$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: pa0E1kmsKcByK+RRHProdWGU+YKAa+Z0eZqlGsalXeE= Subject key identifier: 6A:D9:46:7F:E7:44:4F:22:0A:0E:B6:33:9D:12:C4:DB:FE:D2:DE:09 Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: F9 Signing time: Fri 19 Sep 2025 05:45:14 +0000 Manifest this update: Fri 19 Sep 2025 05:45:14 +0000 Manifest next update: Fri 26 Sep 2025 05:45:14 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: qf+9ZNRcaZp3f8sGgkmS9eVd2GlilzpB2F0ukURozVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Sep 19 05:45:14 2025 GMT Not After : Sep 26 05:45:14 2025 GMT Subject: CN=68ccedea-79cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:f3:2c:c5:d0:13:ad:eb:94:6f:81:40:04: 55:4c:1a:61:9d:3d:7e:29:f6:12:77:b8:8f:c1:a2: 06:e0:59:ce:b2:b2:af:30:d4:16:5f:1e:57:d8:e9: 1d:ec:f3:17:d2:d2:07:33:7b:00:68:c5:cb:7c:4e: 38:8a:39:ae:8f:09:18:31:0b:b4:26:00:18:51:4c: dd:61:bc:fa:cb:03:7a:eb:6c:30:7c:f3:0b:f9:11: 99:35:1d:e4:d2:a9:da:48:83:be:dd:47:cf:d9:12: ce:30:3d:38:91:1f:c7:1b:06:bd:24:dc:7f:9c:fd: 73:1a:f4:f8:92:f2:72:84:04:36:b2:bd:59:37:33: 89:8b:70:a4:ee:f3:85:b0:8d:00:6a:2d:79:82:c8: f0:72:7a:4b:ed:47:b4:eb:bd:6c:09:4b:96:79:be: 05:20:36:43:dc:3c:76:26:b3:c0:0b:7c:1b:ac:ea: 45:3e:c5:a1:88:fe:55:de:06:4c:d8:c3:20:25:c3: d0:87:87:05:ec:af:86:57:38:02:f8:73:5b:7b:16: a2:5b:a7:53:01:f7:6d:11:25:cc:b6:df:e0:4b:df: 4c:d4:be:5e:19:3c:0a:48:d7:6f:1c:92:1b:be:d6: 62:33:41:07:9a:8e:1b:75:48:d1:8e:8b:8b:c2:84: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D9:46:7F:E7:44:4F:22:0A:0E:B6:33:9D:12:C4:DB:FE:D2:DE:09 X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d3:09:a0:f6:2c:80:9d:d8:86:f8:66:5a:6e:f9:e4:d2:28: e5:db:ca:99:66:30:3e:dc:2e:b4:c3:63:f8:18:a6:81:d8:09: 43:05:a3:4a:2a:71:4a:9e:27:2a:a7:06:db:fd:8b:23:3d:82: 27:1c:8d:c9:0b:db:6e:9b:76:5f:c9:ab:9d:d7:c5:4c:f6:74: 8a:c7:45:98:80:e6:05:79:1a:67:9e:5f:6e:22:be:d7:6e:89: 89:ab:c0:25:45:ea:76:fd:e3:55:43:18:42:21:41:80:53:b6: c4:41:7e:83:ee:93:c8:47:bf:2e:7b:64:66:d6:37:69:1a:2c: 6a:86:e6:6a:bd:9b:dc:ea:c6:d6:c4:db:63:f3:e2:44:93:aa: 2d:38:6a:96:36:4e:5e:cf:87:f8:0f:0b:71:fd:ac:30:db:a4: eb:ad:ba:eb:4a:9b:e5:96:b1:4c:44:bd:59:4a:5d:a7:ad:d4: 6c:ba:38:a1:2c:3f:b7:7a:df:d3:99:37:fb:93:21:3f:0c:7f: b2:e0:17:ac:fa:e9:02:16:f7:c2:99:0b:5a:01:96:89:88:c5: 26:7d:e2:7c:d6:2d:ba:69:f2:e6:8b:41:6a:dc:2f:26:77:9a: ed:ad:32:2c:02:ba:25:9a:59:cb:0e:fd:9a:c2:29:e5:53:bb: cb:7a:b2:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUwOTE5MDU0NTE0WhcNMjUwOTI2MDU0NTE0WjAYMRYwFAYD VQQDEw02OGNjZWRlYS03OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZDzLMXQE63rlG+BQARVTBphnT1+KfYSd7iPwaIG4FnOsrKvMNQWXx5X2Okd 7PMX0tIHM3sAaMXLfE44ijmujwkYMQu0JgAYUUzdYbz6ywN662wwfPML+RGZNR3k 0qnaSIO+3UfP2RLOMD04kR/HGwa9JNx/nP1zGvT4kvJyhAQ2sr1ZNzOJi3Ck7vOF sI0Aai15gsjwcnpL7Ue0671sCUuWeb4FIDZD3Dx2JrPAC3wbrOpFPsWhiP5V3gZM 2MMgJcPQh4cF7K+GVzgC+HNbexaiW6dTAfdtESXMtt/gS99M1L5eGTwKSNdvHJIb vtZiM0EHmo4bdUjRjouLwoSriwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrZRn/n RE8iCg62M50SxNv+0t4JMB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0wmg9iyAndiG+GZabvnk0ijl28qZZjA+3C60w2P4GKaB2AlDBaNK KnFKnicqpwbb/YsjPYInHI3JC9tum3Zfyaud18VM9nSKx0WYgOYFeRpnnl9uIr7X bomJq8AlRep2/eNVQxhCIUGAU7bEQX6D7pPIR78ue2Rm1jdpGixqhuZqvZvc6sbW xNtj8+JEk6otOGqWNk5ez4f4Dwtx/aww26TrrbrrSpvllrFMRL1ZSl2nrdRsujih LD+3et/TmTf7kyE/DH+y4Bes+ukCFvfCmQtaAZaJiMUmfeJ81i26afLmi0Fq3C8m d5rtrTIsArolmlnLDv2awinlU7vLerJP -----END CERTIFICATE-----Generated at Fri Sep 19 10:58:01 2025 by rpki-client