$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json) Hash identifier: 7HEMxIXGknMvRArRmf6/QELSjkrG9cvA54X6GjMfl7s= Subject key identifier: 31:B7:98:61:0A:58:7A:5B:A1:4E:04:1A:16:60:C0:A4:53:82:88:F4 Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft Manifest number: 02 Signing time: Wed 17 Sep 2025 07:51:23 +0000 Manifest this update: Wed 17 Sep 2025 07:51:23 +0000 Manifest next update: Wed 24 Sep 2025 07:51:23 +0000 Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: LfFzhjwnn5wVOGv0zxvx0irChV2H8VjRxY9T79Z854A=) 2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ae013xkxRm4STP9eAV3GvXY0KERGUolzleZ5rTQwKpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Validity Not Before: Sep 17 07:51:23 2025 GMT Not After : Sep 24 07:51:23 2025 GMT Subject: CN=68ca687b-f05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:d7:70:85:d7:c0:ed:2a:dd:c9:d4:84:2d: 0c:2f:95:7f:32:d4:29:66:40:0d:03:e2:fe:7e:d3: 98:9b:be:de:cf:f6:a5:15:3e:ba:e1:e8:7f:19:66: 98:03:bc:4e:36:15:cc:93:2c:19:b4:e8:b7:b8:83: 83:00:ae:60:77:87:c1:af:b9:29:94:89:bc:58:b9: 1b:d1:ef:4c:6b:91:dd:fa:d2:c8:80:74:85:ba:4b: 1f:b8:1a:e8:6b:90:e4:8d:43:54:39:5f:39:42:d9: 3d:0f:5c:1d:78:f0:42:bd:9d:b5:27:9b:5c:4b:ad: 18:0b:d6:43:2b:c5:e8:9e:87:41:cc:56:de:be:11: 8e:9f:31:a5:06:c4:ae:b0:80:cc:27:14:13:b6:9e: df:2b:a1:af:99:33:53:a8:5a:7e:b3:c5:70:85:0f: 68:7c:38:1d:12:06:66:f5:50:95:4f:35:f4:d9:8d: 30:75:b5:ca:a9:df:43:04:ce:7a:65:34:ab:ee:ac: 4d:ca:9a:30:22:4f:90:34:f9:e7:6d:49:4f:6e:32: 3e:e3:93:9f:8f:8a:02:6a:21:aa:f6:cc:36:6a:ad: 34:4c:e1:3f:f5:c2:86:e6:d9:fa:5e:91:4d:e5:99: ad:58:7f:f4:99:c9:a9:83:9b:33:dc:16:c1:cd:be: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:98:61:0A:58:7A:5B:A1:4E:04:1A:16:60:C0:A4:53:82:88:F4 X509v3 Authority Key Identifier: keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:13:55:c7:9b:4f:5e:8f:ad:80:9b:f9:a8:77:0a:40:37:72: 4b:af:49:d0:17:c8:2c:fa:48:38:f0:40:9e:cd:9e:71:d1:9e: 83:2e:8f:76:bf:71:9f:41:04:c6:0f:d0:f6:9b:93:85:f0:05: f6:cf:05:75:61:3e:9d:5d:2a:00:4d:8b:44:2f:11:97:6a:0c: 67:06:bc:28:10:b0:9f:63:a2:25:76:80:5d:e4:06:83:30:57: 73:2b:26:75:ef:fb:7d:3c:fe:8c:25:ec:bd:48:85:09:ff:c3: d1:54:ba:af:a3:49:8c:2a:66:a8:90:20:07:73:bd:57:fa:db: f3:82:c9:92:30:54:f5:06:13:4e:db:32:7a:0a:22:3c:28:81: e5:df:08:2d:4a:d3:a5:41:67:56:8b:7c:0d:0c:68:33:14:29: 1e:fa:c6:21:a6:4c:15:a4:29:4a:2f:49:4b:96:76:bc:a8:46: a2:dc:a7:ba:3b:99:71:89:33:e8:1f:f8:2f:2a:3f:d0:e9:47: 76:f9:1f:f3:51:08:52:d7:bd:68:55:db:77:1a:ed:e1:13:45: 75:44:19:bd:b5:cd:8f:d2:e0:33:f7:b2:6f:93:39:fb:ed:b5: 86:f2:7b:a9:2b:be:ff:ea:8e:da:31:5a:d3:30:7c:5e:ef:90: e8:87:91:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjE0RDExMC8GA1UEBRMoNjQzNzdFODcxODY2REQzNzRFQzU5RTIzODNCQTEwRkE2 QTMxRkZGRDAeFw0yNTA5MTcwNzUxMjNaFw0yNTA5MjQwNzUxMjNaMBgxFjAUBgNV BAMTDTY4Y2E2ODdiLWYwNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSr9dwhdfA7SrdydSELQwvlX8y1ClmQA0D4v5+05ibvt7P9qUVPrrh6H8ZZpgD vE42FcyTLBm06Le4g4MArmB3h8GvuSmUibxYuRvR70xrkd360siAdIW6Sx+4Guhr kOSNQ1Q5XzlC2T0PXB148EK9nbUnm1xLrRgL1kMrxeieh0HMVt6+EY6fMaUGxK6w gMwnFBO2nt8roa+ZM1OoWn6zxXCFD2h8OB0SBmb1UJVPNfTZjTB1tcqp30MEznpl NKvurE3KmjAiT5A0+edtSU9uMj7jk5+PigJqIar2zDZqrTRM4T/1wobm2fpekU3l ma1Yf/SZyamDmzPcFsHNvpqTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMbeYYQpY eluhTgQaFmDApFOCiPQwHwYDVR0jBBgwFoAUZDd+hxhm3TdOxZ4jg7oQ+mox//0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTRELzkzNTJDRDVFOTM5 QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9f MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRkLWh4aG0zVGRPeFo0amc3b1EtbW94X18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MTRELzkzNTJDRDVFOTM5QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1Rk T3haNGpnN29RLW1veF9fMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYTVcebT16PrYCb+ah3CkA3ckuvSdAXyCz6SDjwQJ7NnnHRnoMuj3a/ cZ9BBMYP0Pabk4XwBfbPBXVhPp1dKgBNi0QvEZdqDGcGvCgQsJ9joiV2gF3kBoMw V3MrJnXv+308/owl7L1IhQn/w9FUuq+jSYwqZqiQIAdzvVf62/OCyZIwVPUGE07b MnoKIjwogeXfCC1K06VBZ1aLfA0MaDMUKR76xiGmTBWkKUovSUuWdryoRqLcp7o7 mXGJM+gf+C8qP9DpR3b5H/NRCFLXvWhV23ca7eETRXVEGb21zY/S4DP3sm+TOfvt tYbye6krvv/qjtoxWtMwfF7vkOiHkT4= -----END CERTIFICATE-----Generated at Fri Sep 19 03:30:31 2025 by rpki-client