$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: NVP4v39toM863xoGKAYaz4Elcl0D8GhcuCBo+Hip/BM= Subject key identifier: 84:CE:B4:A7:96:47:CD:D0:FD:D6:87:89:EA:9D:DF:F3:FE:C4:4F:2D Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 7E Signing time: Sun 07 Sep 2025 07:21:40 +0000 Manifest this update: Sun 07 Sep 2025 07:21:39 +0000 Manifest next update: Sun 14 Sep 2025 07:21:39 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: mZ+8gIMD6ptGIDz6mqSkUFRjYFchosW0DTGWxE4euuM=) 2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=) 4: CAB9B360E20211EF80FC810DC4F9AE02.roa (hash: 65X5sPIhdKM1lp6V7hevZEuaDbWujUAm7MoeXT80kOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Sep 7 07:21:39 2025 GMT Not After : Sep 14 07:21:39 2025 GMT Subject: CN=68bd3284-a376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:13:1d:53:ae:17:c3:41:1e:48:31:b5:33: a1:25:64:4d:55:d7:1e:4b:a0:a0:3e:ad:0c:ee:88: 61:cb:57:ae:da:7a:fb:6b:05:d7:d8:1a:b6:7d:3d: b7:40:be:93:7c:01:b5:5a:23:31:73:d8:c9:ac:b6: f3:a2:c4:3a:1e:61:d6:ce:67:5c:a7:ae:47:27:ce: 04:9c:f5:51:23:0f:67:d8:e9:fb:5f:64:af:3a:ad: 05:85:cd:5e:3f:35:d0:0d:c8:13:33:3c:70:38:c7: dc:6a:d5:e7:dc:94:30:9f:16:b2:6f:c9:39:11:5f: 09:a2:38:f5:38:5b:9e:d7:6b:1f:47:42:3b:10:04: 25:52:fb:47:e2:b5:8a:21:d4:df:6f:10:d7:c8:cc: a1:d0:7e:81:3c:f1:b2:81:29:a9:77:98:7f:3c:7f: 70:ca:9b:6e:73:71:3d:c3:54:2e:60:3c:a1:12:8a: 6e:e0:78:69:b7:6d:86:78:a7:f1:b3:a8:14:27:a1: 1a:64:95:47:c8:4e:c8:57:54:c3:e8:fd:dc:16:2b: d3:d6:c5:62:57:51:be:68:7c:31:23:d6:bf:ee:1d: bd:fd:2e:53:9e:f6:f6:cf:1a:86:7f:11:ae:27:ab: 69:72:ea:d8:c0:dd:b7:6f:69:67:c7:de:2b:b8:e9: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CE:B4:A7:96:47:CD:D0:FD:D6:87:89:EA:9D:DF:F3:FE:C4:4F:2D X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5d:14:f2:49:b6:ce:14:a5:10:19:03:ca:ba:14:db:62:53: 37:7b:81:d4:43:80:8b:68:1f:a6:36:12:7a:ed:1f:6b:dc:6d: 7c:4e:4c:ef:e6:38:7d:e5:ad:f4:12:5b:af:ae:8e:72:ea:55: ac:8c:4e:7d:a8:c8:2c:db:f5:96:29:18:9b:e4:a4:cd:46:60: 87:c6:db:91:89:62:d4:04:fd:7c:5a:3c:e6:c1:02:77:0e:3b: ce:3c:4d:de:35:4e:ea:50:01:a7:97:b6:2b:9d:8a:6f:7b:51: 02:2f:50:90:1c:8c:79:26:d6:27:93:1f:5d:4f:5c:6e:bc:f3: 32:b1:58:52:40:a2:f4:51:31:24:47:b1:a6:d4:15:6b:cd:eb: 43:ff:5a:37:69:dd:36:b5:3f:9c:0a:98:af:5c:d3:31:a8:d1: 08:59:bf:ee:7e:86:09:ec:12:21:2c:1b:7a:9e:21:86:a7:42: 00:ad:ac:02:2b:a7:c2:e7:83:a1:48:fc:40:97:22:5e:40:44: fe:a0:02:cc:9e:25:6f:02:31:08:35:1d:94:6f:cb:c1:b2:dd: 76:34:09:4b:ab:22:c7:f6:a3:7b:3d:87:b1:2b:ad:27:2a:98: e1:c8:7e:4b:73:be:9b:e5:46:1b:fc:da:88:d8:91:f5:6b:14: fe:19:52:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjUwOTA3MDcyMTM5WhcNMjUwOTE0MDcyMTM5WjAYMRYwFAYD VQQDEw02OGJkMzI4NC1hMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNsTHVOuF8NBHkgxtTOhJWRNVdceS6CgPq0M7ohhy1eu2nr7awXX2Bq2fT23 QL6TfAG1WiMxc9jJrLbzosQ6HmHWzmdcp65HJ84EnPVRIw9n2On7X2SvOq0Fhc1e PzXQDcgTMzxwOMfcatXn3JQwnxayb8k5EV8Jojj1OFue12sfR0I7EAQlUvtH4rWK IdTfbxDXyMyh0H6BPPGygSmpd5h/PH9wyptuc3E9w1QuYDyhEopu4Hhpt22GeKfx s6gUJ6EaZJVHyE7IV1TD6P3cFivT1sViV1G+aHwxI9a/7h29/S5Tnvb2zxqGfxGu J6tpcurYwN23b2lnx94ruOkQzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITOtKeW R83Q/daHieqd3/P+xE8tMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAXRTySbbOFKUQGQPKuhTbYlM3e4HUQ4CLaB+mNhJ67R9r3G18Tkzv 5jh95a30Eluvro5y6lWsjE59qMgs2/WWKRib5KTNRmCHxtuRiWLUBP18WjzmwQJ3 DjvOPE3eNU7qUAGnl7YrnYpve1ECL1CQHIx5JtYnkx9dT1xuvPMysVhSQKL0UTEk R7Gm1BVrzetD/1o3ad02tT+cCpivXNMxqNEIWb/ufoYJ7BIhLBt6niGGp0IArawC K6fC54OhSPxAlyJeQET+oALMniVvAjEINR2Ub8vBst12NAlLqyLH9qN7PYexK60n KpjhyH5Lc76b5UYb/NqI2JH1axT+GVIp -----END CERTIFICATE-----Generated at Mon Sep 8 17:40:27 2025 by rpki-client