$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: qm7q9ZGPOmNKbDfIK2vklUf7zYGkSfzCF6UFaUxS2Fw= Subject key identifier: 46:CD:07:67:6E:34:01:87:69:66:6A:3C:B4:05:87:B2:CF:A5:B1:60 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: AA Signing time: Tue 09 Sep 2025 06:15:21 +0000 Manifest this update: Tue 09 Sep 2025 06:15:21 +0000 Manifest next update: Tue 16 Sep 2025 06:15:21 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: JEAf5Ec9WgONx1a5/mboXF/YO2gsxLiDQOimFnLBGmc=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Sep 9 06:15:21 2025 GMT Not After : Sep 16 06:15:21 2025 GMT Subject: CN=68bfc5f9-d7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:e2:eb:54:7a:02:d9:3a:53:3d:26:51:4c: 53:f8:bc:d1:02:81:33:0e:3c:6d:b8:87:5c:bb:44: 7b:19:8d:09:3f:05:f2:70:22:f6:61:9c:6a:33:d8: 37:31:99:93:4b:5b:12:42:aa:19:63:56:55:2a:0b: d5:66:3d:e9:7b:71:8f:53:47:b7:05:20:bc:4c:cb: fc:dd:5d:28:58:6b:37:2c:bb:1b:ec:30:ce:8b:a1: 5a:85:87:a1:76:d1:71:a1:a6:8d:f2:df:e4:0f:93: 7c:d1:af:26:72:cc:c8:92:51:dd:64:7b:b3:d2:f6: 95:16:2f:ca:0b:e7:b1:16:5f:a0:46:c2:81:6e:2f: 36:5f:e2:bb:ce:74:0d:da:f0:b9:69:2c:56:9e:f9: e8:0d:fc:82:a5:ae:e7:03:1f:3b:3a:46:8a:59:40: 2e:19:a9:01:11:f0:77:38:14:47:ce:7d:5b:8e:14: 9f:a1:30:44:6a:5a:27:fa:65:68:17:30:d7:4e:44: 17:d1:a5:47:40:77:bb:81:73:90:16:db:48:8d:22: 73:ed:b3:5f:fa:c9:01:2d:f9:65:c2:ea:4c:e4:1f: 4c:3e:84:f9:7a:ab:b6:70:56:cf:14:e5:d8:be:4b: 69:53:4c:1d:bd:bb:34:a2:82:15:8b:54:77:c7:a6: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CD:07:67:6E:34:01:87:69:66:6A:3C:B4:05:87:B2:CF:A5:B1:60 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:84:0d:ae:9d:97:a4:24:b0:73:f3:2c:e8:b4:a1:d2:80:1c: 87:e6:e3:b2:4f:a8:6e:a4:58:1b:b1:f9:a6:94:cd:a7:d6:1e: 33:c9:48:b1:9a:09:96:82:c1:a8:d9:70:9e:b6:af:4e:da:c9: 24:fa:94:67:df:ea:2c:90:a5:a1:b0:6f:56:ea:6d:d8:1c:5c: d0:d3:ea:6a:4b:3d:2f:2b:5c:f9:1a:2b:19:d7:6e:b8:66:bf: 74:95:46:a0:3d:a4:a1:bb:b2:5d:42:34:57:94:f6:a9:86:b4: ce:0c:1f:08:4d:22:de:02:89:e8:d1:3a:f5:cf:48:14:ee:e4: 22:81:fd:44:24:c7:c9:ec:ef:f1:7f:da:ee:5b:3a:30:bc:fe: 9c:81:8d:9e:2d:83:25:0e:9d:bc:2d:e5:ba:44:d1:45:f7:47: 7c:6b:0a:9a:fe:00:fd:55:73:7b:c5:a3:3c:75:1a:36:7d:31: d7:c8:1a:35:cd:95:c8:53:25:10:3e:5a:ea:6d:70:10:e9:8d: 62:14:78:98:52:83:73:9c:bb:6b:9f:2c:7d:6f:6c:3d:d0:86: c5:dc:28:64:bd:9d:40:ca:56:f5:60:b4:ed:27:ee:2a:4d:6c: a9:7f:b4:41:e2:ef:89:99:0f:8c:f4:30:e9:44:bf:d8:1f:cd: 23:e5:5c:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUwOTA5MDYxNTIxWhcNMjUwOTE2MDYxNTIxWjAYMRYwFAYD VQQDEw02OGJmYzVmOS1kN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KHi61R6Atk6Uz0mUUxT+LzRAoEzDjxtuIdcu0R7GY0JPwXycCL2YZxqM9g3 MZmTS1sSQqoZY1ZVKgvVZj3pe3GPU0e3BSC8TMv83V0oWGs3LLsb7DDOi6FahYeh dtFxoaaN8t/kD5N80a8mcszIklHdZHuz0vaVFi/KC+exFl+gRsKBbi82X+K7znQN 2vC5aSxWnvnoDfyCpa7nAx87OkaKWUAuGakBEfB3OBRHzn1bjhSfoTBEalon+mVo FzDXTkQX0aVHQHe7gXOQFttIjSJz7bNf+skBLfllwupM5B9MPoT5equ2cFbPFOXY vktpU0wdvbs0ooIVi1R3x6a3hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbNB2du NAGHaWZqPLQFh7LPpbFgMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4hA2unZekJLBz8yzotKHSgByH5uOyT6hupFgbsfmmlM2n1h4zyUix mgmWgsGo2XCetq9O2skk+pRn3+oskKWhsG9W6m3YHFzQ0+pqSz0vK1z5GisZ1264 Zr90lUagPaShu7JdQjRXlPaphrTODB8ITSLeAono0Tr1z0gU7uQigf1EJMfJ7O/x f9ruWzowvP6cgY2eLYMlDp28LeW6RNFF90d8awqa/gD9VXN7xaM8dRo2fTHXyBo1 zZXIUyUQPlrqbXAQ6Y1iFHiYUoNznLtrnyx9b2w90IbF3ChkvZ1Aylb1YLTtJ+4q TWypf7RB4u+JmQ+M9DDpRL/YH80j5Vzb -----END CERTIFICATE-----Generated at Tue Sep 9 09:16:47 2025 by rpki-client