$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json) Hash identifier: qQcJq18Njkli1ku6wWkjGpDCsDwqpkQ+E9DS7Fssv94= Subject key identifier: BE:78:A4:1B:40:3D:8C:86:D9:51:6C:0A:AE:1B:81:46:F2:25:FD:D5 Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft Manifest number: C4 Signing time: Fri 05 Sep 2025 06:12:41 +0000 Manifest this update: Fri 05 Sep 2025 06:12:41 +0000 Manifest next update: Fri 12 Sep 2025 06:12:41 +0000 Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: THK7loLpWQHfHxXSIwlWfdZMmLDI4l6TOcKPbanBRfI=) 2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: ap2qykakUMtuugznllb9ElqWzxnqoH122Li4BLMbH9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Validity Not Before: Sep 5 06:12:41 2025 GMT Not After : Sep 12 06:12:41 2025 GMT Subject: CN=68ba7f59-d264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:16:e3:17:8b:01:ad:b9:44:87:40:ba:eb: 9d:93:93:3f:1d:42:92:1f:20:52:22:cb:16:56:35: 87:1d:de:bc:cc:a3:d7:5e:99:cc:10:82:b4:64:ed: 86:35:e6:87:ac:a1:cf:94:78:1c:5f:bc:29:e1:d4: 23:56:19:00:cb:ac:26:b8:38:47:ab:ff:65:95:c0: 78:3c:bf:9d:71:56:d6:90:53:7c:63:5e:8b:1a:a9: 1d:69:ca:de:1e:84:18:d4:2e:2a:7c:31:c0:1a:5a: 47:e7:c1:07:af:af:bd:eb:d7:b6:6c:3e:67:f4:1e: 96:20:a6:a7:0a:e5:97:2a:de:b1:c0:de:e1:74:15: 4d:16:6a:cb:5d:85:e1:61:85:09:4a:0e:41:8f:5e: 95:bc:51:fa:b7:c7:42:b1:c6:96:4c:23:93:4b:d1: 03:c8:d7:e0:b4:fd:e2:c0:f3:55:55:82:76:de:e0: c8:68:ce:94:14:63:93:68:51:83:02:88:bc:1e:7a: 5f:6f:04:ec:d0:af:6d:49:6a:fb:f8:f5:93:db:d6: da:ee:53:df:ab:76:bb:06:d8:25:36:25:15:fd:18: 7b:a4:c3:9d:de:05:9c:00:74:2a:64:f3:37:92:6b: 49:4c:23:dd:6d:0d:5b:e2:28:dc:b0:ed:a1:f9:f0: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:78:A4:1B:40:3D:8C:86:D9:51:6C:0A:AE:1B:81:46:F2:25:FD:D5 X509v3 Authority Key Identifier: keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:76:31:3f:6a:1d:d9:ae:2a:da:42:d8:8c:7e:ed:02:3d:61: 73:03:70:68:1c:d0:47:53:e8:65:70:c1:60:99:b2:a0:48:96: f7:f6:78:50:ce:6f:ec:b2:48:c8:e8:ae:9b:15:2d:b7:fa:d1: 47:41:08:08:b0:72:e1:a6:b9:8d:f1:f4:85:3e:9d:d8:97:e5: 9a:a1:ae:e9:4e:fd:87:66:72:bb:d7:91:60:48:36:f3:50:22: 35:f9:75:d5:cd:56:18:bb:55:a2:b1:be:c2:2c:c8:69:9c:0b: 73:b8:8f:71:2c:68:18:49:6c:5d:3f:02:40:7f:c6:27:f8:5b: e1:6d:90:b9:7b:36:0a:8b:57:8b:d8:7c:ef:82:0a:7e:05:ad: 61:3d:6a:6b:93:cb:14:ce:4e:a0:04:4d:6d:ac:7c:3c:c8:53: 92:d4:39:e0:f0:a1:43:8a:0d:1c:7f:b6:13:04:fd:42:2b:d0: ab:06:ee:b3:30:52:32:d1:05:60:de:52:f2:cb:45:c9:20:d3: 9d:86:ee:57:fa:46:1f:dc:d4:f0:53:fa:cf:92:26:f5:ae:06: c5:25:2e:0a:56:03:f2:76:5a:80:3b:20:6d:15:14:89:32:e3: 01:1f:14:0b:57:e9:ec:d2:3e:4d:bd:d2:85:d5:43:56:4a:95: 63:26:c3:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKENGQkIwMzhGREI4Mzg2NTQyMDQ5NjI5ODBBRDIyMUM5 NDE1RDVDRkYwHhcNMjUwOTA1MDYxMjQxWhcNMjUwOTEyMDYxMjQxWjAYMRYwFAYD VQQDEw02OGJhN2Y1OS1kMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqkW4xeLAa25RIdAuuudk5M/HUKSHyBSIssWVjWHHd68zKPXXpnMEIK0ZO2G NeaHrKHPlHgcX7wp4dQjVhkAy6wmuDhHq/9llcB4PL+dcVbWkFN8Y16LGqkdacre HoQY1C4qfDHAGlpH58EHr6+969e2bD5n9B6WIKanCuWXKt6xwN7hdBVNFmrLXYXh YYUJSg5Bj16VvFH6t8dCscaWTCOTS9EDyNfgtP3iwPNVVYJ23uDIaM6UFGOTaFGD Aoi8HnpfbwTs0K9tSWr7+PWT29ba7lPfq3a7BtglNiUV/Rh7pMOd3gWcAHQqZPM3 kmtJTCPdbQ1b4ijcsO2h+fBBwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL54pBtA PYyG2VFsCq4bgUbyJf3VMB8GA1UdIwQYMBaAFM+7A4/bg4ZUIElimArSIclBXVz/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi9GOTAyRTUzMDVE QkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhsUWdTV0tZQ3RJaHlVRmRY UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o3c0RqOXVEaGxRZ1NXS1lDdEloeVVGZFhQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi9GOTAyRTUzMDVEQkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhs UWdTV0tZQ3RJaHlVRmRYUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmdjE/ah3ZriraQtiMfu0CPWFzA3BoHNBHU+hlcMFgmbKgSJb39nhQ zm/sskjI6K6bFS23+tFHQQgIsHLhprmN8fSFPp3Yl+Waoa7pTv2HZnK715FgSDbz UCI1+XXVzVYYu1Wisb7CLMhpnAtzuI9xLGgYSWxdPwJAf8Yn+FvhbZC5ezYKi1eL 2Hzvggp+Ba1hPWprk8sUzk6gBE1trHw8yFOS1Dng8KFDig0cf7YTBP1CK9CrBu6z MFIy0QVg3lLyy0XJINOdhu5X+kYf3NTwU/rPkib1rgbFJS4KVgPydlqAOyBtFRSJ MuMBHxQLV+ns0j5NvdKF1UNWSpVjJsOp -----END CERTIFICATE-----Generated at Sat Sep 6 15:12:23 2025 by rpki-client