$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: oVuaOxsjRAyYLM8+UFSLNuITubytAu7GjET7GRe2rNg= Subject key identifier: 2F:48:8E:16:BA:6D:DB:B5:B3:B1:92:1A:F2:0C:40:0B:36:38:BB:90 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 0C Signing time: Wed 17 Sep 2025 08:53:08 +0000 Manifest this update: Wed 17 Sep 2025 08:53:07 +0000 Manifest next update: Wed 24 Sep 2025 08:53:07 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: VStbZE5SVGOTFxw/HNIOP+o30Q8dnTmVf+8QfltiLlM=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nG9sdc441APZ2AYq+eucZAUUY/j7wEx0tfcPV/Vx/Zg=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Sep 17 08:53:07 2025 GMT Not After : Sep 24 08:53:07 2025 GMT Subject: CN=68ca76f4-7cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:66:ae:46:af:15:61:4f:60:f1:d4:9b:51: 2f:f4:4e:99:39:96:ef:5b:77:7b:3b:20:b1:4c:61: 6c:5e:6e:d1:b1:cf:84:c9:f4:71:67:5c:36:69:e7: 40:d6:01:cc:26:10:d7:ea:03:c1:b0:f1:1f:00:66: 16:bd:58:30:75:7c:7d:31:f7:e8:bc:61:68:35:b9: d2:f9:db:65:43:8d:ca:a1:25:26:75:87:d1:54:1a: 73:c9:ad:5c:cf:ab:b6:a0:3d:c9:f6:d9:23:63:8f: 48:cf:8e:ac:c8:d4:b3:ad:93:f2:fd:91:17:12:75: f1:8d:7f:55:83:45:c2:6d:53:65:8c:59:52:29:aa: 75:40:2f:38:77:63:8e:ec:92:c6:d6:54:13:81:cf: ec:84:ab:9d:ba:d4:2e:96:60:9a:43:77:75:62:d1: 25:2e:5c:40:0e:63:0b:05:2f:42:a8:55:3b:ba:88: 0e:31:8f:ec:84:62:43:09:01:cd:03:83:43:6d:f2: fc:e8:5f:83:1c:6c:aa:2c:ea:f2:f9:4f:b2:5b:92: 61:ea:10:71:c3:e9:52:56:09:91:52:f3:fc:e2:62: 27:9a:56:47:e0:06:4a:2a:c1:50:e3:d0:af:fb:c4: b7:c8:8a:ed:04:38:57:3e:bf:0a:1e:89:28:66:44: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:48:8E:16:BA:6D:DB:B5:B3:B1:92:1A:F2:0C:40:0B:36:38:BB:90 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a4:3a:29:1d:de:af:f4:6a:ca:7b:1d:9f:b7:9c:49:e5:9d: bf:ed:ee:3d:d9:17:ec:25:25:aa:dc:d6:c9:80:83:53:80:34: 66:57:bf:e5:5d:c4:c0:e0:8d:08:24:a9:98:b1:2e:f2:82:93: b6:69:e3:23:58:67:94:28:eb:04:13:b0:cf:16:f3:ed:60:52: 2f:78:e0:9c:43:2a:1b:b0:23:70:01:dc:c6:72:2e:b6:25:6d: d8:30:ba:84:f7:c7:81:b3:3b:4f:af:04:ce:d4:79:87:d6:c7: 63:cd:b5:8c:8f:3b:55:95:32:84:64:50:67:a8:20:12:a3:ed: bc:9a:fa:8a:7d:0b:1d:8b:40:aa:38:26:cd:ce:c1:45:71:4c: 2f:ca:40:84:9b:bc:f8:cf:99:fa:05:14:21:40:6e:e0:d5:30: a8:4c:67:43:69:49:f6:67:46:da:11:55:e9:1b:17:c5:3b:88: 4c:a6:39:ae:82:1e:f7:2f:00:de:35:0d:a5:c2:ad:17:f8:bf: 4f:ed:21:00:8a:28:c5:55:08:27:28:db:e9:36:d6:8a:21:cc: c8:10:4e:c2:35:c9:b5:67:0d:db:3e:04:af:90:b1:4e:98:46: a9:9d:58:91:87:af:ac:c5:31:c3:b6:3e:02:9d:8d:ef:c6:61: ca:3c:cd:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNTA5MTcwODUzMDdaFw0yNTA5MjQwODUzMDdaMBgxFjAUBgNV BAMTDTY4Y2E3NmY0LTdjYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLBWauRq8VYU9g8dSbUS/0Tpk5lu9bd3s7ILFMYWxebtGxz4TJ9HFnXDZp50DW AcwmENfqA8Gw8R8AZha9WDB1fH0x9+i8YWg1udL522VDjcqhJSZ1h9FUGnPJrVzP q7agPcn22SNjj0jPjqzI1LOtk/L9kRcSdfGNf1WDRcJtU2WMWVIpqnVALzh3Y47s ksbWVBOBz+yEq5261C6WYJpDd3Vi0SUuXEAOYwsFL0KoVTu6iA4xj+yEYkMJAc0D g0Nt8vzoX4McbKos6vL5T7JbkmHqEHHD6VJWCZFS8/ziYieaVkfgBkoqwVDj0K/7 xLfIiu0EOFc+vwoeiShmRAwjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL0iOFrpt 27WzsZIa8gxACzY4u5AwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIakOikd3q/0asp7HZ+3nEnlnb/t7j3ZF+wlJarc1smAg1OANGZXv+Vd xMDgjQgkqZixLvKCk7Zp4yNYZ5Qo6wQTsM8W8+1gUi944JxDKhuwI3AB3MZyLrYl bdgwuoT3x4GzO0+vBM7UeYfWx2PNtYyPO1WVMoRkUGeoIBKj7bya+op9Cx2LQKo4 Js3OwUVxTC/KQISbvPjPmfoFFCFAbuDVMKhMZ0NpSfZnRtoRVekbF8U7iEymOa6C HvcvAN41DaXCrRf4v0/tIQCKKMVVCCco2+k21oohzMgQTsI1ybVnDds+BK+QsU6Y RqmdWJGHr6zFMcO2PgKdje/GYco8zfU= -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:06 2025 by rpki-client