$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: 5+quhCSSEqFBCLJEy3ZBIlTNN/+FN6W5+aP7oKnCzU8= Subject key identifier: 18:B5:ED:4A:AE:3A:B5:AD:1D:01:81:02:03:1C:09:B2:93:A2:FE:E6 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: D4 Signing time: Wed 17 Sep 2025 06:15:03 +0000 Manifest this update: Wed 17 Sep 2025 06:15:03 +0000 Manifest next update: Wed 24 Sep 2025 06:15:03 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: hVV6cpIlkutzYQaDZmSTL7dRE8RziGi7BaRsidp+7Gg=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Sep 17 06:15:03 2025 GMT Not After : Sep 24 06:15:03 2025 GMT Subject: CN=68ca51e7-8ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:c8:69:6b:84:58:ac:9c:d5:b2:fb:b3:ba: d0:d9:43:2d:af:e4:0e:32:8b:8c:5d:17:17:5c:21: 3a:83:f8:68:55:62:2a:0f:8f:d1:e0:43:fa:09:e0: 76:3e:2e:e4:ff:79:e3:39:64:4f:11:69:5a:c7:78: 15:09:0a:df:1d:0f:3b:fb:d3:59:17:52:b8:a6:7a: 37:13:82:ff:f4:22:fd:30:a0:50:10:93:7f:e3:28: 53:a7:3e:41:0a:f2:eb:ce:6a:af:2d:fe:a4:1f:09: 75:41:a2:05:d4:b2:df:e7:ba:4d:0e:9a:0a:0e:fb: 11:b5:92:f2:03:72:bc:4c:3f:d3:a7:c0:29:cb:cf: a7:da:5b:8f:56:51:8b:06:d9:35:bd:fb:58:17:04: ed:3d:ba:6f:ff:5f:23:0a:6a:d9:10:9a:ff:43:34: ac:7d:42:e5:2e:af:32:b4:c8:2d:a2:09:3b:e8:fc: 7c:e9:cc:57:60:61:31:49:e0:00:aa:94:45:2e:de: 96:42:8d:18:cb:e3:3f:d4:6a:3e:ae:d4:77:f5:d4: 34:40:ba:11:9a:39:df:70:28:2c:79:8a:14:0e:52: 3c:6c:24:c3:1a:5f:93:1e:57:b5:4d:cf:ce:ac:7c: 28:7e:be:49:8c:ce:92:ef:bd:7f:ac:88:49:e7:6b: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B5:ED:4A:AE:3A:B5:AD:1D:01:81:02:03:1C:09:B2:93:A2:FE:E6 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:58:82:56:26:9d:3e:f5:1c:c5:2d:5c:cd:b9:f0:c2:8d:fb: b4:b9:28:fb:87:05:2c:6d:49:5f:eb:1a:30:48:fa:95:4e:f7: f1:b7:99:66:06:d2:11:75:00:1e:c3:3e:31:70:97:99:5a:8d: d5:a6:de:7c:79:b5:df:69:da:36:4d:15:97:51:02:87:98:80: 73:5d:2a:a9:62:63:22:1d:a8:c7:d6:8c:58:0a:f7:1b:d6:86: 71:aa:88:34:51:4e:04:bf:95:3c:e5:05:6c:2f:60:db:6e:ce: 18:11:e0:37:59:8a:15:d8:e1:ca:ef:0b:87:57:2a:9e:4c:72: 16:95:9b:f8:2c:4d:c9:62:ee:b1:66:d9:8d:a0:33:af:92:64: 7d:55:a4:f9:30:44:09:bd:67:28:35:d4:57:bd:ff:ea:03:3d: f7:0f:d8:c1:b7:16:26:93:21:57:13:70:09:71:1b:0c:27:d4: a7:4b:f0:85:c8:79:d2:5a:5f:6f:87:70:f6:81:48:eb:5a:e6: c9:ed:22:b7:5d:06:88:6b:3b:9e:dd:14:10:5b:24:cb:2e:4d: 06:29:ed:ac:f5:16:ac:31:b9:6c:06:f2:54:48:35:50:fb:2e: 5f:7c:92:4c:ab:78:ec:04:71:2a:98:e1:59:de:ce:d3:eb:c4: 33:52:ec:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUwOTE3MDYxNTAzWhcNMjUwOTI0MDYxNTAzWjAYMRYwFAYD VQQDEw02OGNhNTFlNy04ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mHIaWuEWKyc1bL7s7rQ2UMtr+QOMouMXRcXXCE6g/hoVWIqD4/R4EP6CeB2 Pi7k/3njOWRPEWlax3gVCQrfHQ87+9NZF1K4pno3E4L/9CL9MKBQEJN/4yhTpz5B CvLrzmqvLf6kHwl1QaIF1LLf57pNDpoKDvsRtZLyA3K8TD/Tp8Apy8+n2luPVlGL Btk1vftYFwTtPbpv/18jCmrZEJr/QzSsfULlLq8ytMgtogk76Px86cxXYGExSeAA qpRFLt6WQo0Yy+M/1Go+rtR39dQ0QLoRmjnfcCgseYoUDlI8bCTDGl+THle1Tc/O rHwofr5JjM6S771/rIhJ52vreQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi17Uqu OrWtHQGBAgMcCbKTov7mMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVWIJWJp0+9RzFLVzNufDCjfu0uSj7hwUsbUlf6xowSPqVTvfxt5lm BtIRdQAewz4xcJeZWo3Vpt58ebXfado2TRWXUQKHmIBzXSqpYmMiHajH1oxYCvcb 1oZxqog0UU4Ev5U85QVsL2Dbbs4YEeA3WYoV2OHK7wuHVyqeTHIWlZv4LE3JYu6x ZtmNoDOvkmR9VaT5MEQJvWcoNdRXvf/qAz33D9jBtxYmkyFXE3AJcRsMJ9SnS/CF yHnSWl9vh3D2gUjrWubJ7SK3XQaIazue3RQQWyTLLk0GKe2s9RasMblsBvJUSDVQ +y5ffJJMq3jsBHEqmOFZ3s7T68QzUuyL -----END CERTIFICATE-----Generated at Fri Sep 19 05:15:14 2025 by rpki-client