$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: eDjkf0rcOEHvLuZOqcUVRcUoWHMwIUEtFFECGer8IeU= Subject key identifier: E5:A2:DB:BA:C4:F9:B4:EE:5C:72:AE:76:0C:B0:CC:A0:D8:7F:45:24 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 04FF Signing time: Thu 18 Sep 2025 23:59:16 +0000 Manifest this update: Thu 18 Sep 2025 23:59:15 +0000 Manifest next update: Thu 25 Sep 2025 23:59:15 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: MedM+XodrsLqZWr2+pWRyO1g0N4BMc9y4ON7igYDx3k=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: Sep 18 23:59:15 2025 GMT Not After : Sep 25 23:59:15 2025 GMT Subject: CN=68cc9cd4-7aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:df:22:66:7b:69:35:b2:8b:e9:0d:ab:3e: 91:56:13:4c:bb:63:82:2b:f9:03:b9:56:68:50:20: 26:f6:c4:13:bc:1d:20:54:b5:f4:54:49:cb:bb:ef: 9f:2d:bd:95:f1:44:08:45:3a:d2:e2:e0:b4:ac:69: bb:cc:c3:f7:d9:e4:cb:e1:09:67:ba:c7:01:73:55: f7:dd:6c:fb:53:01:18:6e:49:c9:85:1b:5e:1d:9e: 05:d8:f9:4f:86:a8:e5:b5:2d:1c:d4:f0:f8:b3:41: 23:af:d0:51:44:ad:c3:6e:58:48:53:fa:cf:eb:19: 86:53:9d:42:8d:cc:4b:00:36:a3:24:b0:09:7c:76: f3:ac:ad:b2:a5:9b:cc:36:44:30:1b:57:41:31:13: 1c:e9:1e:04:8e:53:52:72:f5:a5:7e:eb:88:b0:18: bb:e4:1c:f2:0e:69:93:d4:ba:57:f6:d8:d8:d2:4c: d9:71:32:0d:54:f7:cf:fc:2d:39:06:f8:34:08:94: 09:75:c4:03:1b:a7:37:96:ac:f6:44:01:89:09:bb: 73:68:30:d2:9c:a7:a6:5b:f2:a2:1f:31:f8:e5:55: 9b:cf:61:5e:f5:bc:bb:5f:a3:e6:0b:aa:85:39:21: 8c:3f:40:81:e9:13:7a:95:f5:d9:e8:f6:8d:a8:af: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A2:DB:BA:C4:F9:B4:EE:5C:72:AE:76:0C:B0:CC:A0:D8:7F:45:24 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d5:1e:10:f5:62:10:b1:01:a0:58:0c:58:99:68:28:b8:19: 69:b4:62:ac:02:fd:18:44:6e:c6:d3:d6:78:09:7f:75:a2:94: 86:db:bb:df:10:f5:4a:c7:4e:37:62:93:48:97:7f:59:47:08: 47:f5:42:c7:76:a2:91:e8:ff:72:be:e1:13:5c:4a:8c:1e:62: e4:10:00:8b:56:be:45:42:7a:2b:ee:91:ff:a5:e9:e7:5b:29: 76:77:a7:d7:05:47:7a:9f:21:fa:e3:e7:19:bd:04:c9:1b:97: ce:c0:28:43:a2:8e:b3:81:1b:fc:a8:1a:8b:36:4b:c4:08:28: 1f:1a:45:07:14:7a:2e:b7:7d:a5:90:3b:2c:82:6f:4a:88:be: 6f:59:6c:21:cb:a8:c0:11:02:0d:ae:10:f3:21:b1:63:cb:2d: d2:6a:1a:c5:99:4e:19:28:c6:33:8e:38:77:41:cc:d1:86:fb: 95:bd:9e:fd:5e:d3:e3:a2:9d:fb:ae:f2:18:a7:7d:1c:c8:e3: 79:8e:f5:46:98:66:38:a7:e5:37:a3:f8:8a:d8:6d:01:c9:a4: 1b:25:a8:9b:f4:4a:7f:10:e9:44:bc:3b:73:98:d8:47:cf:05: c0:3d:15:b2:78:05:b0:b7:de:36:f2:0a:c5:7d:6b:3d:f5:02: 35:5d:77:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUwOTE4MjM1OTE1WhcNMjUwOTI1MjM1OTE1WjAYMRYwFAYD VQQDEw02OGNjOWNkNC03YWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dPfImZ7aTWyi+kNqz6RVhNMu2OCK/kDuVZoUCAm9sQTvB0gVLX0VEnLu++f Lb2V8UQIRTrS4uC0rGm7zMP32eTL4QlnuscBc1X33Wz7UwEYbknJhRteHZ4F2PlP hqjltS0c1PD4s0Ejr9BRRK3DblhIU/rP6xmGU51CjcxLADajJLAJfHbzrK2ypZvM NkQwG1dBMRMc6R4EjlNScvWlfuuIsBi75BzyDmmT1LpX9tjY0kzZcTINVPfP/C05 Bvg0CJQJdcQDG6c3lqz2RAGJCbtzaDDSnKemW/KiHzH45VWbz2Fe9by7X6PmC6qF OSGMP0CB6RN6lfXZ6PaNqK9RFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWi27rE +bTuXHKudgywzKDYf0UkMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw1R4Q9WIQsQGgWAxYmWgouBlptGKsAv0YRG7G09Z4CX91opSG27vf EPVKx043YpNIl39ZRwhH9ULHdqKR6P9yvuETXEqMHmLkEACLVr5FQnor7pH/penn Wyl2d6fXBUd6nyH64+cZvQTJG5fOwChDoo6zgRv8qBqLNkvECCgfGkUHFHout32l kDssgm9KiL5vWWwhy6jAEQINrhDzIbFjyy3SahrFmU4ZKMYzjjh3QczRhvuVvZ79 XtPjop37rvIYp30cyON5jvVGmGY4p+U3o/iK2G0ByaQbJaib9Ep/EOlEvDtzmNhH zwXAPRWyeAWwt9428grFfWs99QI1XXcf -----END CERTIFICATE-----Generated at Fri Sep 19 10:41:28 2025 by rpki-client