$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: fLoUzpW2omzFstHkIYqxaJAlk2N32DQuteOrVEAbXX0= Subject key identifier: A4:BD:5A:67:EB:F7:C1:E5:F1:13:8F:23:73:08:E3:96:E7:1F:BB:5D Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 8B Signing time: Fri 05 Sep 2025 07:02:46 +0000 Manifest this update: Fri 05 Sep 2025 07:02:45 +0000 Manifest next update: Fri 12 Sep 2025 07:02:45 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: +ItfVVSePlg7eWexW1yamLPRwFeRjNEUpZVZpkE6ED4=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: BCZ1HJoEZyrIFeiF3ZHLW8BBZXBaO4KH4xqAbBol+hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Sep 5 07:02:45 2025 GMT Not After : Sep 12 07:02:45 2025 GMT Subject: CN=68ba8b15-c382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:3e:f7:46:85:d6:9f:5b:a5:f9:63:4c:ce: f4:88:ea:dd:ed:ea:68:66:8a:77:91:b6:c3:03:d7: 83:2c:ac:89:be:cc:15:a5:74:c5:d6:24:77:29:0b: 07:4c:25:0b:f1:65:ed:6f:e0:19:ae:64:30:2c:02: 2c:18:b5:10:09:be:a6:d8:9a:e2:da:1f:2c:12:da: 37:8f:25:19:e3:b2:96:08:3f:1d:9d:aa:7b:e4:71: 0d:89:96:e8:8e:f6:a9:82:05:90:89:ae:32:3e:41: a5:e9:2d:a7:4f:2f:47:a2:f7:5e:65:48:3f:cb:1f: ee:4d:2d:8e:fc:aa:7a:5a:d1:94:d3:4d:6f:9a:cd: 93:7f:44:3e:1d:3d:a4:68:0f:97:fe:d1:77:2b:62: a0:84:ac:10:00:92:c0:c2:5f:a3:dc:ae:64:d3:53: d3:26:3a:e6:59:7c:7e:77:8b:8f:a8:4b:9f:c6:e3: ec:44:d1:45:e9:de:35:65:bd:cb:7b:94:63:35:6f: 2f:03:05:0f:3e:5d:f8:94:db:58:d9:19:3a:08:b6: 67:43:1f:37:4d:66:5b:84:10:1e:ec:27:b2:b5:e6: a3:50:0c:54:90:3b:38:3b:e3:4a:73:ee:59:42:1b: 03:7a:c6:80:86:0e:af:75:21:d6:86:1e:f5:cb:c2: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BD:5A:67:EB:F7:C1:E5:F1:13:8F:23:73:08:E3:96:E7:1F:BB:5D X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2a:39:96:69:80:cc:8b:93:06:01:84:cb:f0:f6:d5:68:db: 1a:83:39:ce:56:d4:f5:34:13:ab:a6:b3:ef:0b:f7:46:c0:e5: 21:a4:ef:de:f7:80:64:0c:8c:4a:df:bf:29:f4:fa:45:d0:5f: d3:e2:63:01:84:f1:34:95:ed:65:3a:96:1a:17:e6:8b:c1:ba: 22:6c:30:f6:47:4c:30:b5:6d:4c:fd:ad:1d:9a:fa:df:43:10: 13:6b:61:3a:f3:c4:7d:69:2e:66:68:eb:dc:3e:54:d6:d3:dc: 0f:54:e6:39:df:aa:4a:b7:df:e5:b9:3b:23:29:0c:8d:e8:b3: e1:5c:97:fb:35:af:89:a7:32:2e:d9:3e:2b:db:a2:53:65:c1: ac:dc:ec:c0:be:5b:94:bb:9c:4e:62:f1:2c:42:33:0c:65:28: c8:0f:82:03:e9:7d:30:3d:37:c7:11:e4:f1:aa:7e:57:b8:9e: 08:51:08:0b:76:e1:18:e5:5c:91:81:4f:44:5e:09:67:b4:33: 0c:a9:7e:3c:e4:9a:c7:0f:4c:74:36:04:f1:4d:f5:1e:86:77: 0e:87:af:21:9d:bd:6f:59:2a:3b:9e:7a:b4:b7:aa:ea:87:a8: 5d:91:b0:a7:15:61:00:1c:e2:f1:94:b3:ac:dd:bd:09:58:2e: 81:ad:ec:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjUwOTA1MDcwMjQ1WhcNMjUwOTEyMDcwMjQ1WjAYMRYwFAYD VQQDEw02OGJhOGIxNS1jMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TE+90aF1p9bpfljTM70iOrd7epoZop3kbbDA9eDLKyJvswVpXTF1iR3KQsH TCUL8WXtb+AZrmQwLAIsGLUQCb6m2Jri2h8sEto3jyUZ47KWCD8dnap75HENiZbo jvapggWQia4yPkGl6S2nTy9HovdeZUg/yx/uTS2O/Kp6WtGU001vms2Tf0Q+HT2k aA+X/tF3K2KghKwQAJLAwl+j3K5k01PTJjrmWXx+d4uPqEufxuPsRNFF6d41Zb3L e5RjNW8vAwUPPl34lNtY2Rk6CLZnQx83TWZbhBAe7CeyteajUAxUkDs4O+NKc+5Z QhsDesaAhg6vdSHWhh71y8I7OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKS9Wmfr 98Hl8ROPI3MI45bnH7tdMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9KjmWaYDMi5MGAYTL8PbVaNsagznOVtT1NBOrprPvC/dGwOUhpO/e 94BkDIxK378p9PpF0F/T4mMBhPE0le1lOpYaF+aLwboibDD2R0wwtW1M/a0dmvrf QxATa2E688R9aS5maOvcPlTW09wPVOY536pKt9/luTsjKQyN6LPhXJf7Na+JpzIu 2T4r26JTZcGs3OzAvluUu5xOYvEsQjMMZSjID4ID6X0wPTfHEeTxqn5XuJ4IUQgL duEY5VyRgU9EXglntDMMqX485JrHD0x0NgTxTfUehncOh68hnb1vWSo7nnq0t6rq h6hdkbCnFWEAHOLxlLOs3b0JWC6Brew8 -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:12 2025 by rpki-client