$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: vl1URI8GCyidhHT6q5oQ8Ni2Sf9Ev6xoMF+e28WFqQU= Subject key identifier: 7F:7F:9E:BA:0D:F4:78:06:7F:9B:33:BF:6E:13:F5:12:CE:06:05:6A Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: AB Signing time: Sat 23 Aug 2025 06:19:43 +0000 Manifest this update: Sat 23 Aug 2025 06:19:43 +0000 Manifest next update: Sat 30 Aug 2025 06:19:43 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: BoZnFKCl84B4ON3yZUBuM2jWM1a+fyY8pAwythp0Xpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Aug 23 06:19:43 2025 GMT Not After : Aug 30 06:19:43 2025 GMT Subject: CN=68a95d7f-70ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:e5:97:40:71:49:55:10:b0:71:31:b4:58: 9a:ef:5c:47:3c:90:24:bf:2d:c2:be:1c:57:6c:e0: 3e:c7:41:92:8a:f7:b4:a6:4c:c4:6a:d9:5d:93:ae: 91:62:06:1e:c6:30:f2:3c:7e:c9:b4:45:f7:28:84: 92:b4:f3:18:39:7e:87:24:ff:65:ad:3b:e6:57:d8: 96:82:99:a0:9b:db:7e:2e:8d:62:b1:17:13:4f:11: 04:6b:e0:39:0d:1b:f6:64:55:e2:cd:24:3f:02:1e: a1:f2:72:62:2b:94:7d:d9:db:cb:06:b2:9c:08:66: 9f:c4:ed:7f:07:4f:c1:e0:cf:a7:90:20:c4:4e:20: 2d:bd:fe:aa:f0:b4:74:14:82:ba:87:4e:d1:30:ab: 24:8b:e4:2b:82:d7:3b:fd:67:7a:f6:4a:e0:7e:84: c9:d9:3f:63:07:3b:cd:28:60:7d:31:54:c6:66:90: ad:d9:34:d4:0c:76:c9:69:6b:0d:db:09:2c:55:03: ed:46:26:7b:1e:a4:36:ca:37:18:32:8c:18:b4:f6: cd:de:9c:39:42:d1:cb:11:f0:a2:04:48:cc:5f:ec: 64:ac:45:f9:aa:88:37:0d:f1:8c:bf:9e:79:1a:5d: c1:bb:1f:d2:65:be:7a:31:fa:0b:87:ca:ad:39:48: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7F:9E:BA:0D:F4:78:06:7F:9B:33:BF:6E:13:F5:12:CE:06:05:6A X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:22:1c:eb:b8:c4:96:f9:2a:62:05:24:43:0a:4e:29:79:76: 25:cf:7d:1c:32:72:53:92:a0:ac:cf:d7:00:d5:fd:c0:3d:77: a4:3f:da:ed:1b:4b:7a:32:c3:8e:60:60:af:bd:5d:84:d2:c8: c1:84:3f:1e:6d:be:ff:05:76:50:e2:ee:a9:11:27:a0:e2:37: b7:bd:01:b4:3c:f2:a3:c5:df:89:bb:8c:f6:37:2a:61:cc:5b: c9:99:c2:53:d5:1b:55:d2:cc:f1:da:65:41:50:03:8c:4f:52: 53:85:dc:df:11:0d:28:52:9d:5b:58:8a:da:25:fa:e8:c4:9d: 0d:77:c7:44:fb:fe:b3:49:68:72:c1:5f:37:26:f5:bf:f3:4c: 2e:af:65:80:c0:f7:73:09:7c:e9:1b:ee:64:92:e4:d2:13:f8: 06:b7:57:2c:21:31:8c:e1:ce:5a:78:36:d6:38:4f:a5:6f:83: ab:9f:56:32:fe:c9:1e:be:90:fa:0f:cf:a2:b7:65:25:8d:d2: eb:23:8f:ce:4b:0f:e0:f5:3c:32:c5:bc:b1:94:7e:19:b5:0c: 28:98:54:85:00:f7:fc:57:70:18:dc:35:a3:e3:47:b1:c3:b8: 85:db:15:fa:54:5a:81:dc:9b:f5:f9:1a:b4:a6:65:90:56:fa: f5:50:4b:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2 OUVCODE0RDUwHhcNMjUwODIzMDYxOTQzWhcNMjUwODMwMDYxOTQzWjAYMRYwFAYD VQQDEw02OGE5NWQ3Zi03MGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr27ll0BxSVUQsHExtFia71xHPJAkvy3CvhxXbOA+x0GSive0pkzEatldk66R YgYexjDyPH7JtEX3KISStPMYOX6HJP9lrTvmV9iWgpmgm9t+Lo1isRcTTxEEa+A5 DRv2ZFXizSQ/Ah6h8nJiK5R92dvLBrKcCGafxO1/B0/B4M+nkCDETiAtvf6q8LR0 FIK6h07RMKski+Qrgtc7/Wd69krgfoTJ2T9jBzvNKGB9MVTGZpCt2TTUDHbJaWsN 2wksVQPtRiZ7HqQ2yjcYMowYtPbN3pw5QtHLEfCiBEjMX+xkrEX5qog3DfGMv555 Gl3Bux/SZb56MfoLh8qtOUjUAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9/nroN 9HgGf5szv24T9RLOBgVqMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj c2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBIhzruMSW+SpiBSRDCk4peXYlz30cMnJTkqCsz9cA1f3APXekP9rt G0t6MsOOYGCvvV2E0sjBhD8ebb7/BXZQ4u6pESeg4je3vQG0PPKjxd+Ju4z2Nyph zFvJmcJT1RtV0szx2mVBUAOMT1JThdzfEQ0oUp1bWIraJfroxJ0Nd8dE+/6zSWhy wV83JvW/80wur2WAwPdzCXzpG+5kkuTSE/gGt1csITGM4c5aeDbWOE+lb4Orn1Yy /skevpD6D8+it2UljdLrI4/OSw/g9TwyxbyxlH4ZtQwomFSFAPf8V3AY3DWj40ex w7iF2xX6VFqB3Jv1+Rq0pmWQVvr1UEtk -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:15 2025 by rpki-client