$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: YxDwWn+9NHHTBRD0mnE8ldn7ncDIPLC45MJFXnsZ+7M= Subject key identifier: 68:95:53:06:3C:77:C1:9D:85:57:8D:37:80:4B:AC:C9:7F:B0:D9:D4 Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: FA Signing time: Sun 27 Jul 2025 05:36:17 +0000 Manifest this update: Sun 27 Jul 2025 05:36:16 +0000 Manifest next update: Sun 03 Aug 2025 05:36:16 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: JmleLiR382/Pf36pxOkrjWkfYts3JgZ4R7cE/OuNgqk=) 2: 33FB0E48FD2211EFA419DA72C4F9AE02.roa (hash: hGFJA7vbBE7czUFInCqw+SAQ5MusDF01ceEYN+8+xgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Jul 27 05:36:16 2025 GMT Not After : Aug 3 05:36:16 2025 GMT Subject: CN=6885bad0-f06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:e0:5c:cb:f9:00:c0:d3:7f:a6:6c:8c:bd: b0:3b:ca:0b:c0:a4:b3:5d:9d:83:30:64:54:b7:2b: 9a:df:d0:79:8c:0b:6e:19:ae:13:63:5c:b0:c2:15: 37:15:d6:d1:a2:f9:91:37:ea:4d:44:bf:8b:89:b2: ee:43:16:23:1e:40:d4:09:6f:d2:e2:b2:dd:8f:01: 88:bf:55:ca:38:f2:43:49:57:87:54:b9:98:73:65: 6f:af:8b:46:fb:53:23:28:af:ec:d5:ac:af:4a:90: b7:a4:35:5d:23:a2:2b:c4:d8:8c:23:9b:0a:63:fa: 6e:96:28:58:43:9c:15:85:75:55:12:b7:3f:f1:4d: e6:5c:75:21:ed:11:49:25:81:bc:19:c8:1c:9f:d0: 35:68:13:60:04:b5:d0:02:dd:05:b6:07:e2:d1:90: 40:e3:ea:3b:30:fa:7b:d3:67:89:9f:d3:b4:11:7b: 32:3c:08:c1:b8:35:17:95:81:03:4f:e5:6f:81:ac: aa:86:07:66:46:22:22:99:11:b7:a9:f3:e4:0e:2a: ce:bf:8a:e6:c4:c1:45:66:c5:1e:28:d2:1f:0e:3c: 34:5d:09:cc:9f:dd:e6:c4:c0:57:63:7f:11:6c:9f: 36:f2:d7:14:65:8e:16:ce:7a:6d:f9:9f:02:a2:5f: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:95:53:06:3C:77:C1:9D:85:57:8D:37:80:4B:AC:C9:7F:B0:D9:D4 X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b5:5f:20:80:7b:c7:84:a5:63:32:a8:9b:73:37:c6:17:10: 7c:d1:d3:d4:86:5e:bd:f5:93:56:7d:8d:8b:84:d2:3e:3a:e3: 7a:b0:ff:a4:c7:2f:13:33:dd:2a:f2:74:64:4b:63:69:b4:d2: 38:04:01:ec:5a:4f:3f:2c:b8:2f:0d:1f:fa:f8:4a:40:e5:11: 43:5b:38:5e:63:3d:47:5e:80:76:1f:d4:0f:66:34:07:3e:e2: c6:a5:f4:08:ff:fb:01:8c:c7:0b:52:8c:74:58:77:4e:2f:77: a3:bb:2e:6e:0c:28:33:3f:4e:a2:0a:69:03:ce:09:08:b6:5f: 8d:d8:b6:2f:de:a4:55:a4:b9:4b:fb:6d:c9:d8:19:80:a3:1e: 8b:b1:59:b4:8c:16:69:93:c2:fa:27:e2:10:23:7c:e9:f4:35: 1e:bd:e8:a7:f8:c9:6f:6d:ea:65:0d:ae:46:0d:67:74:0d:fe: f7:a7:7f:d4:b8:bf:15:80:5e:8e:a4:71:cb:7e:46:59:a7:55: 2b:ef:c8:18:ef:6f:4f:7f:17:45:26:67:b8:cb:03:f2:5c:76: 26:ac:3a:d3:af:cb:2f:4a:91:05:5e:41:b3:d4:d3:56:f4:75: 5c:62:33:8d:bf:10:ac:c3:06:ff:d3:1f:16:44:1c:22:89:6a: c3:f0:42:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjUwNzI3MDUzNjE2WhcNMjUwODAzMDUzNjE2WjAYMRYwFAYD VQQDEw02ODg1YmFkMC1mMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMrgXMv5AMDTf6ZsjL2wO8oLwKSzXZ2DMGRUtyua39B5jAtuGa4TY1ywwhU3 FdbRovmRN+pNRL+LibLuQxYjHkDUCW/S4rLdjwGIv1XKOPJDSVeHVLmYc2Vvr4tG +1MjKK/s1ayvSpC3pDVdI6IrxNiMI5sKY/pulihYQ5wVhXVVErc/8U3mXHUh7RFJ JYG8Gcgcn9A1aBNgBLXQAt0Ftgfi0ZBA4+o7MPp702eJn9O0EXsyPAjBuDUXlYED T+VvgayqhgdmRiIimRG3qfPkDirOv4rmxMFFZsUeKNIfDjw0XQnMn93mxMBXY38R bJ828tcUZY4Wznpt+Z8Col8GJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiVUwY8 d8GdhVeNN4BLrMl/sNnUMB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi9GRTQ4QUJGNDA2QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtu Z1RuU09XQlFRLXpHdmIweUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEtV8ggHvHhKVjMqibczfGFxB80dPUhl699ZNWfY2LhNI+OuN6sP+k xy8TM90q8nRkS2NptNI4BAHsWk8/LLgvDR/6+EpA5RFDWzheYz1HXoB2H9QPZjQH PuLGpfQI//sBjMcLUox0WHdOL3ejuy5uDCgzP06iCmkDzgkItl+N2LYv3qRVpLlL +23J2BmAox6LsVm0jBZpk8L6J+IQI3zp9DUevein+MlvbeplDa5GDWd0Df73p3/U uL8VgF6OpHHLfkZZp1Ur78gY729PfxdFJme4ywPyXHYmrDrTr8svSpEFXkGz1NNW 9HVcYjONvxCswwb/0x8WRBwiiWrD8EKC -----END CERTIFICATE-----Generated at Sun Jul 27 12:04:50 2025 by rpki-client