$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json) Hash identifier: 2WrDOBUPvMg3SwhhwGmGazEybBj8x2uPYfIdo05BCZw= Subject key identifier: B6:DE:AA:F9:4E:F2:DB:C1:D7:C7:14:9C:4F:01:54:45:F0:14:14:AA Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft Manifest number: AC Signing time: Tue 05 Aug 2025 06:39:23 +0000 Manifest this update: Tue 05 Aug 2025 06:39:23 +0000 Manifest next update: Tue 12 Aug 2025 06:39:23 +0000 Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: LCKadIsb1NDcA3o0EUZRIZit1QUZmRmvJxFb1wiyQLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Validity Not Before: Aug 5 06:39:23 2025 GMT Not After : Aug 12 06:39:23 2025 GMT Subject: CN=6891a71b-2689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:fe:5e:e9:33:80:f6:cb:46:83:b8:3d:b2: b9:90:2b:14:66:72:12:0a:ce:c6:bc:6e:55:b9:da: 18:2b:15:80:4f:ac:b8:bc:05:d4:2e:c4:59:eb:d2: 3c:0e:ef:60:22:ba:ad:f8:19:ad:18:49:69:d8:5e: 45:44:dd:1f:bf:ec:a1:26:f3:7e:06:ce:57:8d:3b: 76:ab:d3:38:9d:e1:3d:82:d2:b1:de:a3:17:73:8d: 18:60:17:68:88:7f:81:63:c8:65:26:be:bd:ae:45: 9e:60:aa:f5:93:80:7e:b3:5e:dd:01:9f:a8:13:28: 3f:90:a3:04:b9:08:4a:3f:6d:cf:ed:0f:18:22:15: 1b:f5:5f:5c:00:48:c8:b0:83:13:77:01:f6:9b:b7: 0c:2f:c3:7a:3d:80:15:e9:b4:60:e2:17:c4:a4:95: 85:b5:67:7f:20:24:d0:8c:9a:9d:e9:04:d4:ca:03: 83:a1:af:12:3b:b9:5a:b8:f1:fb:b4:c2:74:65:5f: 74:04:37:04:bc:70:32:e3:c6:0d:5d:67:bb:0d:f7: f7:21:af:dc:18:e4:1b:00:0d:4a:c1:c4:bc:bb:1d: 31:21:0a:10:e6:30:d5:a2:9f:f3:ee:49:09:76:3f: ce:f4:e0:d5:c1:60:45:7c:ba:5e:a2:f9:2e:40:61: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DE:AA:F9:4E:F2:DB:C1:D7:C7:14:9C:4F:01:54:45:F0:14:14:AA X509v3 Authority Key Identifier: keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:de:40:8a:da:de:ad:44:3a:f7:91:61:06:cc:82:74:c2:9c: 23:93:04:5f:a9:df:77:75:9d:14:70:b6:f0:2f:00:ce:4b:18: ba:28:73:b7:19:8e:45:19:d1:2b:cf:4f:b3:66:cb:d3:bf:81: 3a:1c:79:21:f9:a0:a7:31:32:6a:4d:95:34:66:eb:7e:14:7d: ad:56:1b:26:c7:a8:37:bb:ab:3f:4e:61:c6:39:01:f4:8e:cc: ba:93:0c:ea:b9:00:02:28:4b:62:69:70:a2:97:d7:4f:61:1b: c2:c8:20:7b:59:28:da:f9:41:b9:63:f1:0f:8a:ef:5f:18:55: 15:48:55:87:15:43:36:75:9e:49:7b:76:28:ac:90:0e:29:3e: b0:d4:bd:25:8f:a4:a2:24:74:65:8e:34:6d:e2:1d:ec:e0:aa: 7d:2c:03:3d:7a:95:15:8b:67:d4:03:2a:4a:7c:3b:24:94:11: 3e:a3:a8:44:91:62:e3:7c:26:f0:6e:52:9a:52:ab:55:bb:c4: b5:77:20:12:a3:c3:30:94:f9:35:52:38:61:43:c3:88:db:82: 46:03:e8:be:e9:92:59:ab:06:50:ff:a3:1f:07:18:9c:f5:13: 13:45:46:d2:dc:d3:f6:af:33:ce:38:3c:e8:94:77:85:81:a2: 2b:85:7b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyQzQxMTAvBgNVBAUTKDY2QzVCMTkwNEIzNUM0N0Q5NDUwOEVDMEExQUNEQTgz NjhERUY0QTkwHhcNMjUwODA1MDYzOTIzWhcNMjUwODEyMDYzOTIzWjAYMRYwFAYD VQQDEw02ODkxYTcxYi0yNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fH+XukzgPbLRoO4PbK5kCsUZnISCs7GvG5VudoYKxWAT6y4vAXULsRZ69I8 Du9gIrqt+BmtGElp2F5FRN0fv+yhJvN+Bs5XjTt2q9M4neE9gtKx3qMXc40YYBdo iH+BY8hlJr69rkWeYKr1k4B+s17dAZ+oEyg/kKMEuQhKP23P7Q8YIhUb9V9cAEjI sIMTdwH2m7cML8N6PYAV6bRg4hfEpJWFtWd/ICTQjJqd6QTUygODoa8SO7lauPH7 tMJ0ZV90BDcEvHAy48YNXWe7Dff3Ia/cGOQbAA1KwcS8ux0xIQoQ5jDVop/z7kkJ dj/O9ODVwWBFfLpeovkuQGGsdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbeqvlO 8tvB18cUnE8BVEXwFBSqMB8GA1UdIwQYMBaAFGbFsZBLNcR9lFCOwKGs2oNo3vSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GQkYxNEU3MjZD MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhIMlVVSTdBb2F6YWcyamU5 S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTJDNC9GQkYxNEU3MjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhI MlVVSTdBb2F6YWcyamU5S2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDo3kCK2t6tRDr3kWEGzIJ0wpwjkwRfqd93dZ0UcLbwLwDOSxi6KHO3 GY5FGdErz0+zZsvTv4E6HHkh+aCnMTJqTZU0Zut+FH2tVhsmx6g3u6s/TmHGOQH0 jsy6kwzquQACKEtiaXCil9dPYRvCyCB7WSja+UG5Y/EPiu9fGFUVSFWHFUM2dZ5J e3YorJAOKT6w1L0lj6SiJHRljjRt4h3s4Kp9LAM9epUVi2fUAypKfDsklBE+o6hE kWLjfCbwblKaUqtVu8S1dyASo8MwlPk1UjhhQ8OI24JGA+i+6ZJZqwZQ/6MfBxic 9RMTRUbS3NP2rzPOODzolHeFgaIrhXuw -----END CERTIFICATE-----Generated at Wed Aug 6 13:06:59 2025 by rpki-client