$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: PsLWydgIRyB71aDLuIU7sEK6beHlBVEbC8QO+li7MFI= Subject key identifier: 50:D5:26:5A:2E:AA:71:E5:BD:B4:59:26:F1:57:EA:34:29:54:27:FD Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 0130 Signing time: Tue 05 Aug 2025 05:09:14 +0000 Manifest this update: Tue 05 Aug 2025 05:09:14 +0000 Manifest next update: Tue 12 Aug 2025 05:09:14 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: XnAhZjZQot7P/1aHx4d1Fnrj1MYspw3zK3UEifSF5Yw=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Aug 5 05:09:14 2025 GMT Not After : Aug 12 05:09:14 2025 GMT Subject: CN=689191fa-7334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:c5:9d:12:64:9f:48:44:b9:5c:ac:7c:d5: 14:6e:4b:7c:cd:0f:95:04:a5:33:79:ab:b8:a4:d6: 2a:83:1c:f5:a0:50:91:c1:76:05:87:c9:52:f9:82: 9d:00:8f:f0:d7:b2:4e:b7:40:58:e2:f2:53:19:3b: 3f:d6:04:16:e1:7e:db:61:fc:53:ad:f5:70:e8:27: cb:1b:44:4a:a9:7a:96:ad:d6:a8:db:a7:b4:48:c1: 1e:0a:58:28:f2:68:27:80:9c:49:25:01:ad:c6:a8: b4:4c:1a:97:5b:e7:4a:0f:d4:8e:70:34:2f:0d:77: dd:cb:25:a5:5a:da:f8:f6:61:fd:83:90:d7:bb:d2: 65:bb:3b:32:57:ca:60:fa:5f:f1:74:01:3e:cc:cf: d3:55:80:63:64:9a:86:c5:0a:6e:a3:19:1e:a9:c0: 4f:f4:6f:5e:15:57:f8:aa:57:c3:f1:02:ae:f1:bb: b5:c4:79:4c:ad:a5:52:4f:dc:3f:1d:64:da:dc:38: fc:27:20:7c:3a:19:ee:e5:9e:8c:79:d3:80:a3:f8: cc:86:d6:de:c0:4a:ab:b6:ed:ef:87:9d:e2:61:c6: de:18:c1:5a:68:33:e2:40:16:cf:82:bc:30:71:bc: cf:7c:bf:d9:5b:42:79:87:90:eb:fa:e1:0b:93:ad: e6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:26:5A:2E:AA:71:E5:BD:B4:59:26:F1:57:EA:34:29:54:27:FD X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f6:89:73:2d:3b:06:1e:9c:96:c4:bc:cf:fb:9b:21:91:89: 93:cc:b7:3d:5f:0b:6e:a3:01:cd:5b:83:82:30:aa:b3:e9:db: 0c:9d:99:af:f1:fc:aa:62:8a:4c:fb:5e:88:e1:18:85:eb:26: e3:d7:b6:e2:30:62:75:b3:20:86:b7:a9:c0:a5:92:25:f8:24: 2c:3a:c8:0e:b8:7d:1f:9e:3e:5a:20:0f:fb:6b:e4:e0:29:0d: 19:6f:af:80:ac:c3:20:5e:46:3b:fc:91:a2:5a:3a:5e:96:ad: 23:68:fa:92:37:5a:4e:66:5e:fa:df:92:30:22:87:2f:34:18: 42:a9:bb:fa:51:d4:d0:ac:3e:57:7f:dc:3a:e7:d3:c5:c0:21: 82:74:98:c0:3f:c7:34:60:13:7d:1c:0d:4c:83:fc:98:8d:43: fe:52:53:c1:ec:c5:17:df:2f:2b:0f:ff:91:11:49:5c:3b:5d: 07:3b:8c:52:9e:e4:78:6c:81:19:25:42:03:85:ae:5c:dc:0b: 18:e1:ca:49:72:a8:b2:a6:aa:a3:e5:2d:e5:d4:46:77:9c:0d: 78:8a:0c:dd:90:d0:d2:08:bd:16:fe:88:76:a7:04:70:c1:ca: 58:6b:1e:2e:10:4f:e3:29:c8:b1:7c:c8:a7:43:27:7a:64:04: b6:84:8a:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUwODA1MDUwOTE0WhcNMjUwODEyMDUwOTE0WjAYMRYwFAYD VQQDEw02ODkxOTFmYS03MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JXFnRJkn0hEuVysfNUUbkt8zQ+VBKUzeau4pNYqgxz1oFCRwXYFh8lS+YKd AI/w17JOt0BY4vJTGTs/1gQW4X7bYfxTrfVw6CfLG0RKqXqWrdao26e0SMEeClgo 8mgngJxJJQGtxqi0TBqXW+dKD9SOcDQvDXfdyyWlWtr49mH9g5DXu9JluzsyV8pg +l/xdAE+zM/TVYBjZJqGxQpuoxkeqcBP9G9eFVf4qlfD8QKu8bu1xHlMraVST9w/ HWTa3Dj8JyB8Ohnu5Z6MedOAo/jMhtbewEqrtu3vh53iYcbeGMFaaDPiQBbPgrww cbzPfL/ZW0J5h5Dr+uELk63mGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDVJlou qnHlvbRZJvFX6jQpVCf9MB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB9olzLTsGHpyWxLzP+5shkYmTzLc9XwtuowHNW4OCMKqz6dsMnZmv 8fyqYopM+16I4RiF6ybj17biMGJ1syCGt6nApZIl+CQsOsgOuH0fnj5aIA/7a+Tg KQ0Zb6+ArMMgXkY7/JGiWjpelq0jaPqSN1pOZl7635IwIocvNBhCqbv6UdTQrD5X f9w659PFwCGCdJjAP8c0YBN9HA1Mg/yYjUP+UlPB7MUX3y8rD/+REUlcO10HO4xS nuR4bIEZJUIDha5c3AsY4cpJcqiypqqj5S3l1EZ3nA14igzdkNDSCL0W/oh2pwRw wcpYax4uEE/jKcixfMinQyd6ZAS2hIpL -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:46 2025 by rpki-client