$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: bEpkiK0mUVevheXAjtJa1q4QfLVXLVQTptSIyuJ2Xgw= Subject key identifier: F0:B0:E8:6B:DA:79:0C:29:9C:A2:39:79:D4:0E:22:D2:76:8E:D9:2F Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 091C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 090D Signing time: Sat 06 Sep 2025 20:31:15 +0000 Manifest this update: Sat 06 Sep 2025 20:31:15 +0000 Manifest next update: Sat 13 Sep 2025 20:31:15 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: JcViGWSV2qp6ZrtfAeJ9XGs53h8Wgjw/h5kWraywshA=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: liguL5yWelfphfIz9rHVaKh3TqmzzrhEVoBWguDMI9M=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: /n6JoBCxKb39xofyDRMG1k20W82UdWlbULQ4CPVAgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2332 (0x91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Sep 6 20:31:15 2025 GMT Not After : Sep 13 20:31:15 2025 GMT Subject: CN=68bc9a13-fe04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:ef:c8:87:44:d6:63:f8:d3:9d:0e:43:3d: 97:b2:7f:cd:f4:b3:8a:45:32:5f:7b:9b:61:6f:d6: a7:80:50:62:36:24:f7:fa:bb:1e:17:44:a7:08:ce: bb:02:8b:35:54:8c:94:9a:3a:7e:43:c5:11:48:ad: af:17:4e:f8:ed:66:e3:c1:f4:eb:e2:a5:43:29:96: 24:2d:f3:b1:18:d2:7a:95:e5:d8:96:6b:f4:2c:65: 92:aa:f6:47:e1:5c:40:6b:71:99:6e:47:14:e7:44: 11:ee:fb:a0:8c:26:f0:ac:bf:b6:d9:55:81:88:bb: 65:bd:e6:d0:aa:da:a2:c5:35:21:60:54:e9:b7:5e: 81:aa:47:48:db:9f:c6:0c:11:49:96:42:4e:14:d8: cb:59:7c:89:a9:d6:36:0a:c5:a8:e4:f7:ba:cb:73: 6c:ac:1d:d3:56:e8:f4:6e:3f:37:26:4e:68:90:e2: 77:9d:4f:87:16:0a:be:dd:63:d0:e0:14:56:bd:76: 03:7a:5e:e7:d2:69:1b:0e:66:93:bb:58:35:f7:8c: 5a:c3:8b:2a:7a:9c:c7:76:5a:3d:22:b1:cc:36:f7: ab:de:a2:8a:ae:0f:5b:10:ed:40:53:f2:20:7d:7b: 77:db:8d:79:d4:3f:d1:ba:ac:9d:e3:ef:45:a1:92: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B0:E8:6B:DA:79:0C:29:9C:A2:39:79:D4:0E:22:D2:76:8E:D9:2F X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:36:d3:ed:14:b4:05:09:b2:3d:23:c6:73:ac:19:ae:c3:45: ed:e3:57:71:21:41:bb:ec:eb:2d:f8:67:c5:68:2f:d0:82:e8: 71:dd:cf:7c:1d:c5:dd:90:82:0f:e0:44:b2:66:60:02:28:ab: b0:25:fd:a0:2a:00:af:90:60:4d:68:2f:2c:67:5c:37:7b:11: dc:fa:c1:fb:2f:e7:ad:ba:8e:d0:8f:e6:70:14:66:9e:ec:46: 52:8d:5b:a1:74:b2:89:67:ab:94:8d:2a:25:71:e4:01:5e:1a: df:1b:5f:60:14:dc:62:a9:0c:b4:f8:17:bb:9f:96:72:88:13: 37:90:61:72:bb:d8:02:dc:ec:7c:cc:b9:93:ed:00:ee:41:22: f2:f3:49:22:50:11:f1:b9:49:a8:37:3a:70:bc:ac:b9:4b:4e: 69:b5:8e:24:e6:11:99:d0:b9:e8:32:29:b7:74:f3:bd:e3:b1: 9e:f2:57:53:3a:fb:8c:3a:6b:e0:22:95:62:ad:6a:c0:39:41: a5:04:e2:8e:20:3c:72:0f:b6:f5:da:3c:73:8e:60:04:93:fa: 16:b5:eb:eb:79:e2:3a:3e:d3:64:9c:7a:b2:fc:7b:24:14:63: 85:ab:8d:10:9a:48:06:b8:35:aa:25:be:10:2f:3a:44:46:a2: ad:fe:7d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUwOTA2MjAzMTE1WhcNMjUwOTEzMjAzMTE1WjAYMRYwFAYD VQQDEw02OGJjOWExMy1mZTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/HvyIdE1mP4050OQz2Xsn/N9LOKRTJfe5thb9angFBiNiT3+rseF0SnCM67 Aos1VIyUmjp+Q8URSK2vF0747WbjwfTr4qVDKZYkLfOxGNJ6leXYlmv0LGWSqvZH 4VxAa3GZbkcU50QR7vugjCbwrL+22VWBiLtlvebQqtqixTUhYFTpt16BqkdI25/G DBFJlkJOFNjLWXyJqdY2CsWo5Pe6y3NsrB3TVuj0bj83Jk5okOJ3nU+HFgq+3WPQ 4BRWvXYDel7n0mkbDmaTu1g194xaw4sqepzHdlo9IrHMNver3qKKrg9bEO1AU/Ig fXt324151D/Ruqyd4+9FoZL9lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCw6Gva eQwpnKI5edQOItJ2jtkvMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABNtPtFLQFCbI9I8ZzrBmuw0Xt41dxIUG77Ost+GfFaC/Qguhx3c98 HcXdkIIP4ESyZmACKKuwJf2gKgCvkGBNaC8sZ1w3exHc+sH7L+etuo7Qj+ZwFGae 7EZSjVuhdLKJZ6uUjSolceQBXhrfG19gFNxiqQy0+Be7n5ZyiBM3kGFyu9gC3Ox8 zLmT7QDuQSLy80kiUBHxuUmoNzpwvKy5S05ptY4k5hGZ0LnoMim3dPO947Ge8ldT OvuMOmvgIpVirWrAOUGlBOKOIDxyD7b12jxzjmAEk/oWtevreeI6PtNknHqy/Hsk FGOFq40QmkgGuDWqJb4QLzpERqKt/n2Z -----END CERTIFICATE-----Generated at Mon Sep 8 08:35:32 2025 by rpki-client