$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: qApfJ2hx2hB8YEDvDhdxxETxMO2rBoraWYl6LdzV4s8= Subject key identifier: 12:CE:10:FC:06:4E:B3:8C:99:F1:DF:B4:9C:8A:BA:4B:E4:06:46:A2 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0197 Signing time: Tue 05 Aug 2025 03:53:54 +0000 Manifest this update: Tue 05 Aug 2025 03:53:53 +0000 Manifest next update: Tue 12 Aug 2025 03:53:53 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: iBplnes9sWoG5zoziN9isiuSnDqSdOUfhMpyg8jMx7k=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: jnLxIBXSm7e5/8UMqX1czieGQhqSS+3jnA+J0x4YYkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Aug 5 03:53:53 2025 GMT Not After : Aug 12 03:53:53 2025 GMT Subject: CN=68918052-a7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:87:06:ee:78:71:db:48:5a:19:94:c8:4d: 70:26:4c:36:a4:8f:46:fc:0f:3e:bd:04:b7:60:72: 5b:ce:25:56:5b:3e:6d:57:a8:40:e4:e8:83:68:3b: 46:71:35:e7:90:ac:ab:9b:8d:0d:62:64:f0:8a:06: ea:55:74:92:7d:09:00:e3:90:5e:5b:e5:27:47:79: 7f:22:e5:e2:b5:ef:d7:f6:0a:5e:85:5c:10:9d:82: a4:45:87:7a:1f:ca:f9:46:ee:74:24:84:15:61:17: c0:e7:f0:00:df:8c:f3:61:ad:82:51:7a:10:c8:db: 33:5b:d5:80:2f:f8:4d:47:90:53:5b:22:19:df:cf: 48:3d:8e:90:8e:19:88:db:03:8e:92:d1:50:a3:54: 67:9f:51:ed:96:a4:5e:dc:af:c5:03:5b:d7:6b:c6: 49:58:6a:48:ae:3a:fe:bb:c4:69:29:e0:5a:c6:ed: 13:ba:5b:98:af:23:86:09:6d:b5:94:fc:f3:73:57: 35:04:d1:7d:f4:74:b7:18:8b:89:b3:a3:e4:cb:24: 6c:5a:fa:1c:a5:4d:d9:1e:1b:2b:04:12:d7:8f:2a: 18:cf:db:14:7a:42:d7:d0:1d:22:68:a7:45:34:47: ff:b1:dd:03:91:f5:ae:73:03:19:97:83:11:98:e2: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CE:10:FC:06:4E:B3:8C:99:F1:DF:B4:9C:8A:BA:4B:E4:06:46:A2 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e3:ce:54:3f:a9:05:77:65:65:ec:67:e1:a8:9b:69:3f:6a: 7a:72:01:e6:2e:c4:c8:6d:5f:c7:86:5f:c3:0c:46:0f:f3:3a: 95:ee:b3:ae:0e:dc:be:c4:a7:94:20:97:2f:24:f8:39:2d:29: 99:96:8d:81:77:7a:06:9e:b2:f4:8e:68:6c:21:57:4c:07:22: 74:21:1d:2f:22:a8:86:bc:be:f0:f5:da:bf:bd:70:91:53:75: bb:81:66:5b:8e:58:0b:eb:3c:fe:42:cf:de:08:6d:6c:14:7e: ea:21:58:a3:86:5a:9f:cf:7d:1e:af:1d:1b:95:59:0d:00:15: 42:83:bb:a7:f0:4c:e4:83:ed:bb:8e:99:9f:c2:48:db:9b:59: 59:95:23:3d:dd:f7:84:33:0a:9f:3a:0b:f3:cb:88:ef:cb:c3: 6c:f3:0c:e1:16:c1:72:66:96:57:c0:0f:52:f4:a5:7a:55:9f: 40:c3:4b:da:10:77:18:fc:b6:cf:dd:e8:bb:67:85:e2:66:89: 56:8c:bb:be:d9:f3:c2:8e:22:e7:0d:b9:13:6e:b7:75:1c:02: d4:8f:4f:37:08:ab:97:60:2d:92:96:b5:51:d1:6b:48:1b:ea: 8b:b0:53:fd:c2:b2:18:41:1e:8f:eb:8d:84:26:72:49:04:40: 88:27:cd:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUwODA1MDM1MzUzWhcNMjUwODEyMDM1MzUzWjAYMRYwFAYD VQQDEw02ODkxODA1Mi1hN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn52HBu54cdtIWhmUyE1wJkw2pI9G/A8+vQS3YHJbziVWWz5tV6hA5OiDaDtG cTXnkKyrm40NYmTwigbqVXSSfQkA45BeW+UnR3l/IuXite/X9gpehVwQnYKkRYd6 H8r5Ru50JIQVYRfA5/AA34zzYa2CUXoQyNszW9WAL/hNR5BTWyIZ389IPY6QjhmI 2wOOktFQo1Rnn1HtlqRe3K/FA1vXa8ZJWGpIrjr+u8RpKeBaxu0TuluYryOGCW21 lPzzc1c1BNF99HS3GIuJs6PkyyRsWvocpU3ZHhsrBBLXjyoYz9sUekLX0B0iaKdF NEf/sd0DkfWucwMZl4MRmOKe6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLOEPwG TrOMmfHftJyKukvkBkaiMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP485UP6kFd2Vl7GfhqJtpP2p6cgHmLsTIbV/Hhl/DDEYP8zqV7rOu Dty+xKeUIJcvJPg5LSmZlo2Bd3oGnrL0jmhsIVdMByJ0IR0vIqiGvL7w9dq/vXCR U3W7gWZbjlgL6zz+Qs/eCG1sFH7qIVijhlqfz30erx0blVkNABVCg7un8Ezkg+27 jpmfwkjbm1lZlSM93feEMwqfOgvzy4jvy8Ns8wzhFsFyZpZXwA9S9KV6VZ9Aw0va EHcY/LbP3ei7Z4XiZolWjLu+2fPCjiLnDbkTbrd1HALUj083CKuXYC2SlrVR0WtI G+qLsFP9wrIYQR6P642EJnJJBECIJ83S -----END CERTIFICATE-----Generated at Thu Aug 7 03:28:06 2025 by rpki-client