$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json) Hash identifier: g7XRAXKvqQtGG3pkzPxbHf4PMeWeq9aFETo+uARnS8A= Subject key identifier: 4C:0E:56:1B:4E:66:56:92:B8:93:EE:64:08:08:49:4F:26:21:FB:18 Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft Manifest number: 10 Signing time: Sat 09 Aug 2025 08:35:40 +0000 Manifest this update: Sat 09 Aug 2025 08:35:39 +0000 Manifest next update: Sat 16 Aug 2025 08:35:39 +0000 Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: Ml4X2olyhcJOygpeVtpxbW7Y0xVHsGDJ8gxFqh2ycZg=) 2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: 9UZrURL/5cYm+3q79UbhWbJw8l3P1ZGycupb15ORpsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Aug 9 08:35:39 2025 GMT Not After : Aug 16 08:35:39 2025 GMT Subject: CN=6897085b-91e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:74:32:e0:62:66:58:d8:ef:f3:d2:4e:ef: ff:c3:2a:11:8d:18:74:7b:e1:37:32:f3:d6:6c:3c: ef:47:95:31:68:9a:03:6f:62:17:68:48:9c:b8:26: 07:1c:86:b0:66:ac:8b:0a:57:1d:d4:43:73:36:78: 3a:99:48:4a:d2:73:31:25:e4:a0:83:86:f2:aa:db: 76:7b:56:18:e6:40:62:5b:2f:ba:bf:cf:4f:af:98: 7f:1d:3d:a3:c4:1d:cd:09:20:b0:14:06:bb:94:64: 55:7a:b8:e6:d8:2d:2d:46:f8:37:50:47:66:56:e5: b7:5d:4f:fd:5d:b3:3a:97:2d:41:05:a2:79:5a:cc: 74:5e:25:31:29:45:dc:eb:86:9a:fe:4e:b8:5d:f1: e7:79:e6:ff:57:b1:48:00:ae:5f:17:2d:6c:5f:9a: 22:d9:95:90:f0:23:ed:9b:0b:53:27:58:9e:8a:53: 64:5e:58:92:04:a2:be:4f:9a:b5:fa:b2:f7:f9:23: 9f:f4:77:9d:08:5f:17:93:1a:91:4d:9a:85:ef:28: f0:97:f2:19:2f:2d:f1:6b:ab:ac:74:63:85:68:5c: 57:02:43:00:2e:df:b7:a7:1d:fb:1d:7a:59:5b:7d: e1:1a:33:12:a7:5d:dd:75:c8:3c:05:be:ec:dd:b3: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0E:56:1B:4E:66:56:92:B8:93:EE:64:08:08:49:4F:26:21:FB:18 X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f5:76:d4:2b:f1:89:24:17:ef:8c:0d:38:93:41:6a:68:e4: e0:ad:a6:8e:62:b4:0e:7b:17:53:e0:6f:49:57:37:fe:fe:d8: 3b:be:48:bd:af:36:70:11:51:1f:d5:a9:99:e9:a1:7a:ee:14: 0b:cc:49:8e:d3:81:00:ba:ec:9e:8d:dc:26:79:ae:06:d6:cf: 08:bc:e1:8a:73:57:b6:df:23:30:c0:88:ec:22:54:36:74:b4: 54:ce:2c:cb:47:3c:65:6b:67:f8:a4:d2:d6:e1:18:6a:e4:90: 7a:8c:2c:d1:ed:51:55:e1:d5:c6:3f:aa:8f:71:a7:59:ec:d1: ef:a4:3f:a6:44:e3:97:70:36:ab:78:99:21:b6:10:97:50:6e: 3e:f8:74:cf:e7:37:c6:f0:de:0b:e4:a7:4b:5f:36:2a:01:53: 41:8a:2c:7f:e3:be:10:70:eb:32:1a:7f:1a:29:8d:9d:63:5a: 2b:27:af:e0:8f:08:9d:7f:cb:34:64:8b:3a:17:61:67:49:2f: bc:b1:e3:a4:67:68:6a:9c:33:27:8f:b6:12:56:e8:29:1e:10: fc:01:5b:70:e6:1f:38:8b:a5:8e:08:a1:d2:3d:b0:57:1a:31: ba:c7:10:b6:73:4e:31:67:1f:de:b7:cf:70:35:a7:c8:da:37: 84:db:7d:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNjQ3RTVDQURDQjFGQkY3RUJCODk5QTcyMTlDM0EwRjAz RDNGN0IwRDAeFw0yNTA4MDkwODM1MzlaFw0yNTA4MTYwODM1MzlaMBgxFjAUBgNV BAMTDTY4OTcwODViLTkxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNpXQy4GJmWNjv89JO7//DKhGNGHR74Tcy89ZsPO9HlTFomgNvYhdoSJy4Jgcc hrBmrIsKVx3UQ3M2eDqZSErSczEl5KCDhvKq23Z7VhjmQGJbL7q/z0+vmH8dPaPE Hc0JILAUBruUZFV6uObYLS1G+DdQR2ZW5bddT/1dszqXLUEFonlazHReJTEpRdzr hpr+Trhd8ed55v9XsUgArl8XLWxfmiLZlZDwI+2bC1MnWJ6KU2ReWJIEor5PmrX6 svf5I5/0d50IXxeTGpFNmoXvKPCX8hkvLfFrq6x0Y4VoXFcCQwAu37enHfsdellb feEaMxKnXd11yDwFvuzds68rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTA5WG05m VpK4k+5kCAhJTyYh+xgwHwYDVR0jBBgwFoAUZH5crcsfv367iZpyGcOg8D0/ew0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzkwNEY4NzBBNjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkg1Y3Jjc2Z2MzY3aVpweUdjT2c4RDBfZXcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzkwNEY4NzBBNjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL1pINWNyY3NmdjM2 N2lacHlHY09nOEQwX2V3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK31dtQr8YkkF++MDTiTQWpo5OCtpo5itA57F1Pgb0lXN/7+2Du+SL2v NnARUR/VqZnpoXruFAvMSY7TgQC67J6N3CZ5rgbWzwi84YpzV7bfIzDAiOwiVDZ0 tFTOLMtHPGVrZ/ik0tbhGGrkkHqMLNHtUVXh1cY/qo9xp1ns0e+kP6ZE45dwNqt4 mSG2EJdQbj74dM/nN8bw3gvkp0tfNioBU0GKLH/jvhBw6zIafxopjZ1jWisnr+CP CJ1/yzRkizoXYWdJL7yx46RnaGqcMyePthJW6CkeEPwBW3DmHziLpY4IodI9sFca MbrHELZzTjFnH963z3A1p8jaN4Tbfa4= -----END CERTIFICATE-----Generated at Sun Aug 10 04:49:52 2025 by rpki-client