$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: b6oLHPieaFtqnBENgV5D5D29j3rIDoAgA2qELKwzALs= Subject key identifier: 3E:05:66:49:CD:1F:02:15:B3:6C:DB:AA:3A:B3:F1:2E:AC:7C:5E:1F Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: A0 Signing time: Sat 09 Aug 2025 06:41:26 +0000 Manifest this update: Sat 09 Aug 2025 06:41:25 +0000 Manifest next update: Sat 16 Aug 2025 06:41:25 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: LoVs/VT4PwZUF5SKtLJ/E2rSw0dLN+sB81WRuG87oSg=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Aug 9 06:41:25 2025 GMT Not After : Aug 16 06:41:25 2025 GMT Subject: CN=6896ed96-6672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:3d:02:d7:f6:be:a4:d8:7e:dd:8c:2d:19: f0:ab:f4:80:06:ea:41:18:46:82:29:dd:7b:8a:e2: a6:5c:a6:4c:89:1b:81:e9:20:1b:89:65:9a:23:ae: f6:83:ab:e1:a3:da:1e:1c:81:06:e2:9c:84:a6:aa: 56:3f:a7:08:a5:d5:c5:d9:d5:04:82:b6:41:be:98: 43:b6:a3:03:6a:b2:87:63:75:67:60:cf:c3:66:3a: 2e:54:ec:1e:55:8a:f5:2b:c5:cb:47:ff:a6:4b:83: 53:aa:97:c2:05:95:4e:fc:09:6e:07:a5:ad:11:b9: 47:38:e0:59:79:71:4b:66:35:aa:f0:04:31:56:81: ff:2a:e7:cd:ff:67:f7:b3:71:3e:84:dd:9e:28:88: 45:ea:f5:81:04:86:40:0e:c3:00:31:9f:32:5a:d9: bf:88:9b:12:c9:66:cf:38:fd:61:36:e3:f0:f2:69: 3b:0a:d2:2b:0d:f0:5a:1b:a2:85:4c:14:7c:f3:9b: 37:b8:c5:75:7b:a9:7c:47:8d:3c:d0:da:e9:9a:68: ad:06:92:a0:b3:8e:63:0b:42:e2:21:6a:1c:c2:3a: c9:9c:73:b1:21:50:86:7f:6e:ca:85:87:f2:10:5e: 79:8a:bc:d9:37:e0:fd:08:cc:7f:60:36:bb:8c:f9: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:66:49:CD:1F:02:15:B3:6C:DB:AA:3A:B3:F1:2E:AC:7C:5E:1F X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ec:26:b1:1f:e4:40:83:d4:e4:8d:2f:37:46:c5:01:77:f7: c3:52:21:44:be:71:77:8b:55:47:16:19:44:0a:79:38:2e:39: f2:fa:e8:c7:d7:96:f9:a9:48:61:7b:ab:63:db:cb:bf:9f:95: dd:a8:fb:82:d4:03:58:bb:61:a2:df:f2:73:a0:e9:7e:73:28: be:9f:cf:ff:5d:8a:6a:39:98:4d:8e:fe:5e:54:f9:b7:47:22: 8a:25:c2:43:03:d8:28:a5:b5:1b:9d:13:e4:cb:fd:56:fa:9d: 9b:90:ad:6c:37:a8:64:a5:eb:0a:f0:6f:29:e9:01:6c:62:e6: 69:43:d7:c9:57:e4:ac:f0:4d:e2:4c:a1:57:b1:d2:4b:f8:6e: 75:99:37:ff:04:fc:f7:77:9c:b5:50:b7:33:2b:9c:42:92:e0: 36:bd:c7:60:07:74:d3:21:9d:19:89:bc:75:85:dd:b9:eb:2c: 05:e7:c1:a5:0f:db:cd:a6:97:a4:0d:f0:84:f9:11:d4:59:20: f8:5c:8d:02:19:24:b3:4f:08:f9:a8:d7:a8:f8:88:42:03:b8: 13:01:8b:9d:73:58:9a:49:66:a5:ef:4e:f9:a0:78:a3:42:44: b0:55:21:20:4f:cc:e5:3a:00:d4:83:7d:77:b1:69:2e:3c:23: 5d:ff:fe:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjUwODA5MDY0MTI1WhcNMjUwODE2MDY0MTI1WjAYMRYwFAYD VQQDEw02ODk2ZWQ5Ni02NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF89Atf2vqTYft2MLRnwq/SABupBGEaCKd17iuKmXKZMiRuB6SAbiWWaI672 g6vho9oeHIEG4pyEpqpWP6cIpdXF2dUEgrZBvphDtqMDarKHY3VnYM/DZjouVOwe VYr1K8XLR/+mS4NTqpfCBZVO/AluB6WtEblHOOBZeXFLZjWq8AQxVoH/KufN/2f3 s3E+hN2eKIhF6vWBBIZADsMAMZ8yWtm/iJsSyWbPOP1hNuPw8mk7CtIrDfBaG6KF TBR885s3uMV1e6l8R4080NrpmmitBpKgs45jC0LiIWocwjrJnHOxIVCGf27KhYfy EF55irzZN+D9CMx/YDa7jPmstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4FZknN HwIVs2zbqjqz8S6sfF4fMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH7CaxH+RAg9TkjS83RsUBd/fDUiFEvnF3i1VHFhlECnk4Ljny+ujH 15b5qUhhe6tj28u/n5XdqPuC1ANYu2Gi3/JzoOl+cyi+n8//XYpqOZhNjv5eVPm3 RyKKJcJDA9gopbUbnRPky/1W+p2bkK1sN6hkpesK8G8p6QFsYuZpQ9fJV+Ss8E3i TKFXsdJL+G51mTf/BPz3d5y1ULczK5xCkuA2vcdgB3TTIZ0Zibx1hd256ywF58Gl D9vNppekDfCE+RHUWSD4XI0CGSSzTwj5qNeo+IhCA7gTAYudc1iaSWal7075oHij QkSwVSEgT8zlOgDUg313sWkuPCNd//6c -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:40 2025 by rpki-client