$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: 3n4k1VFWBFm8krfd430PrHuxDxeava8GiY/lB9P4Fgo= Subject key identifier: B7:A6:98:DD:19:42:A8:CC:63:1F:75:52:1B:97:A6:29:5E:B3:53:55 Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 05B0 Signing time: Fri 22 Aug 2025 23:22:23 +0000 Manifest this update: Fri 22 Aug 2025 23:22:23 +0000 Manifest next update: Fri 29 Aug 2025 23:22:23 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: JsDG0yXnM1eltXuHe4kXRQiIWbaAes0uFjmahsAc3SQ=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Aug 22 23:22:23 2025 GMT Not After : Aug 29 23:22:23 2025 GMT Subject: CN=68a8fbaf-0caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:73:f3:be:85:33:5a:f4:d9:8e:4c:ca:bf: 45:49:dc:15:bf:e3:4a:34:e2:99:6c:b0:d1:c6:39: 5d:e1:82:2e:92:f6:b3:d0:4c:46:17:b4:62:63:85: 50:4c:83:5f:f6:fc:fb:9c:02:77:69:7d:93:18:46: 85:a5:78:27:1e:16:a4:88:19:8b:93:0b:9a:12:f5: 70:4c:e3:1b:a3:bc:13:d4:d4:0c:7a:31:b8:69:bf: c8:2f:3a:b2:98:19:b0:2d:c3:fa:66:a4:86:28:2c: 7d:a8:5a:97:be:e1:27:9d:3f:a8:51:15:49:ca:08: 8b:21:5c:cb:cf:ea:22:b5:30:54:1d:89:e1:8c:96: 0e:ac:2a:8f:8f:31:ab:72:49:b9:c4:2b:bb:a5:c9: 35:af:3c:26:e0:97:ee:b0:75:15:71:ec:aa:df:b9: fd:53:8a:15:76:05:1a:3f:19:a3:a7:56:b2:39:8f: a2:e6:c8:f6:3d:5f:49:04:27:78:df:e4:f7:00:b7: 81:62:79:b0:7c:86:a0:e9:2f:c2:f3:1a:d7:9c:d1: a8:52:2f:64:41:32:68:b0:f7:19:f8:dd:c5:37:b4: eb:7e:92:09:9c:1e:30:92:62:fc:d7:67:b1:14:4a: ba:59:b4:88:e1:bb:fe:f7:2a:21:8b:29:6f:fd:dd: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:98:DD:19:42:A8:CC:63:1F:75:52:1B:97:A6:29:5E:B3:53:55 X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c8:e1:3b:9d:d3:75:b6:d6:82:e3:2d:6f:67:3f:61:37:c8: 56:e1:18:24:3a:05:72:f2:9a:a1:54:f8:68:4c:dd:ca:52:5a: 1d:46:03:60:03:09:d9:0a:5e:f0:34:5f:51:e9:11:38:95:f5: 6f:d2:60:b7:cd:81:e2:2f:b4:65:ce:66:fc:3a:40:46:95:56: b4:33:7a:bc:84:5f:75:89:f1:6f:54:a7:a6:95:b8:2b:39:a2: fd:44:52:56:90:b3:42:ac:5c:7e:cb:cd:69:6e:83:7e:4f:6d: ca:40:28:e5:92:6d:46:76:62:12:3b:56:1d:21:9d:e8:3d:5a: 13:76:41:a6:f9:92:48:24:49:72:98:e5:f6:c2:4e:5a:19:0d: 70:b5:35:55:f4:da:64:9f:f1:88:92:47:12:91:17:ef:ca:35: fc:a3:46:b0:a1:14:36:2d:79:ff:2c:87:0c:f2:61:4f:cf:97: 5a:17:94:4a:7f:fa:4e:16:49:c3:be:4f:28:a8:64:d9:34:f4: 0c:ec:8e:59:c1:ab:6e:18:aa:b6:23:03:80:2b:5e:b1:ae:02: 42:4e:b3:a6:5c:4f:c6:31:cd:f7:b8:18:5e:2e:c5:40:57:51: 49:58:ab:8f:40:74:a8:da:7e:e3:ff:5e:7d:35:e6:eb:04:3a: 45:5b:d5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUwODIyMjMyMjIzWhcNMjUwODI5MjMyMjIzWjAYMRYwFAYD VQQDEw02OGE4ZmJhZi0wY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUJz876FM1r02Y5Myr9FSdwVv+NKNOKZbLDRxjld4YIukvaz0ExGF7RiY4VQ TINf9vz7nAJ3aX2TGEaFpXgnHhakiBmLkwuaEvVwTOMbo7wT1NQMejG4ab/ILzqy mBmwLcP6ZqSGKCx9qFqXvuEnnT+oURVJygiLIVzLz+oitTBUHYnhjJYOrCqPjzGr ckm5xCu7pck1rzwm4JfusHUVceyq37n9U4oVdgUaPxmjp1ayOY+i5sj2PV9JBCd4 3+T3ALeBYnmwfIag6S/C8xrXnNGoUi9kQTJosPcZ+N3FN7TrfpIJnB4wkmL812ex FEq6WbSI4bv+9yohiylv/d0xFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLemmN0Z QqjMYx91UhuXpiles1NVMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAyOE7ndN1ttaC4y1vZz9hN8hW4RgkOgVy8pqhVPhoTN3KUlodRgNg AwnZCl7wNF9R6RE4lfVv0mC3zYHiL7Rlzmb8OkBGlVa0M3q8hF91ifFvVKemlbgr OaL9RFJWkLNCrFx+y81pboN+T23KQCjlkm1GdmISO1YdIZ3oPVoTdkGm+ZJIJEly mOX2wk5aGQ1wtTVV9Npkn/GIkkcSkRfvyjX8o0awoRQ2LXn/LIcM8mFPz5daF5RK f/pOFknDvk8oqGTZNPQM7I5ZwatuGKq2IwOAK16xrgJCTrOmXE/GMc33uBheLsVA V1FJWKuPQHSo2n7j/159NebrBDpFW9WI -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:18 2025 by rpki-client