$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: sGXdDyMr4CugxA7sMzlZa3iBLCsxfqCgoKHvuwQqjMg= Subject key identifier: C6:1B:C1:81:6C:12:E9:C6:B0:D3:D2:9E:D1:DB:E0:DC:99:65:0B:02 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: A4 Signing time: Sat 09 Aug 2025 06:37:46 +0000 Manifest this update: Sat 09 Aug 2025 06:37:46 +0000 Manifest next update: Sat 16 Aug 2025 06:37:46 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: 1CCMKHj6LSmL3mds3gSJ7zDMxXNwpPDFJZz92xC/7Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Aug 9 06:37:46 2025 GMT Not After : Aug 16 06:37:46 2025 GMT Subject: CN=6896ecba-1a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:a8:de:bc:c5:0a:05:85:a1:7d:ea:91:bd: c4:7a:cb:62:3c:27:b2:7a:a3:92:90:47:d6:d6:07: 9e:9b:b3:01:e7:c9:63:b4:24:db:bf:68:07:93:3e: 16:60:6d:08:5f:a1:b4:23:90:eb:0f:01:9b:78:ea: 17:87:af:6c:6a:01:1f:6d:7b:f0:2d:14:66:81:ea: 27:84:3b:c1:70:e2:58:36:61:ec:87:54:26:f1:3b: 3f:f0:e0:f9:29:13:df:cf:72:39:e9:25:ae:40:07: 35:1c:78:d6:50:34:bd:36:75:54:d3:54:85:9f:4d: 39:54:b5:97:93:ee:98:a6:ba:55:5a:a4:33:c4:f2: de:89:8b:31:55:1c:8d:ac:6f:9c:70:75:03:9b:69: ef:7f:79:09:47:de:64:59:bb:94:61:fc:be:dd:f4: 9f:ab:b5:57:ae:6b:05:de:e3:11:db:73:cc:bb:4d: ba:14:0b:7b:0e:c8:4c:df:56:83:ac:39:63:d5:c4: a6:dd:44:4b:75:bf:b4:f6:09:bb:b8:55:c4:e1:50: d2:c5:a7:18:58:50:74:c0:47:5b:c4:1b:16:74:a2: b7:2b:dc:4d:05:a8:d7:90:bf:c7:4c:d4:0c:d8:c6: a4:ea:92:ac:e8:0b:92:50:7a:76:84:b8:9c:5a:41: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1B:C1:81:6C:12:E9:C6:B0:D3:D2:9E:D1:DB:E0:DC:99:65:0B:02 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:44:9f:2d:6a:8f:45:b7:4e:94:cf:83:c2:f6:00:53:17:02: cc:14:a2:11:82:8f:5f:48:cc:92:91:46:01:a4:e1:3a:5a:61: 7f:d6:af:81:9e:1d:dd:92:1a:13:e4:31:86:6e:a9:5d:dc:ef: 23:d9:17:f9:c5:65:9e:ac:4a:d8:18:f8:9e:d5:5c:f0:e1:e3: 70:5b:0d:da:0c:3a:b6:00:39:38:50:98:c9:fe:ac:1a:a5:12: 45:af:35:04:94:62:35:64:e8:31:65:a8:6e:79:25:ec:82:3e: 57:42:4a:06:8f:10:ee:ad:0a:df:7a:1c:a4:56:1c:9c:74:59: 1e:a6:36:00:01:53:67:48:4e:ba:68:a5:1d:b6:90:f9:ef:73: a2:6d:52:ae:9c:6c:2d:5e:8d:72:d3:57:fe:18:1f:a4:1a:28: 09:85:3f:c5:56:7c:f7:21:65:36:1a:76:0d:4a:d3:2a:fe:57: 46:76:5c:dd:c7:77:48:d4:ce:22:86:90:65:c3:71:b1:8c:fc: 4a:90:62:d2:ef:75:d9:00:c1:6b:4f:10:15:89:1e:67:2a:4e: 7e:8f:33:47:43:61:90:95:71:9f:02:4c:3f:68:78:d0:62:9b: 63:78:2d:c6:2d:c5:30:33:16:53:00:be:9b:20:f7:b4:a8:51: bb:d5:79:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2 OUVCODE0RDUwHhcNMjUwODA5MDYzNzQ2WhcNMjUwODE2MDYzNzQ2WjAYMRYwFAYD VQQDEw02ODk2ZWNiYS0xYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKOo3rzFCgWFoX3qkb3EestiPCeyeqOSkEfW1geem7MB58ljtCTbv2gHkz4W YG0IX6G0I5DrDwGbeOoXh69sagEfbXvwLRRmgeonhDvBcOJYNmHsh1Qm8Ts/8OD5 KRPfz3I56SWuQAc1HHjWUDS9NnVU01SFn005VLWXk+6YprpVWqQzxPLeiYsxVRyN rG+ccHUDm2nvf3kJR95kWbuUYfy+3fSfq7VXrmsF3uMR23PMu026FAt7DshM31aD rDlj1cSm3URLdb+09gm7uFXE4VDSxacYWFB0wEdbxBsWdKK3K9xNBajXkL/HTNQM 2Mak6pKs6AuSUHp2hLicWkGM1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYbwYFs EunGsNPSntHb4NyZZQsCMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj c2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjRJ8tao9Ft06Uz4PC9gBTFwLMFKIRgo9fSMySkUYBpOE6WmF/1q+B nh3dkhoT5DGGbqld3O8j2Rf5xWWerErYGPie1Vzw4eNwWw3aDDq2ADk4UJjJ/qwa pRJFrzUElGI1ZOgxZahueSXsgj5XQkoGjxDurQrfehykVhycdFkepjYAAVNnSE66 aKUdtpD573OibVKunGwtXo1y01f+GB+kGigJhT/FVnz3IWU2GnYNStMq/ldGdlzd x3dI1M4ihpBlw3GxjPxKkGLS73XZAMFrTxAViR5nKk5+jzNHQ2GQlXGfAkw/aHjQ YptjeC3GLcUwMxZTAL6bIPe0qFG71Xn1 -----END CERTIFICATE-----Generated at Sun Aug 10 21:01:12 2025 by rpki-client