$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: Ml5Y0lFnJLOk0oCw5en1N2IreI7xrTZFoRDtqiOixvE= Subject key identifier: 0B:95:D2:68:97:63:26:85:5F:8F:C7:BB:7D:DE:D4:88:8A:68:1B:DB Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 05AA Signing time: Sun 10 Aug 2025 23:18:15 +0000 Manifest this update: Sun 10 Aug 2025 23:18:14 +0000 Manifest next update: Sun 17 Aug 2025 23:18:14 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: NrnvcimoY4O9xL+9bJFumqNMvwrJirKjcFaKpCvQK1A=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Aug 10 23:18:14 2025 GMT Not After : Aug 17 23:18:14 2025 GMT Subject: CN=689928b7-68e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7d:66:cd:cb:52:2b:b1:cc:b0:33:be:c2:8f: 5f:7e:c9:5a:af:f9:e7:5c:d3:93:bf:ff:66:5b:8b: 13:a7:d0:86:3b:e4:17:0e:29:b2:b6:0c:75:ec:f3: 28:1c:83:b2:82:f0:0f:39:2b:85:85:5c:5e:13:39: 8f:00:99:e7:fe:78:90:fa:cd:b3:4f:f1:83:61:5d: 53:d2:d0:9e:b8:2b:f7:ef:e1:2f:71:b6:3a:a9:8e: c3:f9:3b:07:55:bd:47:fd:e4:19:d0:2f:68:fc:96: 14:21:a5:be:8b:f2:f8:ca:1f:bf:85:09:a2:65:58: 91:19:0a:6c:25:6a:35:e1:7b:84:e9:46:f6:ca:84: 40:28:2c:80:48:d4:d7:39:77:e7:4f:f7:5b:e3:ab: c6:4f:52:1f:8e:7f:5c:9a:e7:01:a6:86:5d:a3:2f: 09:12:53:63:a2:6a:8c:8f:d5:68:e0:03:3d:a0:ea: 15:49:32:ed:16:c7:91:80:44:f7:2c:c8:ba:9e:33: 75:be:7a:fa:4f:8b:1b:84:18:bf:9d:44:0b:ab:0c: b2:42:1b:23:2c:01:b7:80:83:26:44:23:8c:5b:55: 90:27:d5:9f:fe:a4:3d:3e:d7:f3:5a:07:3f:23:6a: fb:2d:f5:38:01:87:5f:9d:98:e2:c8:33:43:52:05: 87:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:D2:68:97:63:26:85:5F:8F:C7:BB:7D:DE:D4:88:8A:68:1B:DB X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8d:74:73:94:e2:a8:92:d4:fb:7a:56:34:16:d3:0e:8f:2f: 9a:cc:12:b8:5f:d8:2c:60:43:ed:09:3d:4d:47:3c:0c:e0:71: e0:91:ff:84:f7:b8:db:b1:e8:93:f9:8c:ca:12:ad:ee:56:08: 58:36:07:7f:4d:d6:88:1f:3b:31:66:cd:a6:4e:67:a7:95:e2: 57:80:35:97:cf:ae:9d:2f:81:8e:98:de:8c:3c:15:1c:60:b7: ba:0e:0d:d8:f1:8e:75:fd:4f:3e:7f:0f:5e:ba:66:7e:6b:b5: 5d:f8:58:a9:f5:ac:ec:85:fc:6f:2e:14:df:85:53:6b:d4:a2: 04:d3:52:d3:60:6a:67:6b:2a:6b:95:c9:d8:03:f7:bd:a4:29: 1e:8a:98:6b:09:64:e8:48:b8:19:c9:8f:89:db:db:f3:03:86: 3d:49:df:21:90:96:ac:93:01:4a:9a:8e:a4:96:c8:22:03:7b: 3e:be:5a:ff:d2:43:c5:a4:0f:a4:e9:8f:b5:e2:59:be:c7:52: bf:7b:b4:df:3c:87:ba:b2:65:70:76:3b:95:05:95:18:ac:46: 14:3e:23:01:c1:62:ba:06:4c:db:e8:b5:bc:f9:aa:56:9a:f1: c9:5f:4b:c3:3f:e5:d0:af:79:07:14:e7:7a:86:fe:e9:cb:5b: 74:d9:95:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUwODEwMjMxODE0WhcNMjUwODE3MjMxODE0WjAYMRYwFAYD VQQDEw02ODk5MjhiNy02OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7n1mzctSK7HMsDO+wo9ffslar/nnXNOTv/9mW4sTp9CGO+QXDimytgx17PMo HIOygvAPOSuFhVxeEzmPAJnn/niQ+s2zT/GDYV1T0tCeuCv37+EvcbY6qY7D+TsH Vb1H/eQZ0C9o/JYUIaW+i/L4yh+/hQmiZViRGQpsJWo14XuE6Ub2yoRAKCyASNTX OXfnT/db46vGT1Ifjn9cmucBpoZdoy8JElNjomqMj9Vo4AM9oOoVSTLtFseRgET3 LMi6njN1vnr6T4sbhBi/nUQLqwyyQhsjLAG3gIMmRCOMW1WQJ9Wf/qQ9PtfzWgc/ I2r7LfU4AYdfnZjiyDNDUgWHhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuV0miX YyaFX4/Hu33e1IiKaBvbMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3jXRzlOKoktT7elY0FtMOjy+azBK4X9gsYEPtCT1NRzwM4HHgkf+E 97jbseiT+YzKEq3uVghYNgd/TdaIHzsxZs2mTmenleJXgDWXz66dL4GOmN6MPBUc YLe6Dg3Y8Y51/U8+fw9eumZ+a7Vd+Fip9azshfxvLhTfhVNr1KIE01LTYGpnaypr lcnYA/e9pCkeiphrCWToSLgZyY+J29vzA4Y9Sd8hkJaskwFKmo6klsgiA3s+vlr/ 0kPFpA+k6Y+14lm+x1K/e7TfPIe6smVwdjuVBZUYrEYUPiMBwWK6Bkzb6LW8+apW mvHJX0vDP+XQr3kHFOd6hv7py1t02ZVI -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:22 2025 by rpki-client