:19:b4: c6:f4:4b:14:84:fc:d7:33:39:da:39:24:2a:3d:21: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4E:82:92:EE:E1:9A:3A:DD:8A:E1:14:A5:D3:41:93:F0:5E:7E:B3 X509v3 Authority Key Identifier: keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:0d:a7:25:23:61:92:02:e1:dc:37:18:c2:97:6f:3b:a0:d7: c2:ed:c1:0d:92:a8:94:0a:fa:c7:c4:08:f3:5b:be:c1:73:20: f9:f9:74:5a:3f:c6:90:54:86:db:c4:8c:ae:00:94:cb:6e:23: 01:dc:a0:20:ac:5b:b9:07:16:7a:de:61:54:c8:a6:03:10:37: 84:08:0d:7a:c3:3a:11:9f:37:7b:72:e4:9d:63:48:7e:8f:23: 64:6b:ef:ee:0e:d5:44:b6:07:b3:75:66:04:b4:7b:6c:e4:7d: 38:68:f4:1a:bd:39:a1:6a:95:08:72:87:24:5a:aa:45:35:f6: a8:a3:53:27:9e:ba:13:2d:98:0a:ce:8c:9e:ce:f8:54:1f:31: 85:ce:ad:8a:e2:bd:ef:02:73:3d:78:24:69:91:91:be:ff:ea: e4:46:9c:3d:4b:63:86:14:8c:f1:30:6d:75:6b:73:6e:79:0a: d6:db:9a:7d:a5:23:9d:b8:d5:89:0c:2a:ec:e3:06:41:9d:90: b7:60:ba:dd:42:1a:22:ee:23:ba:d5:f6:0c:16:2b:93:48:5d: 0d:69:f2:08:e1:c4:11:2f:a5:f9:e8:5b:bb:db:74:ae:a2:40: ea:d4:9b:d3:1f:44:c3:67:56:bf:8b:b2:2f:3b:af:95:b7:11: 44:aa:d4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5QTExMTAvBgNVBAUTKENFNUYyQjQzOUJBRDVCRUJFMjcyQTcyMUVBQUNDMzhG QUFERDQ5QjQwHhcNMjUwODIyMTQzOTUxWhcNMjUwODI5MTQzOTUxWjAYMRYwFAYD VQQDEw02OGE4ODEzNy0zMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ZnxW6Hvxu6dHhfnLspWzJJPtnR+7Il7fLGGVZt2o/R2h/zEmuKvmUdHlqGe mc55V45b3tbo1bfjUmtbcdJGrLwWZGH8T56xGVY+w/sHvuqJHofvacVTqVfMBiIt DJJ0um0pGsbbD6ETFkgdRDuGFWOvPPvMPZEEioGboPgYygkrw1GZEafP/QKdTZab 8wo0dHhbXaLHkx7Qh5Vlr1ON9naAJoUOQeCwsIuaLxnobsJAmRXBypkYkxHCuGoi o6M/eKCebq+p5ytuj9oJQT5ZwQ9Pjc3cCmtPrNCbIkyPBMj9fsbNISkv7WLnZ8em GbTG9EsUhPzXMznaOSQqPSH9OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhOgpLu 4Zo63YrhFKXTQZPwXn6zMB8GA1UdIwQYMBaAFM5fK0ObrVvr4nKnIeqsw4+q3Um0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjlBMS81NzMzN0FDQThE NzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFctdmljcWNoNnF6RGo2cmRT YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psOHJRNXV0Vy12aWNxY2g2cXpEajZyZFNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjlBMS81NzMzN0FDQThENzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFct dmljcWNoNnF6RGo2cmRTYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACDaclI2GSAuHcNxjCl287oNfC7cENkqiUCvrHxAjzW77BcyD5+XRa P8aQVIbbxIyuAJTLbiMB3KAgrFu5BxZ63mFUyKYDEDeECA16wzoRnzd7cuSdY0h+ jyNka+/uDtVEtgezdWYEtHts5H04aPQavTmhapUIcockWqpFNfaoo1MnnroTLZgK zoyezvhUHzGFzq2K4r3vAnM9eCRpkZG+/+rkRpw9S2OGFIzxMG11a3NueQrW25p9 pSOduNWJDCrs4wZBnZC3YLrdQhoi7iO61fYMFiuTSF0NafII4cQRL6X56Fu723Su okDq1JvTH0TDZ1a/i7IvO6+VtxFEqtQj -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:37 2025 by rpki-client