$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json) Hash identifier: EqPsp4skakfg7DfzXDZ//A6iOFmJR8Yj2doOlsqs5qs= Subject key identifier: CB:DD:41:7B:22:01:C7:7B:C4:16:48:89:5B:F9:DE:AA:05:E6:92:4D Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft Manifest number: 25 Signing time: Wed 17 Sep 2025 08:35:16 +0000 Manifest this update: Wed 17 Sep 2025 08:35:15 +0000 Manifest next update: Wed 24 Sep 2025 08:35:15 +0000 Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: M3h9dqBo6ewtOClmLqwc7xW0tl/gK3LNIt1ZkXs8vZY=) 2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Validity Not Before: Sep 17 08:35:15 2025 GMT Not After : Sep 24 08:35:15 2025 GMT Subject: CN=68ca72c3-5895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:4e:bf:f6:9d:37:91:70:19:ce:c4:c4:63: 2b:a3:bb:8b:d1:19:d2:8f:86:1d:aa:7e:26:e7:6f: 17:6e:b4:bd:34:ae:66:2c:18:bc:db:e6:bc:fc:0e: 5c:fa:b6:b5:ec:89:1e:8b:b1:f1:7a:bb:f6:a9:96: 08:7f:26:67:14:af:fc:f3:2b:ab:1d:f8:b9:3b:55: 9f:d2:62:d4:25:ca:63:93:47:2b:0c:aa:b7:cf:4a: 0a:93:94:a6:d9:e3:c1:4d:87:9f:65:84:8d:97:5e: b4:86:ac:da:4c:c2:fc:16:51:b5:71:79:90:e5:03: 7e:d2:1c:7c:ec:50:c4:df:15:06:36:d5:bb:4d:ec: b5:41:fb:63:a9:45:22:be:5e:08:db:57:1c:06:10: ce:71:07:b9:c9:3b:16:7e:e7:3d:8b:21:35:73:a2: aa:9a:c2:6c:89:69:bd:67:5a:10:3d:11:57:9f:4c: 63:27:5d:d1:50:a1:a6:e3:32:a1:e0:93:ff:46:cf: 4f:d7:f9:29:1f:1c:1a:e9:93:1c:ae:8a:46:0e:1c: 1f:24:16:4c:1b:65:25:bd:4c:44:3d:ff:bc:63:c8: fd:26:0b:a9:d2:ee:aa:06:f8:6d:d5:47:3d:01:ed: ca:40:d2:4f:80:2f:5a:f1:48:54:9d:55:7b:f9:25: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DD:41:7B:22:01:C7:7B:C4:16:48:89:5B:F9:DE:AA:05:E6:92:4D X509v3 Authority Key Identifier: keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f0:a3:d4:32:6d:b3:da:e9:9f:61:31:25:16:18:a0:f1:af: 1c:f9:74:34:1a:9e:36:ce:04:23:bd:e9:08:d7:88:92:fb:55: 61:f0:d0:c0:71:bc:a5:16:43:3b:cf:4b:f7:f7:0a:3f:d9:c1: de:4f:e4:54:64:d3:b0:1b:04:92:9a:8c:da:d3:45:40:bf:c3: 19:7f:7e:47:82:3c:6a:87:37:21:0f:80:42:47:eb:18:e6:fc: e7:d0:b8:5f:80:7c:c0:35:1d:4a:30:b2:41:8d:39:75:9a:45: 5c:06:b8:1b:e0:91:36:f3:98:f8:b0:4b:fa:f6:b1:f0:dd:dc: e1:cc:df:db:ea:5a:06:a3:3a:3f:b4:2f:bf:83:71:81:e2:97: 23:d1:bc:b5:0c:98:29:9f:6d:53:e0:a4:c6:1c:c0:86:df:84: 62:69:3e:f3:f0:59:05:4c:08:d0:af:7c:e4:dd:fa:45:4e:10: ba:4c:68:9e:f0:b0:c4:04:a9:08:26:78:48:3d:ac:ba:94:68: d3:c0:ac:f6:ce:ea:ad:7c:87:2c:2e:cc:8a:54:63:00:b9:0d: d3:5a:dd:d0:52:18:09:b9:bf:d9:9f:ba:f4:5c:ce:c8:79:48: 64:db:74:5c:45:e3:4b:3a:4f:59:4b:5a:3f:db:bf:80:7a:a1: cb:4d:b0:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw QjVDQ0M2MDAeFw0yNTA5MTcwODM1MTVaFw0yNTA5MjQwODM1MTVaMBgxFjAUBgNV BAMTDTY4Y2E3MmMzLTU4OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDanE6/9p03kXAZzsTEYyuju4vRGdKPhh2qfibnbxdutL00rmYsGLzb5rz8Dlz6 trXsiR6LsfF6u/aplgh/JmcUr/zzK6sd+Lk7VZ/SYtQlymOTRysMqrfPSgqTlKbZ 48FNh59lhI2XXrSGrNpMwvwWUbVxeZDlA37SHHzsUMTfFQY21btN7LVB+2OpRSK+ XgjbVxwGEM5xB7nJOxZ+5z2LITVzoqqawmyJab1nWhA9EVefTGMnXdFQoabjMqHg k/9Gz0/X+SkfHBrpkxyuikYOHB8kFkwbZSW9TEQ9/7xjyP0mC6nS7qoG+G3VRz0B 7cpA0k+AL1rxSFSdVXv5Jb9bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy91BeyIB x3vEFkiJW/neqgXmkk0wHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7wo9QybbPa6Z9hMSUWGKDxrxz5dDQanjbOBCO96QjXiJL7VWHw0MBx vKUWQzvPS/f3Cj/Zwd5P5FRk07AbBJKajNrTRUC/wxl/fkeCPGqHNyEPgEJH6xjm /OfQuF+AfMA1HUowskGNOXWaRVwGuBvgkTbzmPiwS/r2sfDd3OHM39vqWgajOj+0 L7+DcYHilyPRvLUMmCmfbVPgpMYcwIbfhGJpPvPwWQVMCNCvfOTd+kVOELpMaJ7w sMQEqQgmeEg9rLqUaNPArPbO6q18hywuzIpUYwC5DdNa3dBSGAm5v9mfuvRczsh5 SGTbdFxF40s6T1lLWj/bv4B6octNsD0= -----END CERTIFICATE-----Generated at Fri Sep 19 08:10:12 2025 by rpki-client