$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: yTbudIz8lFxupEdYlXZnHD1nNsgufwWMJPfzXVuX0HU= Subject key identifier: 79:6B:EA:CF:7D:6F:78:B2:ED:A5:E6:97:0B:52:42:81:37:3E:54:85 Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: 0103 Signing time: Sat 23 Aug 2025 05:13:08 +0000 Manifest this update: Sat 23 Aug 2025 05:13:07 +0000 Manifest next update: Sat 30 Aug 2025 05:13:07 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: XTzOXpizLBpMVmTZjkgBp1Q4aBHzaslQzw8MFG+uqhg=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: 6LBO3myStmMJStc10q3AtZjxwkWij6Z9eqgSR2m1lpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E, serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: Aug 23 05:13:07 2025 GMT Not After : Aug 30 05:13:07 2025 GMT Subject: CN=68a94de4-3ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d5:0b:82:d8:60:e5:65:2a:b8:c2:43:86:e6: 6d:b7:be:69:2c:91:8c:a2:b8:db:89:a4:62:e0:aa: 15:eb:5a:98:ce:31:68:45:fc:e2:7a:5a:8e:8a:44: a5:24:8e:c7:4c:5e:7b:16:62:67:93:e6:86:2d:c9: e8:c1:ca:dc:9e:00:a2:6a:76:df:35:e0:3f:ef:ff: e4:c2:72:ee:0e:3d:a6:0e:04:53:77:54:77:30:85: 5f:a2:b2:61:c6:2d:c9:69:0b:b4:e1:1d:81:d7:d8: 13:f3:a0:ac:ac:5a:b1:86:4c:c9:ed:bf:65:f2:85: db:0c:f1:20:05:92:a3:bd:2e:13:ee:04:7f:81:66: 1f:12:76:4f:12:e3:60:f0:a8:5b:1e:d5:ca:ae:72: d5:d6:c3:70:41:8a:53:90:2c:cd:00:1e:47:42:64: 63:51:55:7f:b9:e9:ba:ec:97:fb:02:50:9d:bb:2b: f2:20:a4:e8:c2:62:97:e5:49:f0:81:2a:10:a3:41: 36:47:20:3f:1f:d0:f8:70:ca:26:20:e9:79:64:8a: b2:2f:cb:98:a8:e7:ed:bb:82:ad:4d:21:00:18:c8: 77:4b:8a:3c:f2:40:35:5b:74:36:a0:98:e9:84:31: fb:0a:60:45:2d:87:5e:75:3a:2e:2b:c3:88:04:39: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6B:EA:CF:7D:6F:78:B2:ED:A5:E6:97:0B:52:42:81:37:3E:54:85 X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e4:6d:8b:93:79:33:63:e9:82:7f:f1:02:c0:52:7a:3b:8a: 20:ab:50:1a:1c:0e:01:48:59:08:72:02:10:8e:ff:f4:c0:7d: ac:03:1c:19:14:d9:7f:f3:43:aa:59:55:a2:48:3f:41:22:50: ed:8f:6c:33:ea:dc:a9:c9:9b:1d:62:95:34:40:dc:c9:89:bb: 8d:c8:1b:79:2c:7a:92:4e:fb:41:39:d1:43:2b:46:bf:8b:4d: 80:17:77:d5:c1:cc:9f:97:c6:61:bf:77:89:a6:2e:aa:b0:cb: 07:23:7f:8c:39:38:eb:61:28:31:ae:23:41:fa:b3:93:bf:90: 17:b1:d3:2a:38:cb:cc:fc:38:fe:bb:af:13:f4:df:d4:22:10: 75:97:68:a9:b2:72:6b:44:65:dd:aa:10:e5:c6:e5:e6:16:31: 61:ca:69:6e:59:81:f7:71:14:76:06:d1:a9:0c:e0:a2:2b:0c: b3:57:27:b1:14:e7:81:5c:85:c6:e7:af:b8:82:15:e0:7c:1f: e9:fb:b8:f8:41:48:77:5b:5c:c7:9e:04:f1:a5:30:42:79:6e: 37:cc:de:53:7f:d6:35:95:88:a1:5e:6a:e3:a0:1a:20:9b:80: 22:32:d8:54:06:ba:3d:8e:0e:9f:58:40:da:ad:79:33:f5:d4: 77:25:50:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBNEUxMTAvBgNVBAUTKDY1QjQzNTJGQzVCNzREMzFENzc5NzM2RkNGRTdGNjQx QkFDNzNFQjIwHhcNMjUwODIzMDUxMzA3WhcNMjUwODMwMDUxMzA3WjAYMRYwFAYD VQQDEw02OGE5NGRlNC0zYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NULgthg5WUquMJDhuZtt75pLJGMorjbiaRi4KoV61qYzjFoRfzielqOikSl JI7HTF57FmJnk+aGLcnowcrcngCianbfNeA/7//kwnLuDj2mDgRTd1R3MIVforJh xi3JaQu04R2B19gT86CsrFqxhkzJ7b9l8oXbDPEgBZKjvS4T7gR/gWYfEnZPEuNg 8KhbHtXKrnLV1sNwQYpTkCzNAB5HQmRjUVV/uem67Jf7AlCduyvyIKTowmKX5Unw gSoQo0E2RyA/H9D4cMomIOl5ZIqyL8uYqOftu4KtTSEAGMh3S4o88kA1W3Q2oJjp hDH7CmBFLYdedTouK8OIBDluhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlr6s99 b3iy7aXmlwtSQoE3PlSFMB8GA1UdIwQYMBaAFGW0NS/Ft00x13lzb8/n9kG6xz6y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0E0RS83NjJGRTY0NEYx MzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RUSFhlWE52ei1mMlFickhQ ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0E0RS83NjJGRTY0NEYxMzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RU SFhlWE52ei1mMlFickhQckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs5G2Lk3kzY+mCf/ECwFJ6O4ogq1AaHA4BSFkIcgIQjv/0wH2sAxwZ FNl/80OqWVWiSD9BIlDtj2wz6typyZsdYpU0QNzJibuNyBt5LHqSTvtBOdFDK0a/ i02AF3fVwcyfl8Zhv3eJpi6qsMsHI3+MOTjrYSgxriNB+rOTv5AXsdMqOMvM/Dj+ u68T9N/UIhB1l2ipsnJrRGXdqhDlxuXmFjFhymluWYH3cRR2BtGpDOCiKwyzVyex FOeBXIXG56+4ghXgfB/p+7j4QUh3W1zHngTxpTBCeW43zN5Tf9Y1lYihXmrjoBog m4AiMthUBro9jg6fWEDarXkz9dR3JVD2 -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:23 2025 by rpki-client