$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: uV10+sryKAVauPnjJFbMbzwewZMKh/ZaPAYC84xpEmo= Subject key identifier: 0F:1C:87:BC:0B:5E:28:63:73:EE:D9:5D:01:59:CE:A1:8D:8E:74:D2 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:50:52 +0000 Manifest this update: Tue 09 Sep 2025 05:50:52 +0000 Manifest next update: Tue 16 Sep 2025 05:50:52 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: 2QjlZP7eGlTfMK+q5isgXIYUrn4bWxWZkhHzElAsack=) 2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ScK5Mkjc4CtGpC9rnxIJeiwAah1HeyqfBAVqLucgBa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Sep 9 05:50:52 2025 GMT Not After : Sep 16 05:50:52 2025 GMT Subject: CN=68bfc03c-ac36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:5f:09:fe:d9:1d:0c:5a:7b:40:bb:79:bf: a4:4a:da:57:bb:4c:79:cd:e2:57:fd:f9:cf:ec:15: 4a:99:49:4c:57:63:73:d7:ea:4c:47:52:99:b3:1d: b3:4f:76:93:1a:50:36:a3:21:11:26:7e:e8:35:5e: 95:64:16:bc:8f:f4:f2:5a:0f:c6:f1:13:b5:fd:3b: 7e:18:f3:ba:ef:ce:b5:0f:bf:78:53:b1:2c:e0:80: 45:89:00:d7:b9:b6:b7:e3:c2:8e:f3:a6:c3:69:60: 52:d8:db:95:eb:03:c4:20:02:28:0d:e3:05:59:d4: fb:33:2c:6b:de:98:71:e3:9a:62:43:5e:36:af:26: 1a:9f:05:1b:e9:77:67:8c:33:9a:e9:ba:78:5c:c3: c5:53:e4:e3:29:cb:b3:b0:70:9b:43:6d:89:5c:ee: 1a:c9:8a:5b:42:48:a9:fb:50:cc:5c:eb:54:bc:bb: 68:07:cd:12:7b:22:68:46:fa:ae:0b:af:90:a2:23: b4:cf:9d:a3:e6:39:99:69:0c:79:e4:22:53:8c:cc: 26:a9:62:3d:16:24:69:ed:7b:bd:43:32:d8:69:bf: 48:87:fb:59:1d:ec:36:da:4a:bd:bd:96:01:35:9f: 69:30:fb:c1:f1:ac:62:c2:5b:9c:a3:05:ce:43:68: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1C:87:BC:0B:5E:28:63:73:EE:D9:5D:01:59:CE:A1:8D:8E:74:D2 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1d:63:c9:80:cd:fb:07:1e:3a:72:34:22:30:a7:c4:06:fa: 27:46:cf:e2:48:b0:9b:91:84:bc:ef:bf:90:3d:be:2b:16:5b: 26:2c:73:1d:95:57:4f:e8:13:8a:bd:71:29:52:ea:54:a2:c0: e7:fb:66:f9:34:40:10:68:5e:b7:62:e8:e9:12:fb:a2:5e:a4: b6:c1:1e:79:16:d5:5c:8d:1f:e7:fd:a8:45:01:74:53:a0:3d: ed:5d:9f:b5:97:7d:2b:e7:b7:2c:30:0f:94:6a:8d:22:f7:98: 3c:4a:db:f3:b3:5a:01:df:8e:29:20:a3:04:5f:18:c5:25:82: ad:4a:da:dd:5b:37:82:20:c2:85:d6:18:96:a0:da:5a:12:ff: 0b:9f:97:f0:3a:25:b4:b7:84:ef:2f:7f:12:b7:d3:49:75:2a: 66:61:2b:3f:49:14:93:5a:26:02:5d:6b:a8:4d:ba:86:f0:f9: ad:bd:b0:50:4f:1c:cf:d4:a7:f2:1d:1f:bf:cc:be:1e:ac:fe: d1:b0:76:9a:20:8a:90:fa:90:ca:86:ad:d1:10:5e:bc:b7:5b: 76:6f:c3:2c:b9:e1:e1:4a:e8:8d:d3:c0:94:97:90:a6:4c:5f: f4:a5:18:b8:52:9e:b8:1f:0a:a1:57:2d:31:fd:4d:e1:c8:75: be:8d:03:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjUwOTA5MDU1MDUyWhcNMjUwOTE2MDU1MDUyWjAYMRYwFAYD VQQDEw02OGJmYzAzYy1hYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsZfCf7ZHQxae0C7eb+kStpXu0x5zeJX/fnP7BVKmUlMV2Nz1+pMR1KZsx2z T3aTGlA2oyERJn7oNV6VZBa8j/TyWg/G8RO1/Tt+GPO67861D794U7Es4IBFiQDX uba348KO86bDaWBS2NuV6wPEIAIoDeMFWdT7Myxr3phx45piQ142ryYanwUb6Xdn jDOa6bp4XMPFU+TjKcuzsHCbQ22JXO4ayYpbQkip+1DMXOtUvLtoB80SeyJoRvqu C6+QoiO0z52j5jmZaQx55CJTjMwmqWI9FiRp7Xu9QzLYab9Ih/tZHew22kq9vZYB NZ9pMPvB8axiwlucowXOQ2jAQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8ch7wL Xihjc+7ZXQFZzqGNjnTSMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwHWPJgM37Bx46cjQiMKfEBvonRs/iSLCbkYS877+QPb4rFlsmLHMd lVdP6BOKvXEpUupUosDn+2b5NEAQaF63YujpEvuiXqS2wR55FtVcjR/n/ahFAXRT oD3tXZ+1l30r57csMA+Uao0i95g8Stvzs1oB344pIKMEXxjFJYKtStrdWzeCIMKF 1hiWoNpaEv8Ln5fwOiW0t4TvL38St9NJdSpmYSs/SRSTWiYCXWuoTbqG8PmtvbBQ TxzP1KfyHR+/zL4erP7RsHaaIIqQ+pDKhq3REF68t1t2b8MsueHhSuiN08CUl5Cm TF/0pRi4Up64HwqhVy0x/U3hyHW+jQNB -----END CERTIFICATE-----Generated at Tue Sep 9 14:19:48 2025 by rpki-client