$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: Bapv0SFRIHcWqjBriauJN168c+ecIWxuSV3Ki3IdiEI= Subject key identifier: 09:29:B1:6F:7E:01:D1:29:76:B0:6E:5E:7C:41:DF:48:6E:05:6D:92 Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 0901 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 08ED Signing time: Thu 18 Sep 2025 20:37:49 +0000 Manifest this update: Thu 18 Sep 2025 20:37:48 +0000 Manifest next update: Thu 25 Sep 2025 20:37:48 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: AGnwSgHqW8zRljs8DhsFofCwRF/cyK1hYsBPXxDGHFM=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: gGLM1HQ1iS7fd20ceMBraz36fZdGiyHwpUVermAbtmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2305 (0x901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Sep 18 20:37:48 2025 GMT Not After : Sep 25 20:37:48 2025 GMT Subject: CN=68cc6d9d-d088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:94:ff:0a:80:67:73:00:14:1b:d2:76:01: d5:49:59:b1:d8:15:24:5f:bf:c8:61:08:f2:74:e4: 96:f9:de:3d:ee:bd:ad:eb:3c:de:88:36:f3:1b:9c: 9d:ad:21:c4:fb:e6:01:39:e8:90:03:2f:c7:c6:70: 84:b1:db:37:3e:db:39:da:af:2f:42:8f:6b:b7:9a: 37:1b:d8:25:1d:74:44:13:f6:cc:fb:e7:9e:cd:6f: f8:37:5c:46:3d:99:8e:2c:2d:41:aa:e5:2a:0f:7e: 4a:20:4a:71:09:17:ff:95:40:17:01:15:3e:ff:c9: b5:49:ae:ef:18:7b:09:2b:db:08:57:96:9f:68:1a: 8a:a3:93:77:4f:c0:19:a8:dc:72:0a:33:c8:6e:7a: 8f:67:0a:6c:eb:a1:25:42:d6:2f:f9:63:9d:e8:76: 91:f8:fe:70:02:80:e6:b9:05:1b:f3:b7:c6:ba:67: 19:09:d3:40:a3:d8:e3:8d:ed:43:7d:c1:32:36:eb: 69:a6:e8:56:08:c7:6f:4e:1e:3f:9e:c4:57:06:d8: d9:5a:7f:6e:3f:d2:87:95:60:40:79:e6:4c:48:66: ed:6d:f6:68:10:f1:8e:75:56:fb:14:2c:42:10:3e: da:14:cc:e0:c8:7f:6e:e3:fc:2b:61:6d:97:af:b9: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:29:B1:6F:7E:01:D1:29:76:B0:6E:5E:7C:41:DF:48:6E:05:6D:92 X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:14:d4:bc:df:4a:47:e9:6c:c6:90:ee:ab:31:13:ae:8a:ce: cf:4f:bb:d7:a9:f2:98:64:12:73:e5:3d:db:28:e0:b5:4a:72: 4d:2c:aa:85:75:91:04:6f:45:24:22:96:f4:61:b2:62:ee:11: 51:83:53:1d:8c:0e:55:49:6c:13:ab:68:48:05:c5:22:cc:6f: 67:e6:b0:91:67:12:5e:cc:b3:92:bc:72:ec:10:e6:2f:b3:4e: 0d:cc:d0:7f:2c:01:0e:4b:d0:8b:89:db:1d:45:72:40:54:fb: 98:f8:28:e1:dd:a3:88:2c:97:35:cb:c8:b1:d4:11:17:26:d3: ee:d8:87:5a:0b:82:4c:48:36:26:e5:38:84:b9:96:4b:30:d0: 12:08:6f:60:8d:84:5a:07:12:b7:47:70:a9:88:12:27:38:0a: 10:f4:96:a9:29:0c:ca:d7:8c:f9:28:1c:82:a0:06:90:67:5a: 68:cf:14:f2:97:a1:9d:04:db:9c:98:d5:6a:aa:2f:c4:97:9c: 64:f9:67:b9:5c:aa:15:63:d3:a7:26:ad:9f:66:b5:ea:cd:8f: 12:23:74:a4:2f:b3:46:68:be:4b:56:54:8c:c0:27:c9:dc:16: f4:3e:13:08:5b:5e:0f:2a:b4:03:90:8c:8b:37:2e:e7:fc:40: 47:c0:ad:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjUwOTE4MjAzNzQ4WhcNMjUwOTI1MjAzNzQ4WjAYMRYwFAYD VQQDEw02OGNjNmQ5ZC1kMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qOU/wqAZ3MAFBvSdgHVSVmx2BUkX7/IYQjydOSW+d497r2t6zzeiDbzG5yd rSHE++YBOeiQAy/HxnCEsds3Pts52q8vQo9rt5o3G9glHXREE/bM++eezW/4N1xG PZmOLC1BquUqD35KIEpxCRf/lUAXARU+/8m1Sa7vGHsJK9sIV5afaBqKo5N3T8AZ qNxyCjPIbnqPZwps66ElQtYv+WOd6HaR+P5wAoDmuQUb87fGumcZCdNAo9jjje1D fcEyNutppuhWCMdvTh4/nsRXBtjZWn9uP9KHlWBAeeZMSGbtbfZoEPGOdVb7FCxC ED7aFMzgyH9u4/wrYW2Xr7mB7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkpsW9+ AdEpdrBuXnxB30huBW2SMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnFNS830pH6WzGkO6rMROuis7PT7vXqfKYZBJz5T3bKOC1SnJNLKqF dZEEb0UkIpb0YbJi7hFRg1MdjA5VSWwTq2hIBcUizG9n5rCRZxJezLOSvHLsEOYv s04NzNB/LAEOS9CLidsdRXJAVPuY+Cjh3aOILJc1y8ix1BEXJtPu2IdaC4JMSDYm 5TiEuZZLMNASCG9gjYRaBxK3R3CpiBInOAoQ9JapKQzK14z5KByCoAaQZ1pozxTy l6GdBNucmNVqqi/El5xk+We5XKoVY9OnJq2fZrXqzY8SI3SkL7NGaL5LVlSMwCfJ 3Bb0PhMIW14PKrQDkIyLNy7n/EBHwK0h -----END CERTIFICATE-----Generated at Fri Sep 19 02:14:26 2025 by rpki-client