$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: Hr9c95PTEUS4LKulNjIJSj1gybOQhFcVsL+v7OIY8e8= Subject key identifier: 2E:06:56:73:7A:37:D2:EE:EA:95:E7:2E:D4:9E:C7:94:F9:8B:EA:2D Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0755 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06F5 Signing time: Tue 16 Sep 2025 22:40:37 +0000 Manifest this update: Tue 16 Sep 2025 22:40:36 +0000 Manifest next update: Tue 23 Sep 2025 22:40:36 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: cMl7vOVFyk/Iy8ZmjJeCApDE/DJIlR8PzEm5VKQlDbA=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1877 (0x755) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Sep 16 22:40:36 2025 GMT Not After : Sep 23 22:40:36 2025 GMT Subject: CN=68c9e765-82c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d0:dd:26:4b:96:51:7c:2d:60:b2:62:95:71: 6b:31:06:87:b3:4b:1e:6c:f8:64:bf:b1:1c:6b:8f: 1d:d5:25:ee:d5:1e:34:b7:dc:9d:15:a9:6a:9c:80: 0e:f2:a8:ba:08:95:9e:71:b8:00:75:60:aa:21:3a: e7:67:8f:29:bc:f0:e6:f2:d3:8f:7a:d7:11:5b:e4: 6d:f4:da:4a:17:8e:8f:b3:83:ab:7d:bb:74:94:5b: f4:e2:c9:5e:3d:83:8b:5a:99:40:ee:f4:9e:4d:29: d0:18:5d:44:5f:08:e0:69:28:e4:ec:8f:c3:73:35: b6:d4:0a:a0:cc:05:0b:ff:32:ff:5c:e9:7d:b6:87: 3f:0b:6e:b0:f8:bd:b0:68:d0:a8:c7:f8:8d:cb:03: 24:bf:8f:c4:e8:5e:90:e8:d6:41:c9:56:1b:7a:a9: 75:9f:66:03:7a:aa:e7:73:b8:33:21:3e:27:2c:39: f1:53:d3:31:60:cf:bd:37:3c:f4:f0:02:89:6f:24: 9f:c4:44:3d:2a:6e:e8:8a:93:83:25:86:40:a2:16: f6:91:3e:99:b3:f1:7d:e2:9c:fa:a0:3d:b4:e3:c7: 42:32:6c:9f:8d:e9:93:6c:b2:4f:07:49:b7:b0:16: e6:07:5a:cb:3b:59:0c:ec:9b:84:d1:aa:85:7f:b4: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:06:56:73:7A:37:D2:EE:EA:95:E7:2E:D4:9E:C7:94:F9:8B:EA:2D X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:99:e9:8c:7f:af:cd:db:9e:c3:2b:0c:b0:98:59:df:80:33: 73:30:9e:48:88:df:a3:26:9c:2d:b1:ff:8a:7c:34:8a:aa:b3: 20:cd:dd:59:2b:ef:b4:fd:62:57:86:8d:fa:6c:fe:fc:d1:f4: d6:c0:42:10:55:2f:46:2b:6d:06:fd:05:ef:21:13:9d:d3:a8: 42:ce:88:db:5d:e4:4a:55:63:b3:71:af:cd:1c:df:c0:55:71: 5d:f9:f3:02:e6:27:19:6d:32:0c:6a:c1:68:11:e1:f4:97:57: 63:a6:1f:4e:3e:50:fa:c4:45:73:c9:18:02:fa:7d:99:bf:dd: 48:19:e0:92:69:b8:9e:a9:e6:04:46:d8:d4:f1:64:b2:e7:74: f7:c1:4d:0d:c0:5a:d6:be:1d:fc:ee:5d:68:52:a1:f8:73:55: 63:62:33:19:55:45:2b:18:dc:37:b9:89:b2:17:e8:1c:42:31: 27:be:a3:b3:fc:17:14:e6:5b:89:60:f9:37:03:73:b1:2a:34: bb:aa:2c:de:de:75:f2:55:3a:08:58:dd:bd:42:1b:f4:eb:3f: 71:48:38:e9:3b:0e:46:1a:e1:d0:60:b0:87:db:e8:75:e0:c3: 28:4d:b0:fc:b4:3f:9b:34:3e:32:15:95:da:0b:5f:63:3b:75: 33:62:8d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwOTE2MjI0MDM2WhcNMjUwOTIzMjI0MDM2WjAYMRYwFAYD VQQDEw02OGM5ZTc2NS04MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tDdJkuWUXwtYLJilXFrMQaHs0sebPhkv7Eca48d1SXu1R40t9ydFalqnIAO 8qi6CJWecbgAdWCqITrnZ48pvPDm8tOPetcRW+Rt9NpKF46Ps4Orfbt0lFv04sle PYOLWplA7vSeTSnQGF1EXwjgaSjk7I/DczW21AqgzAUL/zL/XOl9toc/C26w+L2w aNCox/iNywMkv4/E6F6Q6NZByVYbeql1n2YDeqrnc7gzIT4nLDnxU9MxYM+9Nzz0 8AKJbySfxEQ9Km7oipODJYZAohb2kT6Zs/F94pz6oD2048dCMmyfjemTbLJPB0m3 sBbmB1rLO1kM7JuE0aqFf7QbHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4GVnN6 N9Lu6pXnLtSex5T5i+otMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABmemMf6/N257DKwywmFnfgDNzMJ5IiN+jJpwtsf+KfDSKqrMgzd1Z K++0/WJXho36bP780fTWwEIQVS9GK20G/QXvIROd06hCzojbXeRKVWOzca/NHN/A VXFd+fMC5icZbTIMasFoEeH0l1djph9OPlD6xEVzyRgC+n2Zv91IGeCSabieqeYE RtjU8WSy53T3wU0NwFrWvh387l1oUqH4c1VjYjMZVUUrGNw3uYmyF+gcQjEnvqOz /BcU5luJYPk3A3OxKjS7qize3nXyVToIWN29Qhv06z9xSDjpOw5GGuHQYLCH2+h1 4MMoTbD8tD+bND4yFZXaC19jO3UzYo29 -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:28 2025 by rpki-client