$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: QzFASrGnqXPecjr4hQ2fUWlNS8izZDL8bMcyDg+Oz40= Subject key identifier: 49:04:A5:E1:E1:F1:3D:F0:AD:4C:82:70:79:FA:77:E4:E5:E1:DC:A9 Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 0142 Signing time: Tue 09 Sep 2025 04:35:08 +0000 Manifest this update: Tue 09 Sep 2025 04:35:08 +0000 Manifest next update: Tue 16 Sep 2025 04:35:08 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: nztybUnZD+HhdIXJbYozi8WBRmv01LksawOo2h+cHOI=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Sep 9 04:35:08 2025 GMT Not After : Sep 16 04:35:08 2025 GMT Subject: CN=68bfae7c-6620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:03:ba:eb:5e:90:cb:3d:77:d4:ae:0a:18: 2e:54:ef:44:5e:89:f8:86:0f:78:fc:60:92:6b:cd: 49:d9:07:32:72:36:5a:26:27:4b:01:b6:de:a1:b9: 9a:7a:e6:e6:5b:36:52:b0:cc:d8:e5:f6:43:e6:c5: d5:94:a4:e0:6c:e8:1a:b7:f1:ea:20:0f:71:50:c2: 34:37:f9:ec:94:44:b6:cd:dd:f8:5d:1c:f4:e6:c7: 88:d9:b1:d5:92:01:1c:c7:3a:0b:6d:77:d1:15:9c: e0:dc:57:9d:a2:5a:78:2f:5b:1a:51:b9:95:51:53: cd:9e:db:c4:83:ef:30:03:ca:87:76:b9:df:7d:53: 9e:0a:3d:6b:c5:b9:d6:a4:60:34:77:a4:c9:ca:26: 31:7f:5b:4b:27:31:74:93:a7:29:22:07:8a:ef:35: 3a:c9:84:d0:3b:8e:f7:1d:44:63:17:0f:7b:59:1d: fd:38:b6:0b:58:64:10:4b:57:33:2e:79:26:e2:40: a9:e0:06:0d:09:9f:44:74:a4:d5:35:cd:77:6d:c9: 6e:12:8a:8a:a9:03:43:3b:4a:59:b6:6f:7c:b1:3a: 6d:fb:50:40:15:bd:dc:dd:96:fa:99:6d:bb:2f:44: f7:35:0a:fe:19:e6:ec:11:15:50:84:75:e4:b5:5b: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:04:A5:E1:E1:F1:3D:F0:AD:4C:82:70:79:FA:77:E4:E5:E1:DC:A9 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f7:c7:ee:87:00:a5:e7:c3:51:74:47:69:16:8e:bf:f7:0c: 48:95:3b:4a:d7:8a:ff:84:19:e4:3f:1a:6b:6f:f0:c3:25:44: df:13:12:df:9c:b2:cd:5f:28:fa:a4:bb:0d:ba:3d:19:20:69: 5e:7c:c4:36:28:de:8c:63:b5:f6:4e:fb:e5:6e:aa:c1:07:bd: bf:ba:40:dd:e2:4f:d8:eb:43:42:e4:04:d6:84:06:1d:96:61: 8c:c2:f5:ef:eb:de:08:92:8b:2d:f7:25:9a:f7:d1:3a:6a:f0: 8f:89:d8:ee:b9:68:eb:c5:99:07:a0:0a:46:e9:fc:d3:63:0f: 28:a3:6a:41:c1:3e:b9:99:73:be:19:af:63:27:6b:e5:e8:92: c4:6e:33:f4:c4:70:6f:b5:e7:2d:24:33:93:fe:39:8b:be:be: 40:98:93:45:e4:31:35:cd:79:55:48:4c:d4:14:7c:b9:78:ee: 0e:54:38:6c:ad:a6:7b:fc:83:cc:de:12:79:82:df:d4:23:4e: 27:f5:9d:7c:95:17:06:42:0a:64:42:11:e2:e4:16:d6:2a:3e: c9:f9:0a:a2:4b:a6:47:20:19:b5:49:12:63:34:fc:a7:90:5e: 9f:df:00:3e:a6:5c:bf:1b:c7:a4:12:7c:e3:af:7c:dd:da:a4: 21:72:ef:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUwOTA5MDQzNTA4WhcNMjUwOTE2MDQzNTA4WjAYMRYwFAYD VQQDEw02OGJmYWU3Yy02NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1S8DuutekMs9d9SuChguVO9EXon4hg94/GCSa81J2QcycjZaJidLAbbeobma eubmWzZSsMzY5fZD5sXVlKTgbOgat/HqIA9xUMI0N/nslES2zd34XRz05seI2bHV kgEcxzoLbXfRFZzg3Fedolp4L1saUbmVUVPNntvEg+8wA8qHdrnffVOeCj1rxbnW pGA0d6TJyiYxf1tLJzF0k6cpIgeK7zU6yYTQO473HURjFw97WR39OLYLWGQQS1cz Lnkm4kCp4AYNCZ9EdKTVNc13bcluEoqKqQNDO0pZtm98sTpt+1BAFb3c3Zb6mW27 L0T3NQr+GebsERVQhHXktVsrlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkEpeHh 8T3wrUyCcHn6d+Tl4dypMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB298fuhwCl58NRdEdpFo6/9wxIlTtK14r/hBnkPxprb/DDJUTfExLf nLLNXyj6pLsNuj0ZIGlefMQ2KN6MY7X2TvvlbqrBB72/ukDd4k/Y60NC5ATWhAYd lmGMwvXv694Ikost9yWa99E6avCPidjuuWjrxZkHoApG6fzTYw8oo2pBwT65mXO+ Ga9jJ2vl6JLEbjP0xHBvtectJDOT/jmLvr5AmJNF5DE1zXlVSEzUFHy5eO4OVDhs raZ7/IPM3hJ5gt/UI04n9Z18lRcGQgpkQhHi5BbWKj7J+QqiS6ZHIBm1SRJjNPyn kF6f3wA+ply/G8ekEnzjr3zd2qQhcu+U -----END CERTIFICATE-----Generated at Tue Sep 9 13:31:24 2025 by rpki-client