$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: 1qqqx495CDGNLAYBot017cM9/ffLYS5BMZjLeP41cGU= Subject key identifier: F0:1E:4E:05:16:B3:22:99:5B:BC:71:2C:E9:2C:F0:A2:7F:83:AE:62 Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 11B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 11A9 Signing time: Sun 24 Aug 2025 17:10:37 +0000 Manifest this update: Sun 24 Aug 2025 17:10:37 +0000 Manifest next update: Sun 31 Aug 2025 17:10:37 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: vclKlddgLMf6XW0/6lsfDbkpSP7+AmbakMCgQc0c4U4=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4530 (0x11b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Aug 24 17:10:37 2025 GMT Not After : Aug 31 17:10:37 2025 GMT Subject: CN=68ab478d-7b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:dd:95:75:91:0c:47:56:3a:d9:b3:5d:77: 5f:83:14:ec:9b:af:eb:91:72:2f:39:80:27:7d:70: 3f:2d:58:f7:f5:8b:09:64:7b:7c:d9:98:b9:25:b2: 58:a3:28:1e:2f:a6:93:00:4d:a0:c9:a1:b4:86:8d: 66:5a:9d:4b:5d:2f:f2:d6:4c:99:8e:1a:c6:d2:b4: 03:7b:25:07:ee:7d:ae:2c:a7:0b:88:f3:05:3d:d6: 6c:22:d3:f3:7a:5c:08:41:d3:e9:f3:27:94:03:c1: 49:36:79:cc:7d:9c:f9:f3:9e:81:f5:e2:3e:84:c2: 1b:8f:c2:bd:eb:05:49:5d:dc:59:86:30:8c:b8:5d: 67:b5:b0:8f:79:de:26:85:f4:41:92:ee:51:d3:f7: b8:4e:ff:14:b6:af:89:4c:67:be:ff:96:64:94:ee: 49:21:c4:37:de:8a:47:b7:1d:1e:37:76:ae:af:8a: 3c:bb:79:c5:d4:a6:bb:57:2f:ff:ff:d6:6f:c2:d0: c6:44:88:d2:ee:26:3a:b9:29:67:d3:ed:54:6d:18: 3e:8d:65:b9:23:8d:c5:b3:96:76:0f:29:96:68:f8: ac:17:09:97:5b:21:b7:ba:92:84:2f:ca:cb:e3:66: 90:d4:aa:79:fa:3c:fa:34:a4:8b:92:ee:b8:8f:37: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1E:4E:05:16:B3:22:99:5B:BC:71:2C:E9:2C:F0:A2:7F:83:AE:62 X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b0:94:3c:3d:61:41:7d:82:b2:56:56:74:47:9f:b4:00:7c: e1:ed:7c:1a:23:d8:f5:87:c2:ba:8f:83:57:2f:c8:e7:a3:1e: 78:2d:f3:86:4a:22:67:78:3f:a6:2b:38:0a:19:14:8a:ea:99: f2:cf:49:69:aa:15:62:4e:62:8d:df:24:0e:1f:07:dd:85:8d: 5b:27:8e:fa:74:37:f2:57:20:b6:fb:26:22:59:76:e2:41:e1: 50:6c:fd:a2:5e:40:a5:3c:ab:b6:31:09:d9:a7:8a:62:d6:02: 09:98:c6:2e:2e:64:22:df:2b:3a:95:a6:55:89:e7:61:d8:22: ee:f0:cb:b8:1d:f1:72:48:31:ed:5a:61:9b:9a:65:30:5f:45: b8:d3:50:01:bc:c0:4f:ae:1d:7b:c1:d2:f9:b8:9b:a8:29:a3: 7a:b3:7b:5a:5a:db:f8:29:53:1c:ba:1d:bd:1d:fd:97:58:39: 45:cc:4d:6c:bc:80:fb:e9:d5:4a:98:c9:cf:4f:83:c7:52:27: 86:87:f1:6a:12:e9:8f:4d:f1:91:65:b2:f8:3e:64:3e:f5:f8: a9:27:a5:d5:11:c4:78:d0:8d:5c:9b:d4:a5:b5:ca:61:43:30: 0e:33:e4:ca:b1:ad:2f:1a:39:aa:b8:b6:46:dd:6c:99:55:b7: 98:10:69:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjUwODI0MTcxMDM3WhcNMjUwODMxMTcxMDM3WjAYMRYwFAYD VQQDEw02OGFiNDc4ZC03YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQLdlXWRDEdWOtmzXXdfgxTsm6/rkXIvOYAnfXA/LVj39YsJZHt82Zi5JbJY oygeL6aTAE2gyaG0ho1mWp1LXS/y1kyZjhrG0rQDeyUH7n2uLKcLiPMFPdZsItPz elwIQdPp8yeUA8FJNnnMfZz5856B9eI+hMIbj8K96wVJXdxZhjCMuF1ntbCPed4m hfRBku5R0/e4Tv8Utq+JTGe+/5ZklO5JIcQ33opHtx0eN3aur4o8u3nF1Ka7Vy// /9ZvwtDGRIjS7iY6uSln0+1UbRg+jWW5I43Fs5Z2DymWaPisFwmXWyG3upKEL8rL 42aQ1Kp5+jz6NKSLku64jzeTtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAeTgUW syKZW7xxLOks8KJ/g65iMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWsJQ8PWFBfYKyVlZ0R5+0AHzh7XwaI9j1h8K6j4NXL8jnox54LfOG SiJneD+mKzgKGRSK6pnyz0lpqhViTmKN3yQOHwfdhY1bJ476dDfyVyC2+yYiWXbi QeFQbP2iXkClPKu2MQnZp4pi1gIJmMYuLmQi3ys6laZViedh2CLu8Mu4HfFySDHt WmGbmmUwX0W401ABvMBPrh17wdL5uJuoKaN6s3taWtv4KVMcuh29Hf2XWDlFzE1s vID76dVKmMnPT4PHUieGh/FqEumPTfGRZbL4PmQ+9fipJ6XVEcR40I1cm9Sltcph QzAOM+TKsa0vGjmquLZG3WyZVbeYEGkL -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:06 2025 by rpki-client