$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: GaNlO0LCNQyIPA/OefZwtGKTUWFayhvsItGc8DURVmo= Subject key identifier: C7:CF:1D:5F:50:15:6E:65:1B:F3:B9:E5:92:37:B5:97:46:1A:B6:56 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 24D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 24BC Signing time: Thu 04 Sep 2025 15:51:48 +0000 Manifest this update: Thu 04 Sep 2025 15:51:47 +0000 Manifest next update: Thu 11 Sep 2025 15:51:47 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: 24qo1HEFk3Fl4Q676jau/HRA/iABiZBZfVb8ZStnvdA=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9430 (0x24d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Sep 4 15:51:47 2025 GMT Not After : Sep 11 15:51:47 2025 GMT Subject: CN=68b9b593-0b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:26:63:34:57:1a:52:4b:62:1e:a4:15:04: ef:2a:97:8b:ff:49:6d:84:4d:f6:80:0b:eb:3a:8b: e9:11:d1:bf:03:2d:ee:cb:d1:41:fc:7c:40:30:bd: b7:48:16:c1:24:9b:ee:01:9a:cb:76:d9:84:eb:6a: 8d:40:eb:c5:2e:11:5c:85:cc:d4:3f:c7:1e:ac:73: 8c:c9:d0:f9:7f:af:c2:75:48:70:6b:79:d2:2e:f7: e7:94:f7:c4:41:d0:80:74:9a:ae:68:7b:45:65:cf: cd:c5:ac:bf:84:20:54:cf:35:85:df:36:1c:d6:bd: d2:e9:3f:05:27:c6:6f:14:39:8c:2f:36:34:52:91: 4c:8c:1c:ab:8d:8c:50:a1:32:75:a4:92:f6:1f:dd: 90:65:93:9f:d3:a7:62:f4:1b:da:0d:65:e1:c8:d2: 4c:0e:30:2f:a7:c1:c4:69:c9:fb:c2:99:0d:d7:95: 7c:fe:87:66:9d:a0:1f:5d:ab:84:3c:8a:9f:68:cd: 0a:3b:33:58:b5:13:39:0b:ed:35:26:6e:13:cd:18: e1:b8:70:66:bb:74:9f:f3:c3:dc:12:f8:aa:47:ba: 1b:51:ce:97:9d:be:c1:4c:f1:e7:2d:20:00:85:e7: 34:e8:08:37:1c:a1:42:e0:3a:54:98:3e:50:5c:a1: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CF:1D:5F:50:15:6E:65:1B:F3:B9:E5:92:37:B5:97:46:1A:B6:56 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:45:6f:9d:d4:5c:36:f9:6d:46:e8:bc:39:f3:1e:c2:be:0c: bf:e7:7f:ca:ea:6c:3c:2f:e6:e8:66:ed:bf:b9:99:ba:20:3c: 5f:01:31:b7:7a:1e:c4:d1:e7:39:ed:95:04:1b:a9:53:bb:1d: 6f:a7:bd:39:0f:df:d9:87:71:3b:76:48:ec:44:71:24:55:1c: 5b:ab:34:85:9e:6c:43:a1:6d:66:91:a4:8c:c1:ea:27:3b:ca: 0b:dd:77:86:7d:ee:cc:c3:9f:a8:1d:0a:fc:c9:bd:46:26:a9: 51:55:92:0c:c9:fb:b8:c2:f5:01:2b:be:35:6f:38:d9:6c:1a: 5c:16:01:df:34:4d:dd:9a:ae:5f:70:e8:a5:62:3a:24:94:92: c1:55:20:75:3b:5b:0c:7a:c9:41:be:51:ed:bf:69:15:03:80: 96:49:58:3e:a5:72:a7:53:69:3c:9e:5d:d8:86:dc:91:1e:4a: 2f:15:74:72:7b:25:08:b8:76:3c:c7:c8:c5:33:5a:be:8c:f4: e7:31:6e:c4:6d:7b:e0:80:f0:87:6d:34:d5:11:b9:74:b6:a6: b2:2c:0f:cc:bd:4f:b3:48:d0:31:64:11:11:8e:da:1e:12:53: 84:8a:a2:6e:a3:73:60:8b:40:2f:d9:1d:ef:1c:61:ad:52:7d: e4:2d:ae:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjUwOTA0MTU1MTQ3WhcNMjUwOTExMTU1MTQ3WjAYMRYwFAYD VQQDEw02OGI5YjU5My0wYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVsmYzRXGlJLYh6kFQTvKpeL/0lthE32gAvrOovpEdG/Ay3uy9FB/HxAML23 SBbBJJvuAZrLdtmE62qNQOvFLhFchczUP8cerHOMydD5f6/CdUhwa3nSLvfnlPfE QdCAdJquaHtFZc/Nxay/hCBUzzWF3zYc1r3S6T8FJ8ZvFDmMLzY0UpFMjByrjYxQ oTJ1pJL2H92QZZOf06di9BvaDWXhyNJMDjAvp8HEacn7wpkN15V8/odmnaAfXauE PIqfaM0KOzNYtRM5C+01Jm4TzRjhuHBmu3Sf88PcEviqR7obUc6Xnb7BTPHnLSAA hec06Ag3HKFC4DpUmD5QXKF2HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfPHV9Q FW5lG/O55ZI3tZdGGrZWMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrRW+d1Fw2+W1G6Lw58x7Cvgy/53/K6mw8L+boZu2/uZm6IDxfATG3 eh7E0ec57ZUEG6lTux1vp705D9/Zh3E7dkjsRHEkVRxbqzSFnmxDoW1mkaSMweon O8oL3XeGfe7Mw5+oHQr8yb1GJqlRVZIMyfu4wvUBK741bzjZbBpcFgHfNE3dmq5f cOilYjoklJLBVSB1O1sMeslBvlHtv2kVA4CWSVg+pXKnU2k8nl3YhtyRHkovFXRy eyUIuHY8x8jFM1q+jPTnMW7EbXvggPCHbTTVEbl0tqayLA/MvU+zSNAxZBERjtoe ElOEiqJuo3Ngi0Av2R3vHGGtUn3kLa79 -----END CERTIFICATE-----Generated at Sat Sep 6 08:14:56 2025 by rpki-client