$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft File: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft (raw, json) Hash identifier: o2XJEh1DLcB7tWvvl0VYzWqGvAUT0Oib7iEaf/mE/dU= Subject key identifier: 85:7D:A4:7E:CF:28:66:D8:20:32:AC:41:5B:67:14:7D:67:C5:8F:63 Authority key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 Certificate issuer: /CN=A91410C5/serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft Manifest number: 15 Signing time: Thu 07 Aug 2025 08:38:39 +0000 Manifest this update: Thu 07 Aug 2025 08:38:38 +0000 Manifest next update: Thu 14 Aug 2025 08:38:38 +0000 Files and hashes: 1: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl (hash: Er5vHbXD78Ws+nNhaelCBpVkRGXegCuMhBqO59BGqeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Validity Not Before: Aug 7 08:38:38 2025 GMT Not After : Aug 14 08:38:38 2025 GMT Subject: CN=6894660e-c26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:e6:40:4a:7d:4a:3d:a6:70:5f:cf:99:e6: cd:f3:33:a5:95:51:c6:2e:d2:be:6a:b1:0c:ad:e5: 63:e5:73:68:5f:84:ae:42:7e:46:52:91:bf:77:7c: 37:9f:a7:d3:08:df:ee:05:dc:d4:6d:e2:92:84:98: dd:ad:d2:0e:7c:e7:4b:b3:51:36:e9:f7:5e:10:3c: 2a:3e:52:2c:4f:a5:dc:df:d8:ed:ad:03:1b:31:dd: 5d:63:aa:c8:35:7a:be:b7:0f:5f:1d:b8:0e:c5:a3: ce:21:c8:55:18:4a:4e:ef:9c:41:dd:1b:76:d6:3a: d0:b7:0e:ed:f4:fc:c4:69:0f:c9:42:b0:3a:b0:ba: c4:9f:ac:5e:3d:7b:8f:0c:5d:57:46:65:ab:5a:a1: 92:c2:55:f3:7e:9a:68:fa:16:ec:f6:f3:a9:b8:ba: 1c:5a:34:85:2b:2b:5f:d6:62:88:93:31:8c:3a:29: 41:a7:7a:b4:b1:b5:c2:fb:65:14:48:68:d2:7b:85: f8:a2:be:72:db:03:4f:34:f7:bc:28:a0:3e:f3:98: 41:c5:23:c7:32:7a:44:e5:6f:7c:c4:c5:08:ee:a3: 8a:21:25:dd:98:ab:38:31:f0:36:e5:0e:1b:5f:a8: 86:d5:41:1f:3e:00:37:70:85:53:0b:5c:72:a1:ea: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7D:A4:7E:CF:28:66:D8:20:32:AC:41:5B:67:14:7D:67:C5:8F:63 X509v3 Authority Key Identifier: keyid:64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:38:80:92:86:47:3c:9c:1b:2b:2d:51:f2:6d:c8:19:0d:3c: d1:0e:c8:f1:93:78:dc:b8:e6:c5:49:6e:63:b8:d1:cb:ec:c8: 58:f2:cb:73:71:2c:6e:3c:d1:5f:d4:80:54:2c:51:2d:0d:81: cb:b1:16:e3:ff:c3:83:79:87:63:dc:2e:dc:10:1d:e3:ef:bf: c5:fa:9d:b2:30:00:40:c8:29:f7:37:95:42:8f:ae:ee:bb:59: 32:0a:b0:07:f8:88:c3:45:55:5f:bc:86:fc:15:4f:04:a1:11: bb:b8:b8:a6:81:f0:12:7e:99:d9:21:87:cb:f5:34:ce:e7:ec: 5c:c6:50:53:ae:00:d2:e4:66:9e:32:8b:17:dd:c9:32:00:f9: c5:5b:e0:23:d5:20:2d:9f:23:12:cc:27:af:38:13:39:1a:29: d8:db:24:f2:1b:ef:0d:66:8a:ba:71:65:29:0f:80:25:5c:32: 22:ae:6c:ea:06:63:3c:49:76:df:9f:91:1e:18:bf:24:9f:6d: 65:bb:13:f3:fa:1f:b9:8c:b5:b4:88:07:e4:05:6f:ee:6d:8c: 94:1e:4f:9f:0d:1e:1e:b4:7d:18:cd:e1:fc:c0:03:1a:a9:3e: aa:d7:f5:be:27:dd:65:06:56:79:f5:e2:c9:90:7d:4a:cf:ed: 47:d8:17:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTBDNTExMC8GA1UEBRMoNjQ2N0U5MjZDMjE0NEVDRDBGMjc0OEY4NDkzMjhGODVG MDI4QUU5NDAeFw0yNTA4MDcwODM4MzhaFw0yNTA4MTQwODM4MzhaMBgxFjAUBgNV BAMTDTY4OTQ2NjBlLWMyNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFBOZASn1KPaZwX8+Z5s3zM6WVUcYu0r5qsQyt5WPlc2hfhK5CfkZSkb93fDef p9MI3+4F3NRt4pKEmN2t0g5850uzUTbp914QPCo+UixPpdzf2O2tAxsx3V1jqsg1 er63D18duA7Fo84hyFUYSk7vnEHdG3bWOtC3Du30/MRpD8lCsDqwusSfrF49e48M XVdGZataoZLCVfN+mmj6Fuz286m4uhxaNIUrK1/WYoiTMYw6KUGnerSxtcL7ZRRI aNJ7hfiivnLbA08097wooD7zmEHFI8cyekTlb3zExQjuo4ohJd2Yqzgx8DblDhtf qIbVQR8+ADdwhVMLXHKh6q9zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhX2kfs8o ZtggMqxBW2cUfWfFj2MwHwYDVR0jBBgwFoAUZGfpJsIUTs0PJ0j4STKPhfAorpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0RCMEFFNDM2NTcy RTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMwUEowajRTVEtQaGZBb3Jw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkdmcEpzSVVUczBQSjBqNFNUS1BoZkFvcnBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MEM1L0RCMEFFNDM2NTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMw UEowajRTVEtQaGZBb3JwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHk4gJKGRzycGystUfJtyBkNPNEOyPGTeNy45sVJbmO40cvsyFjyy3Nx LG480V/UgFQsUS0NgcuxFuP/w4N5h2PcLtwQHePvv8X6nbIwAEDIKfc3lUKPru67 WTIKsAf4iMNFVV+8hvwVTwShEbu4uKaB8BJ+mdkhh8v1NM7n7FzGUFOuANLkZp4y ixfdyTIA+cVb4CPVIC2fIxLMJ684EzkaKdjbJPIb7w1mirpxZSkPgCVcMiKubOoG YzxJdt+fkR4YvySfbWW7E/P6H7mMtbSIB+QFb+5tjJQeT58NHh60fRjN4fzAAxqp PqrX9b4n3WUGVnn14smQfUrP7UfYFy8= -----END CERTIFICATE-----Generated at Sat Aug 9 02:52:07 2025 by rpki-client