$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: f9yOX+5zjjcvd9U9kHMBEIJOUyqnSG+kdAA1wD9w2QU= Subject key identifier: 37:01:8A:90:0C:8E:B0:F7:D3:38:BF:BB:A8:04:04:A0:58:FA:E2:1C Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: AF Signing time: Fri 05 Sep 2025 06:43:08 +0000 Manifest this update: Fri 05 Sep 2025 06:43:07 +0000 Manifest next update: Fri 12 Sep 2025 06:43:07 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: HUkOvBSJDYCOUcJ6KxzSkjoZAEGm05FMAw9qGSw6D9U=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: YrfoAaRH0TwvCd3/fpeLdhWkCOhZ1iXJCt8nCYQZbVA=) 3: 85FA1A5E7DD311F0899BD374C4F9AE02.roa (hash: AA2xR6cGNVlGSnswJ6aC79DL3JyEzYjSOlj3OJaD+Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Sep 5 06:43:07 2025 GMT Not After : Sep 12 06:43:07 2025 GMT Subject: CN=68ba867c-b7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:c9:61:2a:84:c9:6d:28:13:0e:54:62:db: 2a:40:d2:e3:f8:3d:86:02:3e:b8:5a:f4:87:96:eb: dd:6a:1b:d8:35:b5:72:7f:84:63:c8:2e:d8:f6:a2: 54:04:43:76:1f:ac:c8:ec:12:92:7b:2d:39:0c:51: 07:68:12:3d:58:5c:3c:6d:fd:c9:96:9c:da:50:7f: 68:3f:fa:72:35:cc:6c:78:28:45:1f:1e:b3:88:75: 45:b5:e7:c7:34:20:65:63:00:95:b9:71:47:f8:07: e6:48:08:d0:d7:c8:45:3d:91:4a:0a:f4:df:1b:d0: f1:ef:3c:e6:4a:d9:e5:12:cc:19:23:3e:4b:68:b9: 87:4a:c2:13:8e:ef:03:e0:4f:75:a0:55:1e:eb:d8: 82:f3:53:48:09:c6:4f:29:31:01:e5:6b:b4:bf:af: 8b:3f:0a:df:c6:f1:45:e6:79:0c:97:b8:5f:7d:c3: 86:ac:18:3d:c1:62:92:87:e2:e5:86:ab:b0:3e:57: 3c:81:b0:85:98:03:8f:0e:7a:6e:e8:46:52:6b:f1: 09:b0:d1:74:c8:40:95:5f:95:f6:6d:22:7b:d6:d4: 38:34:ad:cd:35:d0:a3:4e:bc:80:fa:b0:1e:5e:5e: 26:b2:ed:66:28:06:37:04:a4:02:a2:2e:c3:83:06: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:01:8A:90:0C:8E:B0:F7:D3:38:BF:BB:A8:04:04:A0:58:FA:E2:1C X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a8:ab:d8:1d:48:e2:57:99:68:6a:d0:9d:2e:78:ac:2c:17: 6a:2f:35:c0:bb:51:4b:d6:ae:50:48:8b:ca:e4:9f:59:0f:4a: 2d:3c:73:3f:9b:fd:58:b8:73:e6:b6:75:ff:48:7c:3c:5f:d3: 43:50:4d:91:11:98:ac:4f:b0:99:ce:b8:84:85:7b:13:cd:35: 5f:17:da:01:39:e0:cb:f3:00:05:81:00:c4:8e:0a:ff:d4:7f: 27:c1:7b:8b:e5:28:96:0e:95:b4:e3:68:d6:3a:fb:fc:32:70: 13:54:42:34:33:af:48:d2:7e:4a:d4:5c:80:52:54:72:4a:f9: 0a:8b:1d:21:8a:c5:aa:af:0b:e0:5a:9b:30:1a:d0:32:2c:83: ea:c8:e9:16:eb:ec:c6:da:9d:80:33:ce:15:ea:9a:17:fd:ac: 62:ec:79:41:2c:cb:28:20:70:18:ab:6e:46:fd:f5:df:1c:6c: b8:24:61:ef:3c:ff:37:8b:f6:cd:f8:82:3a:dc:08:49:e3:84: 8c:53:da:d4:9e:e9:62:ad:4f:ee:e8:87:da:88:d5:88:b3:63: ac:89:00:ef:8e:07:6a:f3:78:b4:09:0b:89:07:88:86:36:ba: 01:2f:17:09:4b:de:e8:c8:48:04:f4:b9:39:c0:d6:8e:6c:0b: b6:9e:c1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjUwOTA1MDY0MzA3WhcNMjUwOTEyMDY0MzA3WjAYMRYwFAYD VQQDEw02OGJhODY3Yy1iN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynbJYSqEyW0oEw5UYtsqQNLj+D2GAj64WvSHluvdahvYNbVyf4RjyC7Y9qJU BEN2H6zI7BKSey05DFEHaBI9WFw8bf3JlpzaUH9oP/pyNcxseChFHx6ziHVFtefH NCBlYwCVuXFH+AfmSAjQ18hFPZFKCvTfG9Dx7zzmStnlEswZIz5LaLmHSsITju8D 4E91oFUe69iC81NICcZPKTEB5Wu0v6+LPwrfxvFF5nkMl7hffcOGrBg9wWKSh+Ll hquwPlc8gbCFmAOPDnpu6EZSa/EJsNF0yECVX5X2bSJ71tQ4NK3NNdCjTryA+rAe Xl4msu1mKAY3BKQCoi7Dgwat0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcBipAM jrD30zi/u6gEBKBY+uIcMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCqKvYHUjiV5loatCdLnisLBdqLzXAu1FL1q5QSIvK5J9ZD0otPHM/ m/1YuHPmtnX/SHw8X9NDUE2REZisT7CZzriEhXsTzTVfF9oBOeDL8wAFgQDEjgr/ 1H8nwXuL5SiWDpW042jWOvv8MnATVEI0M69I0n5K1FyAUlRySvkKix0hisWqrwvg WpswGtAyLIPqyOkW6+zG2p2AM84V6poX/axi7HlBLMsoIHAYq25G/fXfHGy4JGHv PP83i/bN+II63AhJ44SMU9rUnulirU/u6IfaiNWIs2OsiQDvjgdq83i0CQuJB4iG NroBLxcJS97oyEgE9Lk5wNaObAu2nsHS -----END CERTIFICATE-----Generated at Sat Sep 6 21:39:41 2025 by rpki-client