$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft File: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft (raw, json) Hash identifier: Qxi109EDv/BkLG/qJqc61FB3NO/ZxtaAsXOBlI32bM8= Subject key identifier: 42:89:96:3B:98:8F:F4:8D:13:43:14:F9:7F:BA:31:FD:D6:77:A6:5F Authority key identifier: 65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD Certificate issuer: /CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft Manifest number: 08CB Signing time: Wed 20 Aug 2025 20:30:44 +0000 Manifest this update: Wed 20 Aug 2025 20:30:44 +0000 Manifest next update: Wed 27 Aug 2025 20:30:44 +0000 Files and hashes: 1: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl (hash: YSf2bAscJvUbbO3sCsgFwsFyVJOZYCinfsvAUctlrT8=) 2: 1B2E0738BB7011EA93F7DE4EC4F9AE02.roa (hash: Kkq3FSGMJtrxAckL14K8lEjZBbSHWGV4MxpopXgePZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4743, serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Validity Not Before: Aug 20 20:30:44 2025 GMT Not After : Aug 27 20:30:44 2025 GMT Subject: CN=68a63074-0cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:0a:39:61:32:71:66:ad:0b:07:9a:23:c0: ac:2b:80:0a:8c:08:8a:df:66:64:cf:5a:25:30:77: 55:fd:f5:54:df:32:a2:30:1d:43:3b:5f:0f:c3:1f: 3c:24:02:ab:bb:7a:28:ff:59:0f:7a:ab:a5:30:48: 09:3a:cb:0b:c6:32:e8:d4:5e:46:9a:98:64:e2:1f: 7e:76:17:00:be:60:11:38:6e:87:65:47:d2:28:7c: 25:4a:b9:d3:4d:c3:33:b0:b7:1d:27:59:88:e9:83: 72:5d:a7:7d:5b:a5:03:6d:17:d5:39:0d:7c:04:3d: 16:11:14:51:ae:22:19:86:02:ca:cb:6a:79:d5:13: f1:86:4c:40:fe:b2:72:77:e4:6a:f3:52:47:f3:f2: 2f:b0:17:11:8b:6e:48:57:5f:56:4b:76:41:b3:ca: a3:22:62:62:2d:0c:50:85:dc:f7:81:42:c5:ae:8e: 83:37:77:bf:cf:66:5c:5a:5c:55:3f:a1:4f:48:f9: bc:6e:0a:bc:45:a8:25:23:9a:a0:8a:9b:ea:88:a8: 5a:06:9f:68:3d:26:e7:d9:27:bb:c2:e1:54:6e:d5: 40:c3:2d:d8:0d:f0:92:f0:79:55:fe:93:9a:db:96: 3f:b9:54:15:58:f8:c6:ca:40:92:6d:1a:0e:9f:de: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:96:3B:98:8F:F4:8D:13:43:14:F9:7F:BA:31:FD:D6:77:A6:5F X509v3 Authority Key Identifier: keyid:65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:97:de:30:fd:48:62:35:4d:24:b4:36:1b:a8:1c:2f:9c:dd: 5b:bb:11:67:b1:c3:24:65:f9:0f:76:45:4c:86:e8:86:af:8a: 65:e4:eb:fa:51:aa:00:fe:7f:2c:90:eb:55:34:cc:1c:7a:7c: e5:41:21:c6:f6:01:25:d3:1a:87:a4:22:2c:3a:eb:7b:97:b9: 4b:b8:42:1a:fd:21:59:44:d9:d4:68:04:69:2f:5f:7c:16:e4: de:b2:ae:9a:b5:4b:5e:49:45:01:30:b9:e9:d9:16:fc:03:b9: e1:b2:ef:0d:a0:d2:ed:3d:b8:7b:16:7c:b7:ee:d9:e9:b5:5a: 9a:99:30:76:44:8c:10:a2:9c:04:f5:e1:3d:38:e6:69:ba:6d: 36:48:90:7b:5f:8a:c6:45:5d:01:ab:40:55:be:56:c9:2d:c4: c4:d8:cb:3d:45:95:8b:f1:9a:ce:82:8b:d0:36:04:db:14:69: 1d:f8:98:51:50:d4:e4:d6:23:02:f4:cd:eb:23:b3:27:83:a0: 3b:d0:7c:5e:56:a8:d7:79:5b:83:f6:38:d9:b0:e3:0b:a3:b4: 3b:bc:b7:a7:97:7f:13:ee:5b:77:2c:1d:8d:d1:f6:13:2e:64: cc:bc:a0:04:e0:86:fe:71:1d:2b:11:8d:2f:aa:4c:8b:ec:3f: f7:a4:4a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3NDMxMTAvBgNVBAUTKDY1NTQyQ0VDMjgxMTFGQzU0QkEzRDJBRUUzM0Y0Q0U4 N0I3RjkwQUQwHhcNMjUwODIwMjAzMDQ0WhcNMjUwODI3MjAzMDQ0WjAYMRYwFAYD VQQDEw02OGE2MzA3NC0wY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CUKOWEycWatCweaI8CsK4AKjAiK32Zkz1olMHdV/fVU3zKiMB1DO18Pwx88 JAKru3oo/1kPequlMEgJOssLxjLo1F5Gmphk4h9+dhcAvmAROG6HZUfSKHwlSrnT TcMzsLcdJ1mI6YNyXad9W6UDbRfVOQ18BD0WERRRriIZhgLKy2p51RPxhkxA/rJy d+Rq81JH8/IvsBcRi25IV19WS3ZBs8qjImJiLQxQhdz3gULFro6DN3e/z2ZcWlxV P6FPSPm8bgq8RaglI5qgipvqiKhaBp9oPSbn2Se7wuFUbtVAwy3YDfCS8HlV/pOa 25Y/uVQVWPjGykCSbRoOn95RnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKJljuY j/SNE0MU+X+6Mf3Wd6ZfMB8GA1UdIwQYMBaAFGVULOwoER/FS6PSruM/TOh7f5Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDc0My82NzBGODA5MkJC NkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4VkxvOUt1NHo5TTZIdF9r SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUXM3Q2dSSDhWTG85S3U0ejlNNkh0X2tLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDc0My82NzBGODA5MkJCNkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4 VkxvOUt1NHo5TTZIdF9rSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYl94w/UhiNU0ktDYbqBwvnN1buxFnscMkZfkPdkVMhuiGr4pl5Ov6 UaoA/n8skOtVNMwcenzlQSHG9gEl0xqHpCIsOut7l7lLuEIa/SFZRNnUaARpL198 FuTesq6atUteSUUBMLnp2Rb8A7nhsu8NoNLtPbh7Fny37tnptVqamTB2RIwQopwE 9eE9OOZpum02SJB7X4rGRV0Bq0BVvlbJLcTE2Ms9RZWL8ZrOgovQNgTbFGkd+JhR UNTk1iMC9M3rI7Mng6A70HxeVqjXeVuD9jjZsOMLo7Q7vLenl38T7lt3LB2N0fYT LmTMvKAE4Ib+cR0rEY0vqkyL7D/3pErY -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:48 2025 by rpki-client