$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: RlYLjiFm659hBhXgtt97WF2aL5mLgPqoO9id5TqxrNY= Subject key identifier: 48:DA:BE:3A:8A:B6:68:5B:EB:1B:76:CF:CF:29:68:E9:D8:89:AD:46 Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 0455 Signing time: Mon 11 Aug 2025 00:24:53 +0000 Manifest this update: Mon 11 Aug 2025 00:24:53 +0000 Manifest next update: Mon 18 Aug 2025 00:24:53 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: 2zSm3qHM+ZVkUAPHNOKb2ERD6f3l2jtx/nVxX3wPnFw=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Aug 11 00:24:53 2025 GMT Not After : Aug 18 00:24:53 2025 GMT Subject: CN=68993855-dc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bf:6b:d6:34:c3:3d:14:3a:88:8d:97:42:fa: 3f:14:91:45:fd:5a:c6:d9:66:5f:91:32:92:cd:92: 40:84:05:f9:fc:a9:a8:31:f7:85:e3:59:f7:52:3c: a3:04:d6:5d:cf:4b:82:3a:dd:9e:77:38:41:24:92: a4:0d:fb:4d:17:45:15:d4:7e:f5:46:0f:a8:cf:32: bf:f3:b3:54:89:80:c6:d1:0d:60:37:59:96:cc:b0: ad:6b:78:c8:a6:39:e8:fd:83:ad:09:df:a7:31:8a: 44:c0:e2:d6:6c:04:c5:be:8a:03:87:41:84:a2:fa: 84:be:2a:f8:5f:41:e8:fc:8c:cf:d3:88:d1:c7:a1: 82:7d:2f:c6:5d:0c:66:0f:39:16:50:c3:e8:96:8e: 63:19:21:63:6a:a7:4c:1c:05:19:1d:76:cb:22:c2: 07:cb:32:19:3e:f6:8f:45:48:11:67:fe:27:85:e8: 53:bb:b7:81:11:05:f3:0b:d8:da:76:88:6c:f7:7b: 28:a3:11:90:e0:6d:45:b1:91:f1:b0:d1:d2:00:a1: a7:76:f7:0e:7d:85:24:f4:b9:37:0b:9e:f9:2d:cf: 03:39:4d:bd:25:12:14:d3:11:7d:14:36:d9:61:d4: 3f:1d:76:44:a6:ca:ca:b7:77:e7:45:cb:ab:3c:9d: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:BE:3A:8A:B6:68:5B:EB:1B:76:CF:CF:29:68:E9:D8:89:AD:46 X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a0:6f:e0:af:b4:22:93:96:db:3a:92:71:bd:89:8a:2c:0f: 33:03:77:67:27:38:b7:5a:47:3c:7e:0d:c3:81:39:95:b7:eb: d4:b6:ec:df:17:6f:b7:bf:32:69:bd:44:b2:de:f8:25:c3:6c: ba:34:c4:54:7b:5c:1c:9b:72:48:2d:48:3e:80:be:9c:9d:83: 44:b6:b5:9a:14:cc:2d:d3:1d:14:1b:9a:5f:87:0d:d0:49:bb: 45:59:66:c2:77:a6:20:c5:23:74:c7:15:f7:23:19:ec:60:1c: 5f:ef:8a:cb:7a:02:02:03:6e:65:45:78:7f:79:32:95:3a:c0: fa:72:42:96:f0:2a:9a:ff:21:37:f4:0f:90:ad:c1:9a:62:e6: 17:e3:19:ee:c1:7d:53:53:f5:d4:d7:28:62:37:d3:07:ae:5f: 74:41:6d:ea:2b:37:0b:c9:8f:eb:ab:e4:4d:b3:30:41:9c:57: 37:da:f5:be:77:d1:34:1b:16:ab:0a:3f:23:26:76:f5:1c:11: 65:c1:65:46:4f:1e:1e:d4:7b:ef:d0:7f:6f:c9:fc:a4:fd:9d: 92:88:a5:83:65:55:b9:60:7b:54:1e:d9:ac:a3:d8:c4:11:d9: 84:e4:60:72:19:5f:48:3e:30:f5:87:94:51:d2:a8:b7:40:d4: 6c:b6:f6:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjUwODExMDAyNDUzWhcNMjUwODE4MDAyNDUzWjAYMRYwFAYD VQQDEw02ODk5Mzg1NS1kYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8b9r1jTDPRQ6iI2XQvo/FJFF/VrG2WZfkTKSzZJAhAX5/KmoMfeF41n3Ujyj BNZdz0uCOt2edzhBJJKkDftNF0UV1H71Rg+ozzK/87NUiYDG0Q1gN1mWzLCta3jI pjno/YOtCd+nMYpEwOLWbATFvooDh0GEovqEvir4X0Ho/IzP04jRx6GCfS/GXQxm DzkWUMPolo5jGSFjaqdMHAUZHXbLIsIHyzIZPvaPRUgRZ/4nhehTu7eBEQXzC9ja dohs93sooxGQ4G1FsZHxsNHSAKGndvcOfYUk9Lk3C575Lc8DOU29JRIU0xF9FDbZ YdQ/HXZEpsrKt3fnRcurPJ3/3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjavjqK tmhb6xt2z88paOnYia1GMB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjoG/gr7Qik5bbOpJxvYmKLA8zA3dnJzi3Wkc8fg3DgTmVt+vUtuzf F2+3vzJpvUSy3vglw2y6NMRUe1wcm3JILUg+gL6cnYNEtrWaFMwt0x0UG5pfhw3Q SbtFWWbCd6YgxSN0xxX3IxnsYBxf74rLegICA25lRXh/eTKVOsD6ckKW8Cqa/yE3 9A+QrcGaYuYX4xnuwX1TU/XU1yhiN9MHrl90QW3qKzcLyY/rq+RNszBBnFc32vW+ d9E0GxarCj8jJnb1HBFlwWVGTx4e1Hvv0H9vyfyk/Z2SiKWDZVW5YHtUHtmso9jE EdmE5GByGV9IPjD1h5RR0qi3QNRstvZ7 -----END CERTIFICATE-----Generated at Mon Aug 11 07:42:35 2025 by rpki-client