$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: Gml8Sz3BRKzk32PR5QyL2XO4vibzCIOVh6EAQ/jWrQE= Subject key identifier: D1:DE:67:D7:70:65:3A:0C:D7:63:BD:31:0F:69:E5:7E:04:2B:F4:51 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 013A Signing time: Fri 05 Sep 2025 05:04:09 +0000 Manifest this update: Fri 05 Sep 2025 05:04:08 +0000 Manifest next update: Fri 12 Sep 2025 05:04:08 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: vQRYOLA07rUMHqDwsnt13H9Gr0q8ZYFAolZWxRtyQ6k=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Sep 5 05:04:08 2025 GMT Not After : Sep 12 05:04:08 2025 GMT Subject: CN=68ba6f48-ccef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:07:97:7f:1d:01:b7:e7:5f:47:ed:94:34: c3:16:1c:48:4d:ad:0e:73:a5:0e:6c:08:70:9a:e8: c0:75:3b:5c:54:af:62:03:98:51:61:ff:36:fc:b8: 2a:f6:fd:dd:83:7a:5e:e6:6b:60:74:6a:39:73:90: 6b:96:f0:a8:a2:e3:5d:91:67:30:f5:74:87:76:82: d1:8c:ba:7c:a2:ff:e9:4b:be:c6:f5:98:d2:94:b2: b6:c8:3d:bb:7c:25:c4:8f:83:0f:f3:ad:fe:39:8a: ad:81:04:a4:a8:0b:a7:bd:8a:12:e1:9a:bb:65:7b: 7f:ef:e6:4a:9d:ac:3b:d9:9d:e7:09:d7:9a:0c:ab: d4:ff:9b:e6:a6:e2:76:ab:53:2c:68:02:e4:7c:ac: 4d:75:04:f8:7e:33:53:1e:13:fe:7e:04:b0:53:8e: 16:16:e0:bc:5f:90:30:96:4d:08:71:df:e3:d1:84: 0c:e8:84:e2:df:ef:8b:92:9a:89:d0:d4:3c:0a:7e: b9:5b:28:9e:85:27:c1:ef:7c:9d:93:e0:be:80:29: 2a:8f:52:02:a5:37:1e:9b:2a:44:2b:25:a1:80:1a: 3e:19:51:9d:70:3c:40:cf:15:63:45:e8:29:c9:cf: 08:36:8a:9d:69:29:ce:98:9e:cc:f8:9d:bd:e5:06: 80:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:67:D7:70:65:3A:0C:D7:63:BD:31:0F:69:E5:7E:04:2B:F4:51 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:71:29:ee:8a:31:51:a0:b1:b1:5a:af:57:c0:b1:3f:b1:e1: af:af:a4:e9:cd:3f:da:ad:1a:01:52:ea:7b:86:f9:86:a4:fd: a9:76:b7:3c:77:15:f0:2c:16:05:56:b8:b7:45:98:71:e9:e4: d3:36:01:9b:f9:28:6f:a5:84:a4:ae:36:39:68:c8:26:11:8c: 2a:81:62:d6:e9:a2:7f:b0:cb:e5:0e:00:7c:d6:9c:d3:cd:ee: 1a:73:b3:b1:3f:05:a8:e3:98:ae:ae:c2:bf:34:1a:93:a8:88: 0b:84:46:cf:53:f5:f3:5e:5d:72:d1:30:3d:ac:b0:c6:da:db: 54:21:06:e5:66:29:a3:87:5c:c2:e0:74:30:c9:21:75:1e:0c: d6:2c:3c:46:44:f4:3a:b2:e8:27:f9:1b:0a:41:13:3e:18:eb: 71:ee:ec:cd:c1:21:2a:08:3e:7f:94:7d:31:d5:dd:fc:0b:a6: 25:63:80:51:7f:fe:05:85:96:02:c6:ab:4e:3f:7f:dc:7b:1c: b8:cd:c1:5f:cd:aa:3c:5a:d0:fc:12:4a:d5:da:9e:ee:9f:cb: bd:43:5f:c2:b3:87:3a:12:3e:ca:df:a4:94:88:e3:0f:0d:e3: 1f:ed:de:48:93:a8:b5:6b:63:66:99:a0:48:d0:50:d0:49:fb: 3c:91:86:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUwOTA1MDUwNDA4WhcNMjUwOTEyMDUwNDA4WjAYMRYwFAYD VQQDEw02OGJhNmY0OC1jY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PUHl38dAbfnX0ftlDTDFhxITa0Oc6UObAhwmujAdTtcVK9iA5hRYf82/Lgq 9v3dg3pe5mtgdGo5c5BrlvCoouNdkWcw9XSHdoLRjLp8ov/pS77G9ZjSlLK2yD27 fCXEj4MP863+OYqtgQSkqAunvYoS4Zq7ZXt/7+ZKnaw72Z3nCdeaDKvU/5vmpuJ2 q1MsaALkfKxNdQT4fjNTHhP+fgSwU44WFuC8X5Awlk0Icd/j0YQM6ITi3++LkpqJ 0NQ8Cn65WyiehSfB73ydk+C+gCkqj1ICpTcemypEKyWhgBo+GVGdcDxAzxVjRegp yc8INoqdaSnOmJ7M+J295QaA5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHeZ9dw ZToM12O9MQ9p5X4EK/RRMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8cSnuijFRoLGxWq9XwLE/seGvr6TpzT/arRoBUup7hvmGpP2pdrc8 dxXwLBYFVri3RZhx6eTTNgGb+ShvpYSkrjY5aMgmEYwqgWLW6aJ/sMvlDgB81pzT ze4ac7OxPwWo45iursK/NBqTqIgLhEbPU/XzXl1y0TA9rLDG2ttUIQblZimjh1zC 4HQwySF1HgzWLDxGRPQ6sugn+RsKQRM+GOtx7uzNwSEqCD5/lH0x1d38C6YlY4BR f/4FhZYCxqtOP3/cexy4zcFfzao8WtD8EkrV2p7un8u9Q1/Cs4c6Ej7K36SUiOMP DeMf7d5Ik6i1a2NmmaBI0FDQSfs8kYZQ -----END CERTIFICATE-----Generated at Sat Sep 6 11:49:06 2025 by rpki-client