$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: vT+pmI6Hc6rT+dF0xUQ640eiCtwHxfKTuokrRNI5sQM= Subject key identifier: FF:12:84:D6:32:49:91:CE:44:B3:7F:26:1C:AA:CD:2A:8C:13:CB:80 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 051B Signing time: Thu 04 Sep 2025 23:56:15 +0000 Manifest this update: Thu 04 Sep 2025 23:56:15 +0000 Manifest next update: Thu 11 Sep 2025 23:56:15 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: 3ZzX0gwThDWDtk+9kFkoczP/QlNHMu1pkmEl25o2Nk8=) 2: F02FB190775C11F0AAB66573C4F9AE02.roa (hash: 1cnz4qLGOZM90/y9wRTb9HHBjCN3hSPgSpg/4lYiJyU=) 3: 0C61CFD8775D11F0B5C19073C4F9AE02.roa (hash: dwH9ceoHGi/wx5zHjlHJemmm0Xu3vmgKYVu6P4OYiPI=) 4: 17C20748736C11F08782972FC4F9AE02.roa (hash: uD/+VbEQuvKB4FlDEdrzat2jHSaev4WUMeRzTzDdRDA=) 5: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Sep 4 23:56:15 2025 GMT Not After : Sep 11 23:56:15 2025 GMT Subject: CN=68ba271f-ccea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:d1:cd:8a:3c:67:a0:43:b9:d3:e4:5a:6c: 4e:91:f4:ae:b6:91:c5:ce:3e:d5:34:7e:81:7b:53: 3b:99:53:63:e1:c8:db:84:15:99:47:8f:c8:9a:60: 26:b1:53:ee:c5:bc:6e:bc:48:72:21:3f:ca:e9:4c: 68:b6:12:d4:fc:4a:86:c0:ae:a9:a2:29:7a:b5:0a: df:1b:ee:8b:0f:96:05:cf:e7:11:4a:ea:76:a2:97: 16:6a:14:d1:19:84:26:20:44:d7:d8:1f:70:18:57: 2d:ca:5a:f2:0c:ae:84:25:10:4c:b8:da:96:c8:c9: ab:a5:80:3a:20:84:15:71:24:a7:67:b5:90:3d:bf: 18:f2:3a:df:1e:0d:5d:c3:94:8b:8d:29:39:0c:1a: 9c:5e:3a:14:0b:66:2c:a5:eb:c5:20:d9:a4:c8:e9: 66:15:43:69:5a:e1:b1:32:7b:7e:54:f7:25:4f:85: 41:22:00:e1:19:36:0d:c8:55:40:8f:a7:c0:32:ee: 73:c8:48:8a:63:bd:3d:72:0c:f2:81:fc:b2:b9:4e: 9c:c9:3e:8c:47:1f:b5:c9:0e:59:96:85:6b:f8:fd: 1d:46:fe:ae:2b:f4:27:b8:a0:48:f9:4f:af:75:db: 82:bc:e4:a5:5f:c9:6b:fe:3a:74:78:77:da:27:73: 00:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:12:84:D6:32:49:91:CE:44:B3:7F:26:1C:AA:CD:2A:8C:13:CB:80 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c1:34:2a:56:65:71:4f:9b:c6:a5:d7:fb:a8:72:92:dc:b0: a0:90:6a:40:e7:73:dc:36:bf:6f:6e:b6:51:47:6b:3c:b2:3b: 29:9f:ea:a7:34:cf:c9:10:e4:6e:66:1e:26:33:d6:2f:b5:21: e4:6d:20:e7:8e:90:c9:52:61:85:4b:6f:24:ba:98:05:43:2e: 9f:eb:57:9b:89:52:b8:0c:90:98:12:31:98:14:a8:dc:da:81: ff:b4:66:ad:4f:97:c2:1d:10:d4:89:10:03:4f:34:23:13:de: b7:d1:61:f9:65:a1:97:97:76:a8:c9:b0:34:1c:05:12:80:ef: 9a:8f:39:92:29:15:e6:72:95:f6:c2:0c:7b:d1:77:03:3f:92: c9:29:ad:63:df:f1:9e:fb:88:8e:c6:22:63:34:8a:8c:fd:22: 9b:87:b0:57:9b:6c:1f:93:a7:99:bc:a1:ee:e2:83:37:a9:a6: 61:26:ea:dc:42:d9:fa:25:0a:5a:ba:bb:ed:9b:2f:d7:2f:00: b2:dc:af:e7:e3:e7:7f:a7:fc:85:b1:7b:b3:18:c0:27:d4:71: c5:87:20:83:d4:4f:54:91:3b:a1:1d:c5:a6:b7:ac:2d:56:44: 0e:bc:34:ac:d0:60:a1:20:08:12:76:3f:52:41:da:ab:be:67: 2c:a9:53:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUwOTA0MjM1NjE1WhcNMjUwOTExMjM1NjE1WjAYMRYwFAYD VQQDEw02OGJhMjcxZi1jY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvvRzYo8Z6BDudPkWmxOkfSutpHFzj7VNH6Be1M7mVNj4cjbhBWZR4/ImmAm sVPuxbxuvEhyIT/K6UxothLU/EqGwK6poil6tQrfG+6LD5YFz+cRSup2opcWahTR GYQmIETX2B9wGFctylryDK6EJRBMuNqWyMmrpYA6IIQVcSSnZ7WQPb8Y8jrfHg1d w5SLjSk5DBqcXjoUC2YspevFINmkyOlmFUNpWuGxMnt+VPclT4VBIgDhGTYNyFVA j6fAMu5zyEiKY709cgzygfyyuU6cyT6MRx+1yQ5ZloVr+P0dRv6uK/QnuKBI+U+v dduCvOSlX8lr/jp0eHfaJ3MAuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8ShNYy SZHORLN/JhyqzSqME8uAMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSwTQqVmVxT5vGpdf7qHKS3LCgkGpA53PcNr9vbrZRR2s8sjspn+qn NM/JEORuZh4mM9YvtSHkbSDnjpDJUmGFS28kupgFQy6f61ebiVK4DJCYEjGYFKjc 2oH/tGatT5fCHRDUiRADTzQjE9630WH5ZaGXl3aoybA0HAUSgO+ajzmSKRXmcpX2 wgx70XcDP5LJKa1j3/Ge+4iOxiJjNIqM/SKbh7BXm2wfk6eZvKHu4oM3qaZhJurc Qtn6JQpaurvtmy/XLwCy3K/n4+d/p/yFsXuzGMAn1HHFhyCD1E9UkTuhHcWmt6wt VkQOvDSs0GChIAgSdj9SQdqrvmcsqVPZ -----END CERTIFICATE-----Generated at Sat Sep 6 06:06:09 2025 by rpki-client