$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: AJJoWx5/oRPRm9XAgiq/UU6YitpF145WxI7Rawfz8uE= Subject key identifier: FA:ED:EB:A5:8D:CC:D4:02:20:CD:BB:5C:76:EF:FB:3F:34:7E:35:42 Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 3518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 34E8 Signing time: Sun 24 Aug 2025 14:27:46 +0000 Manifest this update: Sun 24 Aug 2025 14:27:46 +0000 Manifest next update: Sun 31 Aug 2025 14:27:46 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: jwn82vBW9o44BwaYNUIGTWuAR81NqWFLmSQsmjd1/pI=) 2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13592 (0x3518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: Aug 24 14:27:46 2025 GMT Not After : Aug 31 14:27:46 2025 GMT Subject: CN=68ab2162-e03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:2e:a1:00:67:45:44:54:01:55:86:9c:61: eb:21:af:4a:d8:b3:bd:69:cf:48:49:a2:2f:9a:c8: 3a:43:51:ef:86:fe:a5:6c:5b:13:17:b1:27:34:cc: 94:ad:a5:70:18:9a:5b:92:05:fa:f5:47:fe:f4:61: 1d:54:62:c5:76:2f:e7:83:b1:3d:9b:87:a7:88:62: ad:fc:ee:18:0a:ee:c4:4c:31:e0:13:23:5d:cd:c1: 0d:d4:a1:fc:ea:e9:90:74:d1:f6:5c:dc:36:7b:a6: ba:42:97:c1:b7:3f:6a:46:67:59:c5:e5:01:47:21: c9:ec:bb:fa:e7:96:4a:6a:99:3a:9b:a3:eb:8c:ff: d4:11:35:23:66:3d:ac:f6:8d:ac:b3:be:f9:9b:ae: d6:89:e4:56:d8:4e:a9:c7:6f:96:c3:a3:1d:6c:fe: 1a:8c:59:bd:f3:20:d3:d2:c7:49:c4:bd:38:0e:29: 2c:fa:05:21:18:e5:17:79:d4:7d:1f:26:14:fb:4d: 7d:b9:fb:6f:3a:92:4b:d5:a3:4b:a2:77:b8:e1:47: 58:0c:b3:6a:90:d0:83:17:86:9f:25:f6:f1:66:fc: d9:d1:f8:7a:13:92:c5:f9:f8:e4:2f:81:c0:c1:0c: f8:7a:0c:a0:01:13:c3:e8:70:d1:17:a2:b5:37:4b: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:ED:EB:A5:8D:CC:D4:02:20:CD:BB:5C:76:EF:FB:3F:34:7E:35:42 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:bd:1a:af:48:b6:e3:6e:ec:79:9a:32:6d:c5:4e:f0:15:f8: 6e:cf:76:3d:bc:9f:66:a1:b9:6a:ef:01:4f:2b:3d:e3:bb:e9: 13:b2:96:2b:ae:8d:72:f7:9c:c6:e9:6e:ca:89:ef:5c:d6:a4: ee:1a:c5:25:6b:f9:00:17:b2:72:97:ac:ce:44:1e:87:f4:f8: 54:99:8e:71:93:40:ad:a5:4b:5b:b1:fb:78:f9:70:df:92:15: 72:21:a5:dd:e9:59:4a:97:ba:9f:d3:06:62:d7:52:f2:35:14: 4d:11:cb:f5:62:bb:0d:cc:ab:63:b2:87:58:11:2e:eb:60:b8: 1d:6e:41:a4:9d:72:37:0e:06:a8:0c:d2:5d:bc:d0:5e:31:ab: 84:d9:45:6e:67:10:da:43:ce:71:ec:8f:f8:b2:49:7b:01:8b: 53:7c:74:76:65:40:bb:e8:c7:46:88:2f:51:08:0c:d1:53:ba: 58:b8:1c:b3:03:bc:30:aa:fe:02:27:24:45:c2:9e:24:c5:08: e7:20:ad:ba:a6:a1:67:79:11:de:c4:4a:96:23:13:d1:e8:16: 6a:8d:c7:83:68:c8:0e:5c:ca:82:0a:78:6a:6b:fd:84:f2:b5: c4:32:d2:cc:50:6f:8f:dc:6c:8f:28:b2:b5:5a:57:44:2e:4c: d5:c1:2d:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjUwODI0MTQyNzQ2WhcNMjUwODMxMTQyNzQ2WjAYMRYwFAYD VQQDEw02OGFiMjE2Mi1lMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu90uoQBnRURUAVWGnGHrIa9K2LO9ac9ISaIvmsg6Q1Hvhv6lbFsTF7EnNMyU raVwGJpbkgX69Uf+9GEdVGLFdi/ng7E9m4eniGKt/O4YCu7ETDHgEyNdzcEN1KH8 6umQdNH2XNw2e6a6QpfBtz9qRmdZxeUBRyHJ7Lv655ZKapk6m6PrjP/UETUjZj2s 9o2ss775m67WieRW2E6px2+Ww6MdbP4ajFm98yDT0sdJxL04Diks+gUhGOUXedR9 HyYU+019uftvOpJL1aNLone44UdYDLNqkNCDF4afJfbxZvzZ0fh6E5LF+fjkL4HA wQz4egygARPD6HDRF6K1N0uHYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrt66WN zNQCIM27XHbv+z80fjVCMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgvRqvSLbjbux5mjJtxU7wFfhuz3Y9vJ9moblq7wFPKz3ju+kTspYr ro1y95zG6W7Kie9c1qTuGsUla/kAF7Jyl6zORB6H9PhUmY5xk0CtpUtbsft4+XDf khVyIaXd6VlKl7qf0wZi11LyNRRNEcv1YrsNzKtjsodYES7rYLgdbkGknXI3Dgao DNJdvNBeMauE2UVuZxDaQ85x7I/4skl7AYtTfHR2ZUC76MdGiC9RCAzRU7pYuByz A7wwqv4CJyRFwp4kxQjnIK26pqFneRHexEqWIxPR6BZqjceDaMgOXMqCCnhqa/2E 8rXEMtLMUG+P3GyPKLK1WldELkzVwS0w -----END CERTIFICATE-----Generated at Sun Aug 24 21:40:49 2025 by rpki-client