$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: pr19JnPfJFDxS8ULaAHfxzOGlzqxS4MdFF7e9yoAYH4= Subject key identifier: 42:DF:3D:2A:AD:99:05:DB:6A:6E:35:E6:07:BE:E1:90:F2:14:66:C4 Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 76 Signing time: Wed 17 Sep 2025 07:33:24 +0000 Manifest this update: Wed 17 Sep 2025 07:33:23 +0000 Manifest next update: Wed 24 Sep 2025 07:33:23 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: 2LuEALAp0TqMk/lcHSvxr3ylKGa3lOsoyutpaI7vIfI=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: HEKgeQjMhMYDkC2JrcKXdt5Voc5+W7Do5jSGbSkekDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Sep 17 07:33:23 2025 GMT Not After : Sep 24 07:33:23 2025 GMT Subject: CN=68ca6444-f1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fd:6c:98:be:04:b7:ff:54:73:33:ed:42:1e: 63:fb:31:45:7f:15:70:b5:8c:27:0d:1f:ec:08:5a: f9:e8:06:55:99:db:1d:f5:11:e8:5e:90:34:df:99: b6:f3:89:bc:09:a1:cc:13:f0:f6:c5:cf:16:29:a9: bd:c0:ac:0d:44:8a:20:1f:70:6b:61:22:c1:fd:f1: e4:b2:d8:09:7b:3b:7d:2e:e2:06:1e:08:0f:cf:d8: f0:61:f8:f3:73:5f:e2:dc:6b:f9:ca:c1:02:d3:82: c8:07:0f:da:8c:9d:53:c7:34:8a:0e:a1:e9:dd:ab: 71:d7:34:03:96:3a:ca:0a:72:ea:db:be:31:e4:ab: 3d:aa:b3:2e:e2:28:41:ac:be:71:ce:e9:83:77:39: dc:2f:f1:1f:93:64:6b:47:62:73:c5:0c:06:00:c2: 5c:6c:ff:c1:20:f3:c9:45:f2:28:91:0f:0d:2b:00: e5:2d:05:5a:a9:91:e9:44:8d:7b:1f:87:49:27:c9: 5b:3f:f8:a6:5a:56:21:08:c2:a0:40:85:be:ac:d6: 09:11:2c:b7:ac:e3:c8:90:4c:87:24:23:1c:21:46: b2:43:36:a5:11:3a:b6:a2:d1:55:4c:5e:2e:6f:26: 54:1a:18:dd:e7:52:8b:00:ed:c8:59:f2:43:7b:c7: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DF:3D:2A:AD:99:05:DB:6A:6E:35:E6:07:BE:E1:90:F2:14:66:C4 X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:3a:c8:c9:20:cd:e0:ff:19:4a:43:5d:d5:22:d4:c9:0c:9b: 8f:85:18:c8:8b:78:7c:d0:06:50:6d:32:97:14:07:80:2e:52: 3f:88:4d:2a:a1:9d:ad:52:2c:d8:c0:bb:a8:62:a8:12:3d:69: c7:66:9c:f2:f5:fe:a2:73:9e:42:86:83:10:6f:eb:2b:48:d3: 27:74:01:a0:79:61:48:79:62:d5:c0:f4:5c:38:45:d1:9e:64: 88:c8:e5:33:93:18:fd:5f:49:43:8f:63:e7:a1:aa:06:b6:c9: 79:f1:91:79:df:0a:0f:32:a0:46:c0:2b:3e:8b:66:02:c1:41: 2c:81:ce:e5:2d:41:b6:37:61:90:1e:04:9c:09:ad:c9:99:a4: 88:12:29:80:c1:9d:6c:ae:7c:85:75:38:76:73:86:b4:c6:a1: 1b:96:7e:fd:0e:ab:31:60:aa:c1:53:fa:a7:53:88:bf:df:32: 4d:59:8b:7c:ed:be:57:01:c5:d6:fe:db:37:bd:33:c2:cd:e1: 28:c7:be:60:2d:44:ca:26:ad:7f:cf:d6:3a:ee:4a:c4:c6:cf: e1:8f:92:37:39:a2:a3:38:9b:e4:29:3a:07:42:5a:1b:04:55: 6a:b2:31:eb:79:0a:e8:46:cb:aa:6f:9c:4c:d9:b5:cd:9c:9a: 9d:f1:56:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUMzMTExMC8GA1UEBRMoNjdENzlDM0IxMTE2RDM2RkI5RTE3MUQ2NjU4RjhGNDNC NTNDNzJGQTAeFw0yNTA5MTcwNzMzMjNaFw0yNTA5MjQwNzMzMjNaMBgxFjAUBgNV BAMTDTY4Y2E2NDQ0LWYxZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz/WyYvgS3/1RzM+1CHmP7MUV/FXC1jCcNH+wIWvnoBlWZ2x31EehekDTfmbbz ibwJocwT8PbFzxYpqb3ArA1EiiAfcGthIsH98eSy2Al7O30u4gYeCA/P2PBh+PNz X+Lca/nKwQLTgsgHD9qMnVPHNIoOoendq3HXNAOWOsoKcurbvjHkqz2qsy7iKEGs vnHO6YN3Odwv8R+TZGtHYnPFDAYAwlxs/8Eg88lF8iiRDw0rAOUtBVqpkelEjXsf h0knyVs/+KZaViEIwqBAhb6s1gkRLLes48iQTIckIxwhRrJDNqUROrai0VVMXi5v JlQaGN3nUosA7chZ8kN7xyInAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQt89Kq2Z BdtqbjXmB77hkPIUZsQwHwYDVR0jBBgwFoAUZ9ecOxEW02+54XHWZY+PQ7U8cvow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQzMxLzNDRjUzNjIyRTRB NDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjllY094RVcwMi01NFhIV1pZLVBRN1U4Y3ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QzMxLzNDRjUzNjIyRTRBNDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDIt NTRYSFdaWS1QUTdVOGN2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANM6yMkgzeD/GUpDXdUi1MkMm4+FGMiLeHzQBlBtMpcUB4AuUj+ITSqh na1SLNjAu6hiqBI9acdmnPL1/qJznkKGgxBv6ytI0yd0AaB5YUh5YtXA9Fw4RdGe ZIjI5TOTGP1fSUOPY+ehqga2yXnxkXnfCg8yoEbAKz6LZgLBQSyBzuUtQbY3YZAe BJwJrcmZpIgSKYDBnWyufIV1OHZzhrTGoRuWfv0OqzFgqsFT+qdTiL/fMk1Zi3zt vlcBxdb+2ze9M8LN4SjHvmAtRMomrX/P1jruSsTGz+GPkjc5oqM4m+QpOgdCWhsE VWqyMet5CuhGy6pvnEzZtc2cmp3xVic= -----END CERTIFICATE-----Generated at Thu Sep 18 19:08:15 2025 by rpki-client