$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: AorljqIsT564KF1e3QnfTp8hFmpPk3gKl6vz4t3zRu4= Subject key identifier: 8D:6F:8B:0D:4C:63:A7:62:41:BE:1A:D4:D8:40:79:9A:51:64:6C:4E Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: 0D Signing time: Fri 05 Sep 2025 08:35:07 +0000 Manifest this update: Fri 05 Sep 2025 08:35:06 +0000 Manifest next update: Fri 12 Sep 2025 08:35:06 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: kmRzF9lgZZO3OG0gNOFuf2nGM5iFZiGz73AfCpGqFN0=) 2: 2EEDB7A679CE11F08016A625C4F9AE02.roa (hash: gnlUy/hdSeTuVT/qFWeLTFknA13pkDcB1vk6uf4nfjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Sep 5 08:35:06 2025 GMT Not After : Sep 12 08:35:06 2025 GMT Subject: CN=68baa0ba-2f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:01:de:01:69:d4:9c:ca:c0:d1:cc:dd:97: 1a:6e:1b:6e:70:dd:03:17:b5:94:f5:07:08:70:25: 52:d1:03:46:6a:22:8e:a1:d1:6a:fb:76:31:d5:04: ef:c9:f7:49:b3:d0:a0:02:52:f8:ca:fe:2f:63:e8: d5:28:34:e5:4e:af:af:5d:21:c0:20:fc:77:70:2f: 48:b9:19:0e:95:d1:c1:9d:aa:7c:33:f2:5c:63:e0: 50:39:ba:b5:08:d6:8f:69:49:c3:94:8c:47:42:df: 89:8b:6e:3c:1a:94:ae:67:27:7d:8b:8f:1b:56:45: 16:c1:c4:73:c4:da:52:8c:c3:c8:da:73:20:04:b5: ef:f5:89:6c:43:25:00:91:cb:80:38:b3:3e:f6:cb: a6:e8:f6:1d:9c:1a:52:49:03:44:4f:c6:1b:cb:5f: 64:91:90:00:28:3f:f9:68:89:f7:3e:a8:da:cf:ec: 22:b0:4c:44:40:19:ac:ab:ee:ba:c5:09:52:46:ab: 1f:04:39:8c:17:f4:fb:ea:c8:26:78:f5:ba:d6:fa: 69:01:42:60:6d:75:80:80:ea:f3:e3:f2:46:c5:e1: 6f:40:70:55:08:fa:c1:a2:52:28:dd:10:e3:e6:ef: 32:7f:8b:e3:8a:c1:42:f0:de:e5:27:29:f4:13:e9: 49:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6F:8B:0D:4C:63:A7:62:41:BE:1A:D4:D8:40:79:9A:51:64:6C:4E X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b9:53:e9:00:c6:3c:d6:36:8d:9f:81:d5:3e:5d:b2:1b:74: e4:f7:9c:a0:b3:aa:8e:e3:7f:ff:ee:5b:66:49:42:a1:3b:da: 6b:be:e7:87:5b:1c:95:c6:93:67:3f:ab:59:94:b3:0d:cb:07: 3f:d5:b0:25:ff:ae:db:66:55:3f:4e:df:95:02:29:af:47:7b: d6:95:fd:53:80:43:4b:ac:e9:8b:5e:b2:9a:fc:2f:1e:5d:2d: 24:83:3e:6c:92:5e:7f:9c:31:58:07:35:2d:d9:3b:54:f9:cc: 2d:ff:8c:ad:bd:84:c8:fe:c8:4d:2b:b1:e3:77:c7:1d:f8:72: 1b:6a:e4:07:aa:cc:2b:f3:a8:d5:12:be:d7:96:8d:c9:a9:d5: c7:59:0f:ce:e0:a5:72:50:7c:2c:85:54:79:95:30:b3:6e:72: c2:70:53:da:fd:99:6e:a2:97:f1:02:70:70:c6:2c:94:35:6a: 32:2a:e4:90:65:4b:09:f4:c3:ec:ee:5f:91:32:cc:23:68:81: fb:b6:62:14:91:40:77:38:cb:f8:d5:be:ad:e2:64:7a:4b:20: 78:44:2f:7d:d6:ec:31:80:5e:ca:60:ed:a2:87:34:7f:2e:07: 1d:05:e9:39:fd:7b:1a:ad:f3:4c:fc:87:5b:b2:25:4f:1e:c8: 7c:19:3d:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoNjc3RjBDRDY0QTVERTJDMUIwMjhFRDAwM0M1Njg3NEI0 OEZBMkUyMTAeFw0yNTA5MDUwODM1MDZaFw0yNTA5MTIwODM1MDZaMBgxFjAUBgNV BAMTDTY4YmFhMGJhLTJmNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgMwHeAWnUnMrA0czdlxpuG25w3QMXtZT1BwhwJVLRA0ZqIo6h0Wr7djHVBO/J 90mz0KACUvjK/i9j6NUoNOVOr69dIcAg/HdwL0i5GQ6V0cGdqnwz8lxj4FA5urUI 1o9pScOUjEdC34mLbjwalK5nJ32LjxtWRRbBxHPE2lKMw8jacyAEte/1iWxDJQCR y4A4sz72y6bo9h2cGlJJA0RPxhvLX2SRkAAoP/loifc+qNrP7CKwTERAGayr7rrF CVJGqx8EOYwX9PvqyCZ49brW+mkBQmBtdYCA6vPj8kbF4W9AcFUI+sGiUijdEOPm 7zJ/i+OKwULw3uUnKfQT6UnhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjW+LDUxj p2JBvhrU2EB5mlFkbE4wHwYDVR0jBBgwFoAUZ38M1kpd4sGwKO0APFaHS0j6LiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzU1OEM2MDk4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxp RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWjM4TTFrcGQ0c0d3S08wQVBGYUhTMGo2TGlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzU1OEM2MDk4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNH d0tPMEFQRmFIUzBqNkxpRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+5U+kAxjzWNo2fgdU+XbIbdOT3nKCzqo7jf//uW2ZJQqE72mu+54db HJXGk2c/q1mUsw3LBz/VsCX/rttmVT9O35UCKa9He9aV/VOAQ0us6Ytespr8Lx5d LSSDPmySXn+cMVgHNS3ZO1T5zC3/jK29hMj+yE0rseN3xx34chtq5AeqzCvzqNUS vteWjcmp1cdZD87gpXJQfCyFVHmVMLNucsJwU9r9mW6il/ECcHDGLJQ1ajIq5JBl Swn0w+zuX5EyzCNogfu2YhSRQHc4y/jVvq3iZHpLIHhEL33W7DGAXspg7aKHNH8u Bx0F6Tn9exqt80z8h1uyJU8eyHwZPRg= -----END CERTIFICATE-----Generated at Sat Sep 6 21:11:01 2025 by rpki-client