$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft File: ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json) Hash identifier: ftCdi09tyGH1HYQ/r0Yj1AYhdJUk5zv0r/K8bj/+nJk= Subject key identifier: 51:70:DF:3C:24:C4:36:53:9F:B4:02:E4:6E:6B:DA:50:0D:D5:21:39 Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86 Certificate issuer: /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft Manifest number: 06 Signing time: Wed 17 Sep 2025 08:54:31 +0000 Manifest this update: Wed 17 Sep 2025 08:54:30 +0000 Manifest next update: Wed 24 Sep 2025 08:54:30 +0000 Files and hashes: 1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: 0FcnTSdH9wmh5QjuwenraUd3PTf4LnBFjimnL54Jgdw=) 2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: T+Vddxi4ktePZ++S8jyGyy1zTkX61dK/stJxrjN0Ydc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86 Validity Not Before: Sep 17 08:54:30 2025 GMT Not After : Sep 24 08:54:30 2025 GMT Subject: CN=68ca7746-3590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:f9:db:d1:c9:8e:df:44:b9:cb:f5:e7:60: a0:8a:4f:80:44:36:d2:e5:5b:fa:15:96:ef:e2:c6: 55:a3:a0:44:13:71:3e:cc:64:94:a6:77:08:d8:e0: 96:8f:1f:89:96:cc:13:db:20:6e:da:d3:24:92:86: d9:b7:d9:7d:f6:8c:48:ac:cf:05:0f:42:d1:8d:d6: 9a:24:9b:cc:5f:84:f0:61:50:14:32:a9:5c:1c:c1: 21:2b:43:a5:31:85:05:90:da:86:77:d5:f8:e3:40: 9e:f3:3a:16:04:fb:ae:2e:21:39:ae:bd:b5:38:9b: 09:bb:df:80:71:a0:33:68:d4:7f:c6:40:e3:38:89: 5b:49:8a:e9:91:25:1f:1c:3e:ee:2d:21:6f:b8:f8: 94:0d:5f:eb:3a:77:2a:5e:c6:9e:09:ba:03:a1:b6: 6d:d2:c8:14:58:05:e5:21:f4:77:0e:f1:fc:a5:56: 5d:cc:0a:e3:6d:c8:2a:b0:d4:de:41:18:33:99:90: ce:f5:f0:90:70:5b:29:65:77:50:c6:74:94:04:d2: bf:63:16:17:66:76:cc:92:56:2d:59:09:4f:35:dc: 92:33:7c:37:94:8f:9d:16:7c:60:7a:53:b5:c4:43: d1:f8:34:5d:1e:b5:fb:08:05:ec:a3:25:dc:62:83: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:DF:3C:24:C4:36:53:9F:B4:02:E4:6E:6B:DA:50:0D:D5:21:39 X509v3 Authority Key Identifier: keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4b:c2:0a:e1:4b:1d:74:4c:0b:61:89:46:c5:ef:65:23:02: f5:16:34:e6:b4:19:ab:e6:7e:ff:2c:8c:98:4f:8a:7a:48:17: fb:20:c5:f7:92:b4:ca:6c:cc:f1:55:28:92:52:94:18:86:7f: 5e:f2:1f:72:9a:aa:83:f0:8c:a7:89:68:9a:f6:e1:69:b8:3a: 8b:c1:9c:f4:9a:f0:d5:1c:2f:9f:a1:dd:06:8e:90:72:87:70: a6:9e:cf:e8:76:51:f5:c8:24:0d:1d:47:bd:6c:2c:c9:a9:a7: f0:ab:51:2d:c5:39:cf:64:31:e9:24:5d:ea:f1:26:da:a0:aa: 29:98:38:71:ba:b9:0f:41:3b:74:57:ad:91:e9:76:fe:70:30: b7:e3:a4:af:11:28:f7:b8:2b:da:d9:15:67:f2:5d:46:2e:eb: e5:a5:05:33:f8:8a:01:f4:a5:9c:3c:c9:83:e1:d6:27:c3:f2: 9e:3d:f8:68:f8:ad:78:b2:14:ca:3e:73:31:c3:bc:8c:74:f4: b6:78:f6:82:bf:50:a2:e0:2b:75:88:fc:15:b0:1c:8f:2a:e8: 7a:d2:64:fc:18:8a:06:6b:d9:54:94:25:b0:3c:02:a7:ee:ad: f3:db:72:8d:01:a7:db:da:cb:fe:ce:55:c3:17:ba:3a:38:1b: 11:51:e7:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTNDRjExMC8GA1UEBRMoNjVFMEFGQTREMTAxQkFBMDVENDI1REVCN0MyNTI4OTZD QjhENUE4NjAeFw0yNTA5MTcwODU0MzBaFw0yNTA5MjQwODU0MzBaMBgxFjAUBgNV BAMTDTY4Y2E3NzQ2LTM1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2rvnb0cmO30S5y/XnYKCKT4BENtLlW/oVlu/ixlWjoEQTcT7MZJSmdwjY4JaP H4mWzBPbIG7a0ySShtm32X32jEiszwUPQtGN1pokm8xfhPBhUBQyqVwcwSErQ6Ux hQWQ2oZ31fjjQJ7zOhYE+64uITmuvbU4mwm734BxoDNo1H/GQOM4iVtJiumRJR8c Pu4tIW+4+JQNX+s6dypexp4JugOhtm3SyBRYBeUh9HcO8fylVl3MCuNtyCqw1N5B GDOZkM718JBwWylld1DGdJQE0r9jFhdmdsySVi1ZCU813JIzfDeUj50WfGB6U7XE Q9H4NF0etfsIBeyjJdxig2efAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUXDfPCTE NlOftALkbmvaUA3VITkwHwYDVR0jBBgwFoAUZeCvpNEBuqBdQl3rfCUolsuNWoYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxM0NGLzE5MDZBQTRFOEUz NTExRjA5RTA1RTMxMEM0RjlBRTAyL1plQ3ZwTkVCdXFCZFFsM3JmQ1VvbHN1Tldv WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmVDdnBORUJ1cUJkUWwzcmZDVW9sc3VOV29ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx M0NGLzE5MDZBQTRFOEUzNTExRjA5RTA1RTMxMEM0RjlBRTAyL1plQ3ZwTkVCdXFC ZFFsM3JmQ1VvbHN1TldvWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlLwgrhSx10TAthiUbF72UjAvUWNOa0Gavmfv8sjJhPinpIF/sgxfeS tMpszPFVKJJSlBiGf17yH3KaqoPwjKeJaJr24Wm4OovBnPSa8NUcL5+h3QaOkHKH cKaez+h2UfXIJA0dR71sLMmpp/CrUS3FOc9kMekkXerxJtqgqimYOHG6uQ9BO3RX rZHpdv5wMLfjpK8RKPe4K9rZFWfyXUYu6+WlBTP4igH0pZw8yYPh1ifD8p49+Gj4 rXiyFMo+czHDvIx09LZ49oK/UKLgK3WI/BWwHI8q6HrSZPwYigZr2VSUJbA8Aqfu rfPbco0Bp9vay/7OVcMXujo4GxFR5+M= -----END CERTIFICATE-----Generated at Thu Sep 18 23:50:43 2025 by rpki-client