$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json) Hash identifier: pZLbyjmecawrKZ7c4yL+PDp9Dgf59QCAWw+j/zgW/5Q= Subject key identifier: 9E:58:E2:5D:A0:39:B3:DE:3A:FE:CA:4B:1D:A5:6E:7D:95:66:D0:9C Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft Manifest number: C9 Signing time: Mon 11 Aug 2025 05:56:42 +0000 Manifest this update: Mon 11 Aug 2025 05:56:41 +0000 Manifest next update: Mon 18 Aug 2025 05:56:41 +0000 Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: Xj5TNne7SSjKtXMxJPEySan7/pLyMHgbeh3pw8mDHgI=) 2: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: Ds5OYRTGE1+nmc/fXAPDPY24vX1TYbGT7zDa8IDd+kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: Aug 11 05:56:41 2025 GMT Not After : Aug 18 05:56:41 2025 GMT Subject: CN=6899861a-9256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:8d:fd:9a:8f:05:c6:27:29:58:fd:12:a4: c5:cb:c1:24:f7:48:88:81:4f:d1:8f:9f:97:eb:f8: 61:c2:b1:49:3b:d0:05:e9:aa:32:10:d8:0b:26:05: eb:d9:8e:89:80:58:a8:b9:cf:f4:4e:c0:4d:34:b5: 38:cd:c6:95:3d:ed:25:6e:35:59:f9:6d:08:f2:80: 80:5b:57:4e:5a:05:91:d5:fe:d0:6a:1b:08:ab:4b: bd:94:20:ed:b6:77:cb:57:6b:d8:c8:49:97:49:ba: 2d:64:fe:bb:9e:7d:03:e7:e4:6e:ba:39:d8:bc:fb: f9:ba:c6:84:aa:0f:51:c3:b5:42:65:2e:e6:f4:2a: 50:f8:46:4e:f8:e4:87:11:cf:c8:b4:9a:6e:33:e5: dd:fb:83:92:f1:5f:01:1a:19:75:a3:1f:e4:eb:34: 33:71:56:62:e9:f9:92:30:d2:d9:05:b6:bc:8f:90: 00:e5:39:46:86:b5:b9:ac:f5:92:9f:47:51:8a:f2: 33:af:ef:9b:58:17:ee:7c:79:cd:ce:c9:74:3f:1b: cf:4b:d0:e0:c6:28:0e:99:86:95:e3:b4:3b:e8:dc: 4a:95:42:ab:f3:54:eb:ca:ef:70:bf:26:ef:c0:44: 32:19:12:d1:b3:89:5b:5a:30:0a:b6:66:ce:a6:d6: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:58:E2:5D:A0:39:B3:DE:3A:FE:CA:4B:1D:A5:6E:7D:95:66:D0:9C X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5c:be:1e:35:6f:76:fd:9f:67:47:8a:fe:06:f2:1c:59:3d: 56:0c:79:56:68:3d:32:63:48:b6:b3:66:00:82:17:64:ff:bc: d6:a8:06:b2:a5:7b:c2:09:3f:c0:b0:ed:a3:7f:8f:a9:0f:fc: c1:b9:c9:cd:42:7c:a5:0f:e6:70:13:5b:31:5f:b0:f3:59:29: 0b:51:d7:30:ae:cc:28:37:58:40:fd:cf:65:05:2b:3a:07:91: ff:c8:ef:5a:37:ce:d3:b4:3e:11:2c:82:e5:5a:5a:d0:42:61: 3b:fc:9a:bb:e7:3b:a5:63:3a:77:26:91:79:ba:67:16:e9:00: f0:9e:7b:b4:bb:45:af:cb:b0:0c:7f:3d:90:0a:36:d4:3c:a5: 1c:9b:ab:31:e5:94:a1:81:78:9d:08:25:41:f0:72:86:56:e9: 01:b4:04:67:62:1d:b1:c2:df:b4:25:42:ba:cc:df:d4:b3:34: 0c:80:1f:31:40:f5:95:c3:60:7a:a6:9d:2b:97:ed:0a:71:b9: 0a:77:91:fc:cc:2c:55:82:ef:15:42:ae:a6:f5:3c:73:ea:a1: 38:eb:7d:56:1e:4e:d7:29:bb:78:4b:c8:c0:4b:a1:66:24:5c: 9c:46:5f:8c:ea:4a:8b:a9:3b:b4:8b:bc:d8:87:7a:6e:db:f4: 3c:1f:d9:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjUwODExMDU1NjQxWhcNMjUwODE4MDU1NjQxWjAYMRYwFAYD VQQDEw02ODk5ODYxYS05MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3uN/ZqPBcYnKVj9EqTFy8Ek90iIgU/Rj5+X6/hhwrFJO9AF6aoyENgLJgXr 2Y6JgFiouc/0TsBNNLU4zcaVPe0lbjVZ+W0I8oCAW1dOWgWR1f7QahsIq0u9lCDt tnfLV2vYyEmXSbotZP67nn0D5+RuujnYvPv5usaEqg9Rw7VCZS7m9CpQ+EZO+OSH Ec/ItJpuM+Xd+4OS8V8BGhl1ox/k6zQzcVZi6fmSMNLZBba8j5AA5TlGhrW5rPWS n0dRivIzr++bWBfufHnNzsl0PxvPS9DgxigOmYaV47Q76NxKlUKr81Tryu9wvybv wEQyGRLRs4lbWjAKtmbOptY9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5Y4l2g ObPeOv7KSx2lbn2VZtCcMB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81OERCODdGMjQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENh NHdleHVjN2t2OVI4UEhkeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/XL4eNW92/Z9nR4r+BvIcWT1WDHlWaD0yY0i2s2YAghdk/7zWqAay pXvCCT/AsO2jf4+pD/zBucnNQnylD+ZwE1sxX7DzWSkLUdcwrswoN1hA/c9lBSs6 B5H/yO9aN87TtD4RLILlWlrQQmE7/Jq75zulYzp3JpF5umcW6QDwnnu0u0Wvy7AM fz2QCjbUPKUcm6sx5ZShgXidCCVB8HKGVukBtARnYh2xwt+0JUK6zN/UszQMgB8x QPWVw2B6pp0rl+0KcbkKd5H8zCxVgu8VQq6m9Txz6qE4631WHk7XKbt4S8jAS6Fm JFycRl+M6kqLqTu0i7zYh3pu2/Q8H9nq -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:53 2025 by rpki-client