$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: QYfv160DcvrfKYKJl0dZZyxc3mZKJS2SVMGykGTRdps= Subject key identifier: 27:AF:37:97:77:67:9F:4E:8E:73:F8:57:53:D9:63:91:6A:F5:D0:3C Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E5B Signing time: Mon 08 Sep 2025 17:47:27 +0000 Manifest this update: Mon 08 Sep 2025 17:47:26 +0000 Manifest next update: Mon 15 Sep 2025 17:47:26 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: xJpERw1nt9yIDPBKpRlpG0lvR5/3kEzQBTfsFZNh6uM=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3689 (0xe69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Sep 8 17:47:26 2025 GMT Not After : Sep 15 17:47:26 2025 GMT Subject: CN=68bf16af-40a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:55:50:34:3b:7b:6c:73:a0:15:8c:86:bb: 1c:0f:24:31:1a:a5:7f:52:32:74:55:7a:2c:b3:e1: bf:51:12:ed:a3:2f:ca:ae:1d:ae:99:24:0d:80:5c: 53:cf:80:50:3a:76:dc:a0:a2:14:31:62:44:62:62: 49:bf:4f:80:29:08:18:af:28:df:77:ae:90:b0:48: 48:46:f6:13:45:78:2a:5a:85:39:c7:ad:2e:91:e1: 06:d2:18:9f:dd:84:63:6e:07:9b:93:4d:b5:0e:62: a3:d4:ba:6b:84:50:5d:eb:0e:64:ad:55:31:0a:30: 37:bf:01:fc:2a:ce:9d:eb:db:60:60:01:ad:89:4d: c6:41:3d:42:ee:78:83:57:4c:c0:1b:8f:55:eb:d6: f7:1d:06:84:3b:0d:66:58:b8:da:12:d1:e8:a0:77: 49:e8:5a:66:17:38:6b:51:ad:17:b3:d8:b0:08:14: 3e:b7:e5:7e:fb:99:06:26:d6:bd:4b:9f:68:02:f6: db:57:bf:9b:73:00:4d:cd:00:b1:22:b7:c3:f8:8b: 48:70:be:c8:9a:81:4a:55:ea:4d:93:fc:92:5c:7f: 22:08:1c:79:67:08:07:3d:84:48:c6:65:8e:2c:3f: 59:65:17:53:5c:f7:97:87:02:7a:66:21:1f:0e:84: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AF:37:97:77:67:9F:4E:8E:73:F8:57:53:D9:63:91:6A:F5:D0:3C X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ba:73:b0:b4:b6:3a:a9:0d:ec:79:ac:f0:df:3c:04:55:96: cf:10:af:b2:e9:c2:f9:9e:53:fb:15:04:eb:c3:4d:ee:d7:65: cd:c5:85:df:46:91:85:78:31:7e:eb:6e:fe:7c:f4:20:46:16: 46:10:b8:9d:9a:53:65:f4:1d:43:ba:8e:6d:e7:40:ee:52:24: 0a:e5:05:72:45:a2:84:aa:00:8c:d9:0a:e0:b4:be:fc:33:0a: cb:8c:a8:84:de:23:ec:2a:22:e5:fd:34:d5:a9:3d:76:8c:bd: e2:51:40:6d:a4:04:41:94:b4:0c:7e:13:60:fa:56:06:de:51: a5:3b:41:2e:3f:56:88:5c:1e:05:41:d7:51:19:88:7d:52:4f: fd:84:16:90:f3:6e:15:0a:89:db:e3:ca:9a:05:69:8a:a9:f9: 15:27:e9:e9:cb:71:43:3c:28:ad:d9:a9:59:cd:1c:8c:71:e3: ee:43:9b:d8:80:f0:3f:78:e4:28:8b:0b:75:89:f0:9a:9f:97: 65:0a:00:68:59:5e:5a:e4:d6:ed:fe:97:33:68:b7:3f:0d:97: 47:ff:21:ac:e9:7f:fd:bd:e0:f8:c4:39:62:9c:d4:c3:7a:17: 02:75:e6:a5:56:e9:39:72:9f:5d:86:16:ac:0e:d7:15:1c:9d: 4b:d6:4e:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUwOTA4MTc0NzI2WhcNMjUwOTE1MTc0NzI2WjAYMRYwFAYD VQQDEw02OGJmMTZhZi00MGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3VVUDQ7e2xzoBWMhrscDyQxGqV/UjJ0VXoss+G/URLtoy/Krh2umSQNgFxT z4BQOnbcoKIUMWJEYmJJv0+AKQgYryjfd66QsEhIRvYTRXgqWoU5x60ukeEG0hif 3YRjbgebk021DmKj1LprhFBd6w5krVUxCjA3vwH8Ks6d69tgYAGtiU3GQT1C7niD V0zAG49V69b3HQaEOw1mWLjaEtHooHdJ6FpmFzhrUa0Xs9iwCBQ+t+V++5kGJta9 S59oAvbbV7+bcwBNzQCxIrfD+ItIcL7ImoFKVepNk/ySXH8iCBx5ZwgHPYRIxmWO LD9ZZRdTXPeXhwJ6ZiEfDoRddwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCevN5d3 Z59OjnP4V1PZY5Fq9dA8MB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArunOwtLY6qQ3seazw3zwEVZbPEK+y6cL5nlP7FQTrw03u12XNxYXf RpGFeDF+627+fPQgRhZGELidmlNl9B1Duo5t50DuUiQK5QVyRaKEqgCM2QrgtL78 MwrLjKiE3iPsKiLl/TTVqT12jL3iUUBtpARBlLQMfhNg+lYG3lGlO0EuP1aIXB4F QddRGYh9Uk/9hBaQ824VConb48qaBWmKqfkVJ+npy3FDPCit2alZzRyMcePuQ5vY gPA/eOQoiwt1ifCan5dlCgBoWV5a5Nbt/pczaLc/DZdH/yGs6X/9veD4xDlinNTD ehcCdealVuk5cp9dhhasDtcVHJ1L1k5z -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:52 2025 by rpki-client