$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: jPOcKc3Y1k40IaiDRMzoF8VbO4nV3XH0L99oQJWBikQ= Subject key identifier: EE:4A:98:53:30:B1:F8:53:BF:13:BA:08:8D:C1:C7:C1:24:80:DD:CA Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 8F Signing time: Sat 19 Jul 2025 06:41:34 +0000 Manifest this update: Sat 19 Jul 2025 06:41:34 +0000 Manifest next update: Sat 26 Jul 2025 06:41:33 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: rDpKj/dHVx1+tMFYfGi34PwrStbmUZX5u835O1k6NPQ=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Jul 19 06:41:34 2025 GMT Not After : Jul 26 06:41:33 2025 GMT Subject: CN=687b3e1e-a37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:54:24:99:87:68:54:30:eb:49:d3:22:2d: 03:c3:11:f2:b5:0b:f8:71:e0:9d:e4:84:47:d4:09: 40:77:5b:1d:65:8f:b2:0c:83:47:b5:6a:e5:10:2b: e4:d1:48:bc:06:c4:3f:57:73:1a:4d:85:29:7d:e9: f6:1d:7a:7b:f0:11:94:c9:81:40:5b:c3:b7:96:66: dc:1c:9c:99:5b:2f:ba:2f:7f:93:4d:4c:df:f1:28: 80:8e:1e:bb:a0:9a:04:5b:4d:ce:97:e8:81:c6:8c: 7f:81:92:48:2c:72:b0:22:24:a0:4c:d7:1d:3b:0c: 4d:03:e0:8f:4e:80:76:6d:57:9d:a3:c6:a3:dd:41: 9e:ab:6d:cd:72:a6:52:11:74:69:35:c3:79:4c:d2: 37:6e:05:43:f2:c6:b6:93:ec:05:23:5a:ba:db:92: 34:73:64:87:e0:76:04:7c:09:95:f9:63:af:ac:c9: c3:bb:b0:6d:40:86:3f:64:77:c8:a2:2c:28:57:77: 7e:e4:39:e9:50:67:57:77:93:3b:1d:2f:fb:83:d6: 01:ac:7a:71:10:04:e0:77:02:15:3d:47:ce:ab:9d: 2c:0e:7b:10:3c:f2:5e:f5:e5:56:33:ec:b1:79:08: 37:06:f8:24:23:dd:78:4d:94:3c:b3:e8:e6:1f:61: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4A:98:53:30:B1:F8:53:BF:13:BA:08:8D:C1:C7:C1:24:80:DD:CA X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:dc:49:ec:10:78:84:0d:02:df:b4:a5:b4:35:6e:cc:db:52: 11:fa:51:1c:4c:24:00:8c:8e:06:58:68:5f:be:c7:0e:06:0b: 64:e3:08:9d:61:17:e4:ef:14:81:23:15:22:d9:26:55:3e:e5: ac:a4:8b:7c:ae:fb:8d:22:38:cb:fa:62:58:2d:2f:ab:68:46: 14:3c:b0:de:5c:be:fd:c7:2a:01:ca:71:40:5b:a0:6d:93:22: 84:ac:4a:c9:03:7d:99:5d:2e:47:5d:91:c4:e1:a7:ab:44:84: 28:21:bb:9a:77:1b:68:3f:67:a7:ed:d6:17:76:b2:46:4e:27: d5:11:6d:08:c3:38:52:f9:a2:72:c9:9a:53:54:03:a0:f9:c1: 77:da:c3:1e:05:05:64:80:be:b8:af:72:94:d2:6b:8a:15:15: 19:35:17:a8:a0:31:90:05:c5:6a:57:f5:3f:5e:e1:07:0a:83: 43:39:67:06:74:97:46:6b:13:bd:42:07:9c:e7:77:ef:72:06: c3:98:7e:57:bb:d4:ce:3a:a8:78:b0:97:18:7e:ff:45:fd:e9: 41:1c:34:66:61:58:2d:e9:00:1a:f0:90:39:8c:3b:32:61:52: 8e:f4:3f:5e:bd:3a:c0:09:cc:d1:a1:83:3e:74:07:a2:e6:ac: 3f:5e:13:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUwNzE5MDY0MTM0WhcNMjUwNzI2MDY0MTMzWjAYMRYwFAYD VQQDEw02ODdiM2UxZS1hMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu01UJJmHaFQw60nTIi0DwxHytQv4ceCd5IRH1AlAd1sdZY+yDINHtWrlECvk 0Ui8BsQ/V3MaTYUpfen2HXp78BGUyYFAW8O3lmbcHJyZWy+6L3+TTUzf8SiAjh67 oJoEW03Ol+iBxox/gZJILHKwIiSgTNcdOwxNA+CPToB2bVedo8aj3UGeq23NcqZS EXRpNcN5TNI3bgVD8sa2k+wFI1q625I0c2SH4HYEfAmV+WOvrMnDu7BtQIY/ZHfI oiwoV3d+5DnpUGdXd5M7HS/7g9YBrHpxEATgdwIVPUfOq50sDnsQPPJe9eVWM+yx eQg3BvgkI914TZQ8s+jmH2FvBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5KmFMw sfhTvxO6CI3Bx8EkgN3KMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk3EnsEHiEDQLftKW0NW7M21IR+lEcTCQAjI4GWGhfvscOBgtk4wid YRfk7xSBIxUi2SZVPuWspIt8rvuNIjjL+mJYLS+raEYUPLDeXL79xyoBynFAW6Bt kyKErErJA32ZXS5HXZHE4aerRIQoIbuadxtoP2en7dYXdrJGTifVEW0IwzhS+aJy yZpTVAOg+cF32sMeBQVkgL64r3KU0muKFRUZNReooDGQBcVqV/U/XuEHCoNDOWcG dJdGaxO9Qgec53fvcgbDmH5Xu9TOOqh4sJcYfv9F/elBHDRmYVgt6QAa8JA5jDsy YVKO9D9evTrACczRoYM+dAei5qw/XhNr -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:44 2025 by rpki-client