$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json) Hash identifier: Ln0YRC9KGaOZJ1EwlLCJmCQ1rg+LE1WHbVe0FGlzJ+k= Subject key identifier: A8:C7:47:45:B4:E6:2A:7A:7E:D0:70:2F:9C:5B:59:D2:20:A9:91:E3 Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft Manifest number: B4 Signing time: Sat 09 Aug 2025 06:27:27 +0000 Manifest this update: Sat 09 Aug 2025 06:27:27 +0000 Manifest next update: Sat 16 Aug 2025 06:27:27 +0000 Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: IGbWhV4BHE5Xqr69MeZ9OTd5Z8/u+v/HwwSHe+B8MBs=) 2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: u4ruZ96aOsEF+VWmoS7WaQkE4RPkVRrBuBKptWViuMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Validity Not Before: Aug 9 06:27:27 2025 GMT Not After : Aug 16 06:27:27 2025 GMT Subject: CN=6896ea4f-cd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:52:f1:99:0b:f2:b0:e2:35:37:fb:be:07:34: 41:67:1f:8b:e4:b0:99:c1:2d:3e:2b:9f:97:e7:15: fc:7a:85:bb:06:01:8a:e3:2e:9e:b0:82:76:bc:a0: 59:82:74:0d:76:37:f8:48:82:7e:ff:a0:15:4f:18: 96:89:61:34:6b:12:4c:8a:68:0d:60:d8:4a:cd:44: 74:0d:e8:ab:cb:54:d9:e6:ff:e5:44:1e:30:ab:f2: a6:90:22:e3:4f:39:1a:e8:5e:f7:5d:67:9c:bb:ef: 9a:92:af:e8:2b:9d:9c:64:ec:10:cb:15:71:6f:44: 25:bc:09:0d:c3:1f:bb:1f:d0:8e:1e:32:fd:f1:bd: d0:5e:d6:c8:2f:ed:f4:7d:a1:2d:a7:16:91:45:bb: a7:6e:34:3d:eb:4d:7e:d1:6c:e1:cc:31:2a:d0:f1: 31:29:ef:0d:11:29:93:a8:cb:c1:52:b1:7b:d8:29: a2:09:7f:4b:bf:a8:21:2a:57:1f:36:e8:f3:f8:f3: f4:51:e1:a7:4a:20:47:59:12:f1:d7:c5:6b:f8:86: e4:bf:a2:f9:c6:e9:b0:9f:d3:ac:54:67:80:4d:34: a1:c6:f9:c5:ee:16:14:5f:fa:e9:03:cc:e1:b8:32: 54:8d:bc:63:0d:e4:9e:08:bc:c1:a3:ab:6f:31:79: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C7:47:45:B4:E6:2A:7A:7E:D0:70:2F:9C:5B:59:D2:20:A9:91:E3 X509v3 Authority Key Identifier: keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5d:24:de:2b:0b:ec:2f:40:00:f0:53:e3:cf:5b:06:09:db: 6a:cc:5b:b1:cd:7d:a4:0d:e1:29:f7:1d:55:39:dd:56:a4:8b: 33:aa:82:91:25:21:ba:ef:db:d6:f3:50:fc:0d:66:bc:15:72: b9:f3:10:9c:73:af:f9:a0:06:2b:52:ac:8e:5a:3a:cc:1e:72: 26:5c:ff:af:e4:95:6b:00:8f:c1:c1:79:c1:11:c1:ab:ff:b0: 05:18:88:60:c5:8c:34:08:fe:0e:1d:30:09:23:be:29:d6:ee: c6:61:7f:ab:5f:93:78:b3:4c:1b:d3:cb:17:f6:8d:b1:e8:b7: bf:35:5c:f6:61:be:ea:c5:7a:f5:19:a1:4f:b8:80:54:2e:85: 75:d7:fb:8f:1f:64:6b:05:83:58:fc:f8:4d:38:da:a0:ec:2e: 0f:f4:37:67:82:be:db:ad:0d:07:a4:6d:d0:d1:eb:3f:35:9d: b2:99:36:4b:c3:ef:22:ad:5f:3b:06:90:8a:1a:f2:5d:93:7e: 00:4d:46:07:c5:c7:e7:e4:9a:ca:b7:24:a4:8d:01:b1:99:36: 5b:e3:a3:c2:00:ed:94:2d:fa:5f:0c:27:3a:e3:b6:ab:a2:48: 1e:05:58:f6:df:a0:96:3c:df:d6:aa:7b:e6:30:fa:06:d0:fc: fc:6b:de:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKENFRTczQTk1RDVDQ0VFMDYyRTdENUVCQTFCNUExMjcw NTJFMTI1MzgwHhcNMjUwODA5MDYyNzI3WhcNMjUwODE2MDYyNzI3WjAYMRYwFAYD VQQDEw02ODk2ZWE0Zi1jZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61LxmQvysOI1N/u+BzRBZx+L5LCZwS0+K5+X5xX8eoW7BgGK4y6esIJ2vKBZ gnQNdjf4SIJ+/6AVTxiWiWE0axJMimgNYNhKzUR0Deiry1TZ5v/lRB4wq/KmkCLj Tzka6F73XWecu++akq/oK52cZOwQyxVxb0QlvAkNwx+7H9COHjL98b3QXtbIL+30 faEtpxaRRbunbjQ9601+0WzhzDEq0PExKe8NESmTqMvBUrF72CmiCX9Lv6ghKlcf Nujz+PP0UeGnSiBHWRLx18Vr+Ibkv6L5xumwn9OsVGeATTShxvnF7hYUX/rpA8zh uDJUjbxjDeSeCLzBo6tvMXm8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjHR0W0 5ip6ftBwL5xbWdIgqZHjMB8GA1UdIwQYMBaAFM7nOpXVzO4GLn1euhtaEnBS4SU4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9DRjM3MzVEMDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdnWXVmVjY2RzFvU2NGTGhK VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9DRjM3MzVEMDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdn WXVmVjY2RzFvU2NGTGhKVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYXSTeKwvsL0AA8FPjz1sGCdtqzFuxzX2kDeEp9x1VOd1WpIszqoKR JSG679vW81D8DWa8FXK58xCcc6/5oAYrUqyOWjrMHnImXP+v5JVrAI/BwXnBEcGr /7AFGIhgxYw0CP4OHTAJI74p1u7GYX+rX5N4s0wb08sX9o2x6Le/NVz2Yb7qxXr1 GaFPuIBULoV11/uPH2RrBYNY/PhNONqg7C4P9Ddngr7brQ0HpG3Q0es/NZ2ymTZL w+8irV87BpCKGvJdk34ATUYHxcfn5JrKtySkjQGxmTZb46PCAO2ULfpfDCc647ar okgeBVj236CWPN/WqnvmMPoG0Pz8a94w -----END CERTIFICATE-----Generated at Sun Aug 10 04:21:45 2025 by rpki-client