$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft File: zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json) Hash identifier: +Jci7qK22A6xniWRC2+d2wp1b+NOesSPCo7Zn3zBaN8= Subject key identifier: 95:A0:EF:BF:87:4A:43:51:67:15:57:C6:C3:E1:D9:CC:32:09:7E:70 Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft Manifest number: 013E Signing time: Wed 17 Sep 2025 04:58:38 +0000 Manifest this update: Wed 17 Sep 2025 04:58:38 +0000 Manifest next update: Wed 24 Sep 2025 04:58:38 +0000 Files and hashes: 1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: TF4e762cronve3JcHEnt8mm/THh8Q8PHEOezntrAWQo=) 2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: ewevHTVGmqHpvpOV2d+aqrkd9ftzXTkReJQtB5PG940=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBA0C, serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Validity Not Before: Sep 17 04:58:38 2025 GMT Not After : Sep 24 04:58:38 2025 GMT Subject: CN=68ca3ffe-a883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:20:d0:97:4b:95:e0:c6:d4:56:6c:df:ed: 8d:d6:b2:fd:04:89:9c:c2:28:73:b5:c0:dd:47:17: 1c:d7:60:04:a5:7d:92:0a:6c:20:94:e4:8e:81:ac: bc:98:6b:68:0b:d8:1e:94:1d:93:81:eb:f8:02:ee: 0e:75:7d:12:ba:be:43:15:be:b5:7d:31:8e:8f:8f: ff:37:e9:d5:7a:7c:5c:69:1b:96:3d:fd:28:a6:8e: 13:f6:d1:93:2c:09:ff:82:41:63:f3:45:fc:16:a6: 27:7f:45:18:a6:ab:79:ab:50:be:d4:b2:b4:d1:8e: e2:6e:aa:b9:ae:f7:24:1c:74:06:40:68:30:20:d1: e1:c9:a2:16:b9:07:72:f6:04:dc:7a:81:86:f5:eb: 75:50:01:2f:17:dc:50:9a:90:3b:33:d9:ad:31:b6: e5:29:ba:32:62:42:be:1e:24:69:68:60:9c:06:af: 99:3f:85:b6:5f:6f:b9:1c:c3:10:2d:f2:96:64:90: dd:91:1c:02:7c:ad:75:66:9f:0c:62:41:40:20:38: bd:1a:13:f1:79:c5:a3:62:8b:b6:4a:6a:a8:df:56: 9f:ef:2e:4e:fa:5f:38:2e:de:4b:39:9a:02:ec:35: d5:b6:10:99:3e:f1:43:04:62:d7:df:c5:ed:10:4d: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A0:EF:BF:87:4A:43:51:67:15:57:C6:C3:E1:D9:CC:32:09:7E:70 X509v3 Authority Key Identifier: keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:94:47:8f:87:20:33:fc:cb:9d:73:19:ad:b4:2d:73:f5:4e: ed:89:fa:ea:04:f7:3b:ac:af:d5:d3:7f:96:49:1d:b5:10:b8: 3e:a5:9d:96:e3:48:e1:c1:9c:49:6b:37:f2:e0:7e:cb:8c:65: a9:60:35:41:dd:47:f0:41:ed:92:f8:b3:39:a3:ed:f5:4c:f6: a4:d8:d9:c7:81:50:b3:59:b3:c7:93:52:d7:b7:df:18:8e:66: bd:17:cd:e3:81:86:5a:10:a0:1a:cf:15:fc:2c:e4:31:6e:c7: b1:16:0d:ea:8c:ce:93:22:9b:e8:f7:24:25:23:05:0b:ae:b1: 5f:69:30:4c:e0:b9:2e:0a:53:ee:3b:3c:cb:1b:13:e9:7d:56: 7e:6e:51:f3:cd:2d:77:ef:0c:77:b9:38:73:87:41:05:e6:4c: 14:47:fc:0e:0a:f2:b6:86:c7:ab:e3:8a:1a:0a:93:ca:48:1f: bc:7d:42:22:6f:30:b4:e9:ac:93:46:00:eb:52:d1:d9:4f:35: 9a:ab:51:58:46:ab:43:50:00:26:e1:d0:9a:d4:c9:3e:00:a0: 07:5a:17:a8:4d:91:95:26:23:05:62:bb:36:77:6c:bd:39:11: 67:c6:49:02:7b:d2:a4:1c:4f:6b:8a:2c:ca:6a:e9:db:af:89: da:68:36:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJBMEMxMTAvBgNVBAUTKENENUNENTkwOTEzRTRGODlBRjNEMUNBNkUyOUZBQjND MDY3RDIxNEUwHhcNMjUwOTE3MDQ1ODM4WhcNMjUwOTI0MDQ1ODM4WjAYMRYwFAYD VQQDEw02OGNhM2ZmZS1hODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VYg0JdLleDG1FZs3+2N1rL9BImcwihztcDdRxcc12AEpX2SCmwglOSOgay8 mGtoC9gelB2Tgev4Au4OdX0Sur5DFb61fTGOj4//N+nVenxcaRuWPf0opo4T9tGT LAn/gkFj80X8FqYnf0UYpqt5q1C+1LK00Y7ibqq5rvckHHQGQGgwINHhyaIWuQdy 9gTceoGG9et1UAEvF9xQmpA7M9mtMbblKboyYkK+HiRpaGCcBq+ZP4W2X2+5HMMQ LfKWZJDdkRwCfK11Zp8MYkFAIDi9GhPxecWjYou2Smqo31af7y5O+l84Lt5LOZoC 7DXVthCZPvFDBGLX38XtEE0YNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWg77+H SkNRZxVXxsPh2cwyCX5wMB8GA1UdIwQYMBaAFM1c1ZCRPk+Jrz0cpuKfqzwGfSFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkEwQy80MTUzMUIwQ0FF Q0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0bXZQUnltNHAtclBBWjlJ VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWelZrSkUtVDRtdlBSeW00cC1yUEFaOUlVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkEwQy80MTUzMUIwQ0FFQ0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0 bXZQUnltNHAtclBBWjlJVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/lEePhyAz/MudcxmttC1z9U7tifrqBPc7rK/V03+WSR21ELg+pZ2W 40jhwZxJazfy4H7LjGWpYDVB3UfwQe2S+LM5o+31TPak2NnHgVCzWbPHk1LXt98Y jma9F83jgYZaEKAazxX8LOQxbsexFg3qjM6TIpvo9yQlIwULrrFfaTBM4LkuClPu OzzLGxPpfVZ+blHzzS137wx3uThzh0EF5kwUR/wOCvK2hser44oaCpPKSB+8fUIi bzC06ayTRgDrUtHZTzWaq1FYRqtDUAAm4dCa1Mk+AKAHWheoTZGVJiMFYrs2d2y9 ORFnxkkCe9KkHE9riizKaunbr4naaDZ+ -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:16 2025 by rpki-client