$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: 8H4T+EQoM0S0NnJSQtD5YwuywfoZURu+qf+SW4AT+uQ= Subject key identifier: 5D:EE:74:AC:B5:87:AB:2E:D4:8A:47:99:79:85:E0:C8:E2:B5:44:4C Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B30 Signing time: Fri 08 Aug 2025 19:26:54 +0000 Manifest this update: Fri 08 Aug 2025 19:26:53 +0000 Manifest next update: Fri 15 Aug 2025 19:26:53 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: cVkN1o/DBCU1AuzYWkNRjpPwwK73MLlSc6Wc0KgIZsk=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: J/8oDeRELdGOcwKCSIyZI2ucZRyx8ILa8bbFd/o79oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Aug 8 19:26:53 2025 GMT Not After : Aug 15 19:26:53 2025 GMT Subject: CN=68964f7e-9c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:f5:72:97:22:1f:05:09:2f:c6:60:05:7b: f5:5e:9e:0b:94:0e:1d:16:aa:55:17:40:e8:b2:f0: 9d:cc:16:4b:0d:5b:22:b2:b6:f1:bf:21:f3:54:e0: be:e5:a0:91:53:92:43:af:bf:cb:2b:54:fe:3d:17: ad:b3:a9:b9:65:4a:a1:ff:94:89:31:c1:9e:6a:2c: c6:a6:10:3a:d3:b9:40:2c:1b:1d:9e:6b:39:d4:7a: 55:25:d2:b1:ce:68:6e:4f:66:46:58:6f:37:37:90: 6f:8c:aa:8f:2a:2e:bf:20:0b:33:7e:95:56:15:86: 7e:d9:88:26:36:0e:a1:19:03:9c:b6:95:1e:5c:79: 3b:4c:7e:8f:dc:9b:eb:70:80:23:86:43:c8:4a:f8: 61:6b:be:b8:84:13:e4:bc:95:2b:a0:dc:a5:92:83: 4a:d9:2d:8a:98:c4:60:15:e1:7d:af:72:87:5a:02: 10:fb:16:3b:b3:86:bf:ad:8c:94:b6:85:f4:86:9c: be:ae:46:0c:de:b4:42:26:17:e5:e7:93:e9:b6:cc: 7b:6d:50:f9:a5:3d:89:0d:fc:6d:f3:cc:e1:4f:b9: 39:1d:e0:4b:09:7a:68:23:25:86:09:a7:22:56:e6: fd:bd:26:c1:d9:fe:d0:12:a5:06:3a:61:8f:c3:f9: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EE:74:AC:B5:87:AB:2E:D4:8A:47:99:79:85:E0:C8:E2:B5:44:4C X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:28:39:ef:5c:cb:5c:5a:7b:28:60:3f:9d:95:fa:36:94:c6: cb:57:8e:a1:c2:88:71:9c:f4:5c:df:1a:0f:39:53:a8:7a:29: 9d:68:eb:63:f7:dc:54:e9:1b:4b:0f:c4:e4:9c:a1:c3:c4:a3: 05:65:c5:7d:77:2b:d9:71:cf:6d:e6:75:6d:fb:9c:7e:03:4b: 40:c8:12:c4:6f:6b:97:3a:b7:02:19:11:1f:bc:cc:48:bf:b8: cf:e9:91:b2:28:2a:5b:82:59:3d:f2:65:c6:ec:7c:73:7b:8d: 2a:bb:32:15:e8:16:75:c4:7d:71:ae:6d:cd:40:25:f6:b1:28: 7d:3d:f1:a3:ff:09:aa:c5:69:eb:d7:3c:72:d9:81:51:c6:fc: 87:53:31:62:dd:be:50:42:9b:49:86:c0:d9:0a:d2:12:1e:85: f2:9a:a0:7c:e5:24:28:75:0d:73:26:39:43:8b:01:6a:47:fc: bc:db:f8:ca:07:e5:66:ac:32:f3:b0:e2:35:81:77:ae:f5:85: fa:f9:67:d8:97:ad:12:e4:e9:fa:b2:05:aa:19:7d:a8:09:d9: 67:f5:5a:ee:dc:71:ed:c8:33:2b:b0:8b:0a:44:bb:9b:29:fe: 94:c1:51:6b:75:cb:70:40:2e:c0:c7:d1:03:95:54:13:c6:11: 1e:fc:e2:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUwODA4MTkyNjUzWhcNMjUwODE1MTkyNjUzWjAYMRYwFAYD VQQDEw02ODk2NGY3ZS05YzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxX1cpciHwUJL8ZgBXv1Xp4LlA4dFqpVF0DosvCdzBZLDVsisrbxvyHzVOC+ 5aCRU5JDr7/LK1T+PRets6m5ZUqh/5SJMcGeaizGphA607lALBsdnms51HpVJdKx zmhuT2ZGWG83N5BvjKqPKi6/IAszfpVWFYZ+2YgmNg6hGQOctpUeXHk7TH6P3Jvr cIAjhkPISvhha764hBPkvJUroNylkoNK2S2KmMRgFeF9r3KHWgIQ+xY7s4a/rYyU toX0hpy+rkYM3rRCJhfl55Pptsx7bVD5pT2JDfxt88zhT7k5HeBLCXpoIyWGCaci Vub9vSbB2f7QEqUGOmGPw/l+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3udKy1 h6su1IpHmXmF4MjitURMMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6KDnvXMtcWnsoYD+dlfo2lMbLV46hwohxnPRc3xoPOVOoeimdaOtj 99xU6RtLD8TknKHDxKMFZcV9dyvZcc9t5nVt+5x+A0tAyBLEb2uXOrcCGREfvMxI v7jP6ZGyKCpbglk98mXG7Hxze40quzIV6BZ1xH1xrm3NQCX2sSh9PfGj/wmqxWnr 1zxy2YFRxvyHUzFi3b5QQptJhsDZCtISHoXymqB85SQodQ1zJjlDiwFqR/y82/jK B+VmrDLzsOI1gXeu9YX6+WfYl60S5On6sgWqGX2oCdln9Vru3HHtyDMrsIsKRLub Kf6UwVFrdctwQC7Ax9EDlVQTxhEe/OL1 -----END CERTIFICATE-----Generated at Sun Aug 10 18:17:54 2025 by rpki-client