$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: BIzVwUyatnvw7uOukzv9tf0adta3HZuxROCgvkEdcM4= Subject key identifier: A8:4A:4B:B8:96:0B:31:65:D4:FE:E5:C4:63:4A:32:B8:75:4F:D2:5A Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 09E1 Signing time: Fri 08 Aug 2025 20:12:41 +0000 Manifest this update: Fri 08 Aug 2025 20:12:40 +0000 Manifest next update: Fri 15 Aug 2025 20:12:40 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: /blBeoty3rzKutADhbmnKa0/tbMEtK8gpG5YGXMDllo=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: Aug 8 20:12:40 2025 GMT Not After : Aug 15 20:12:40 2025 GMT Subject: CN=68965a39-cc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:01:71:be:5e:99:31:3c:cc:e1:f9:03:0e: 50:63:b3:1b:47:e8:32:d3:bc:6c:07:91:7f:f4:39: a4:d4:a2:15:28:0b:5b:22:32:b8:db:6a:d6:c8:e4: 37:2c:f9:ec:04:09:3e:73:c5:9e:2e:5d:cc:8c:e5: 3c:50:cd:dc:1b:84:d7:76:d7:68:83:eb:8b:81:58: 96:e2:03:d4:fc:15:0f:4f:b0:e4:98:58:3a:e9:ee: 19:f1:5b:be:5f:c0:b4:59:44:70:9f:48:ee:a6:54: 98:0d:72:83:a4:7f:06:b6:df:7e:65:ab:9a:e9:01: f2:b2:8e:47:f5:ee:8d:df:35:03:da:01:b5:62:0d: 49:bf:4a:06:1f:36:c7:3d:02:8c:1a:b7:d5:a8:dd: 3b:15:a9:b1:1d:97:73:ea:1f:68:21:4e:22:1f:f7: 79:43:d1:c9:df:42:2f:50:9b:11:9c:8a:4d:ec:39: 52:04:c5:63:6a:a1:27:38:81:35:0a:ad:fa:25:d2: 26:98:0f:dd:a9:66:f6:04:c0:cf:ab:36:ee:34:89: 42:9d:13:98:e2:1c:96:68:f4:1e:5c:ed:a8:36:0e: 0b:a6:4b:28:c4:52:37:93:41:c1:b4:3d:b0:45:43: f3:35:8d:40:72:5d:da:a4:d7:3d:19:7c:0f:ef:ab: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:4B:B8:96:0B:31:65:D4:FE:E5:C4:63:4A:32:B8:75:4F:D2:5A X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a6:01:45:b4:4c:b2:50:d4:04:78:5c:4c:0c:c0:52:99:19: ab:91:ca:69:96:02:cf:bb:56:0b:dd:24:89:47:74:f5:f2:83: 2a:24:0b:02:2f:0e:02:cd:f5:65:d2:6e:10:47:ed:89:f6:da: 62:5c:55:f8:af:86:ed:2c:a5:40:e1:70:ae:4b:13:2d:18:4d: 4a:9f:b9:b4:ad:df:66:24:aa:30:dd:1d:69:5c:50:79:19:df: 0f:5a:c4:c6:05:8a:9b:84:d1:17:46:29:a1:8a:79:ff:1f:14: c5:36:43:33:5b:26:5b:7c:35:03:da:5d:fa:eb:f7:69:20:f1: f8:5e:30:6f:79:92:d1:f9:03:ba:04:51:6f:0a:09:7f:be:d4: a6:59:ad:83:80:c2:bc:a4:a7:4a:1b:37:79:5d:05:c8:9e:36: 06:f4:bb:91:c7:8a:b7:26:22:da:42:a3:a2:68:02:2e:cd:d9: 5f:bc:2f:80:a8:ef:b9:e3:e5:3e:20:68:dc:65:54:24:04:d1: d7:3b:34:29:c3:18:b9:4f:a0:19:6d:4b:4f:2c:70:e5:66:87: 93:bb:98:10:98:c9:62:01:f5:a6:d5:fe:08:f9:6c:ae:5a:cf: f2:91:c8:c6:0b:2d:db:bd:e7:47:90:c2:05:54:bd:32:b9:1c: cd:68:1e:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjUwODA4MjAxMjQwWhcNMjUwODE1MjAxMjQwWjAYMRYwFAYD VQQDEw02ODk2NWEzOS1jYzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyswBcb5emTE8zOH5Aw5QY7MbR+gy07xsB5F/9Dmk1KIVKAtbIjK422rWyOQ3 LPnsBAk+c8WeLl3MjOU8UM3cG4TXdtdog+uLgViW4gPU/BUPT7DkmFg66e4Z8Vu+ X8C0WURwn0juplSYDXKDpH8Gtt9+Zaua6QHyso5H9e6N3zUD2gG1Yg1Jv0oGHzbH PQKMGrfVqN07FamxHZdz6h9oIU4iH/d5Q9HJ30IvUJsRnIpN7DlSBMVjaqEnOIE1 Cq36JdImmA/dqWb2BMDPqzbuNIlCnROY4hyWaPQeXO2oNg4LpksoxFI3k0HBtD2w RUPzNY1Acl3apNc9GXwP76s+SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhKS7iW CzFl1P7lxGNKMrh1T9JaMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwpgFFtEyyUNQEeFxMDMBSmRmrkcpplgLPu1YL3SSJR3T18oMqJAsC Lw4CzfVl0m4QR+2J9tpiXFX4r4btLKVA4XCuSxMtGE1Kn7m0rd9mJKow3R1pXFB5 Gd8PWsTGBYqbhNEXRimhinn/HxTFNkMzWyZbfDUD2l366/dpIPH4XjBveZLR+QO6 BFFvCgl/vtSmWa2DgMK8pKdKGzd5XQXInjYG9LuRx4q3JiLaQqOiaAIuzdlfvC+A qO+54+U+IGjcZVQkBNHXOzQpwxi5T6AZbUtPLHDlZoeTu5gQmMliAfWm1f4I+Wyu Ws/ykcjGCy3bvedHkMIFVL0yuRzNaB40 -----END CERTIFICATE-----Generated at Sun Aug 10 04:48:04 2025 by rpki-client