$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: pB4X+h2o5s98zTr/QyNLm70v301ZKZXPU8fSJaec3S8= Subject key identifier: E5:30:52:8A:B5:51:F9:81:E0:0C:0D:C7:2E:33:8A:C5:FB:95:38:BF Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 039F Signing time: Mon 15 Sep 2025 01:08:42 +0000 Manifest this update: Mon 15 Sep 2025 01:08:41 +0000 Manifest next update: Mon 22 Sep 2025 01:08:41 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: FQQzWqDvUGFCOhEMxysFipI3ZU0lfaWSgTrPKX1XvLU=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 01:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Sep 15 01:08:41 2025 GMT Not After : Sep 22 01:08:41 2025 GMT Subject: CN=68c76719-8385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:f1:28:46:0c:3f:7d:44:62:45:6d:9c:58: 50:a1:68:bd:8f:3f:53:cf:54:ef:15:ed:eb:35:63: 05:04:83:57:9a:a5:b0:78:30:8e:16:01:a4:08:d3: 3f:52:48:f3:e2:11:cc:6c:63:b9:00:66:01:d4:c0: 8b:10:2c:c5:c2:5a:77:fc:ed:17:7c:bc:e0:36:ba: 38:4c:d6:45:bd:97:f3:08:7e:eb:25:14:7a:c6:b7: db:41:f9:6e:2c:a4:4e:5d:55:2a:71:f1:8d:53:f2: f6:dd:0b:b7:43:ed:b8:bb:c6:2a:9e:c8:56:f5:79: 24:a8:5a:7f:98:de:46:52:c0:64:fa:67:37:fa:d2: 21:6e:41:17:81:4b:dc:ab:42:61:f9:17:93:1b:21: 7f:85:c7:3d:08:18:30:ca:c9:ad:cc:27:e5:90:4d: e9:88:67:69:89:40:6f:00:d9:8b:8f:8b:1e:93:c1: b3:71:58:28:b0:7a:57:67:a4:4e:e7:43:40:7a:39: 61:84:80:8a:c4:f5:36:b0:1f:4a:13:42:4e:2c:ed: 1c:a1:aa:92:8a:3f:89:9c:06:c5:63:8e:01:e9:57: dc:a3:1f:0e:47:a0:fe:8c:ae:69:85:98:e0:39:6f: 3b:8d:80:5b:0a:90:f3:49:39:e4:a7:05:15:f8:1f: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:52:8A:B5:51:F9:81:E0:0C:0D:C7:2E:33:8A:C5:FB:95:38:BF X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:24:08:46:8e:37:37:8d:d2:b2:1a:6f:52:4c:2f:e4:dc:58: 54:14:64:72:88:dc:c3:f3:d0:38:4c:16:7b:ce:9e:18:75:28: e8:ec:e6:41:74:27:d3:93:65:e8:85:e7:1c:5f:fd:f4:4d:34: 68:d2:d3:6e:9e:27:34:c0:c2:a2:39:6a:e9:39:cd:1c:80:a5: 32:0a:9a:b7:b8:b1:51:fb:14:a6:07:ba:2e:59:76:36:24:88: f9:34:25:ef:c1:5a:b2:72:ad:5b:48:b6:dd:59:64:e6:18:95: 17:ec:29:6f:0c:9c:f3:b2:ea:54:33:03:f0:f5:ff:f0:cf:7f: 2b:b4:b0:d9:6a:3e:c5:b5:d4:d5:ff:39:c9:3a:1f:45:34:be: a3:d5:af:a2:79:0b:0f:84:68:f4:ac:07:a7:47:83:7b:46:85: 1d:2d:6f:3d:a0:ba:d1:33:d9:bc:dc:f8:03:6d:59:01:a1:40: 7f:05:67:ce:df:d3:2b:e9:b6:26:b2:29:0f:81:db:1a:9b:d8: cd:4c:5d:4a:c5:6f:dc:29:27:04:29:2e:49:d2:36:f4:95:f0: 30:ad:98:3a:85:29:43:bb:17:79:c4:17:12:74:85:00:fd:b3: 5b:b6:cc:f3:bc:06:a3:9b:ab:a7:34:9d:2d:1f:42:fd:15:53: fa:fc:62:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUwOTE1MDEwODQxWhcNMjUwOTIyMDEwODQxWjAYMRYwFAYD VQQDEw02OGM3NjcxOS04Mzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw/xKEYMP31EYkVtnFhQoWi9jz9Tz1TvFe3rNWMFBINXmqWweDCOFgGkCNM/ Ukjz4hHMbGO5AGYB1MCLECzFwlp3/O0XfLzgNro4TNZFvZfzCH7rJRR6xrfbQflu LKROXVUqcfGNU/L23Qu3Q+24u8YqnshW9XkkqFp/mN5GUsBk+mc3+tIhbkEXgUvc q0Jh+ReTGyF/hcc9CBgwysmtzCflkE3piGdpiUBvANmLj4sek8GzcVgosHpXZ6RO 50NAejlhhICKxPU2sB9KE0JOLO0coaqSij+JnAbFY44B6Vfcox8OR6D+jK5phZjg OW87jYBbCpDzSTnkpwUV+B+zwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUwUoq1 UfmB4AwNxy4zisX7lTi/MB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiJAhGjjc3jdKyGm9STC/k3FhUFGRyiNzD89A4TBZ7zp4YdSjo7OZB dCfTk2XoheccX/30TTRo0tNunic0wMKiOWrpOc0cgKUyCpq3uLFR+xSmB7ouWXY2 JIj5NCXvwVqycq1bSLbdWWTmGJUX7ClvDJzzsupUMwPw9f/wz38rtLDZaj7FtdTV /znJOh9FNL6j1a+ieQsPhGj0rAenR4N7RoUdLW89oLrRM9m83PgDbVkBoUB/BWfO 39Mr6bYmsikPgdsam9jNTF1KxW/cKScEKS5J0jb0lfAwrZg6hSlDuxd5xBcSdIUA /bNbtszzvAajm6unNJ0tH0L9FVP6/GI0 -----END CERTIFICATE-----Generated at Tue Sep 16 16:03:48 2025 by rpki-client