$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: Zrxec5YjrVw5ut2Sz5OlnVluEn6Mauy4vXDrdaxnr3w= Subject key identifier: 7B:24:C1:2F:69:75:10:8A:73:78:27:89:08:6F:2E:69:CC:B1:DE:73 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: C0 Signing time: Sat 09 Aug 2025 06:16:19 +0000 Manifest this update: Sat 09 Aug 2025 06:16:18 +0000 Manifest next update: Sat 16 Aug 2025 06:16:18 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: 34Tk24YinnPE29k1jUnFw0N4ebAxMNgKQLF9/FXvCuY=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Aug 9 06:16:18 2025 GMT Not After : Aug 16 06:16:18 2025 GMT Subject: CN=6896e7b2-f285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:40:ca:61:44:37:55:a7:0b:2a:ea:37:db: 50:d5:c2:8d:5a:32:2a:ee:b3:e6:df:ad:d1:c6:42: 89:39:6e:82:53:2f:cd:ee:95:b9:7b:9d:d9:5c:c4: bd:23:c8:f2:c1:b8:d9:5f:e5:35:67:a3:c4:8f:82: 45:bf:42:d0:7c:8b:4f:91:df:93:0d:e9:01:b3:91: 93:49:32:fe:3f:64:1d:fb:12:f3:ce:3b:b9:25:05: 2d:b0:34:28:52:2f:e7:ed:7e:dd:7c:46:2a:a0:03: ff:28:7e:e2:51:aa:49:76:c1:3a:66:5d:e8:d3:bb: 8e:b6:37:95:22:47:e7:67:81:2a:bb:90:6b:c6:83: 05:2a:bc:92:fe:05:28:e2:fa:b3:24:c8:7c:24:16: d1:55:37:4b:60:5a:24:a5:e9:d2:6b:08:19:d5:ef: 70:fd:80:b1:45:a4:d6:5a:30:97:c0:e3:20:fb:84: 78:9d:b7:1f:28:12:92:46:7a:ee:b8:27:7e:51:7f: b7:f7:04:fa:a5:74:ae:e2:1c:83:2e:41:59:d4:3a: 08:0b:42:cb:e3:3b:84:ce:b0:9c:c2:ea:43:d6:01: e5:32:8f:ee:9b:1c:48:7e:34:ac:9c:21:5f:1b:6c: 7f:61:2e:ba:bc:bd:6e:14:87:03:18:5d:7d:d1:a8: ad:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:24:C1:2F:69:75:10:8A:73:78:27:89:08:6F:2E:69:CC:B1:DE:73 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:2a:c6:36:99:52:0a:ba:bf:09:24:7a:29:3f:0a:86:43:cc: ed:74:f1:95:e4:3c:bf:b5:50:ff:47:f3:36:b6:9c:56:ed:6a: 5e:9d:e9:e3:41:a5:fb:d3:df:62:ef:b5:ca:07:04:82:a1:33: f8:8a:4e:1d:72:b8:8a:53:d9:58:da:99:7e:2f:12:5c:dc:2a: b8:0b:52:8f:07:e5:97:0c:ff:60:29:1e:46:68:25:db:39:12: 8c:6b:dc:8a:54:b6:4c:07:23:9b:f7:15:29:9b:67:1e:35:69: 2f:6d:be:01:a2:ae:fa:28:c0:18:b0:9e:97:82:a1:df:30:8e: 53:b0:ee:41:01:39:f0:68:99:0f:d5:dd:0f:d2:35:25:73:22: 69:be:ee:3c:84:c3:d0:6f:12:e3:c1:ed:8e:33:2a:dc:ca:75: 09:70:05:fb:55:5f:bb:cc:64:ae:71:6f:94:f5:36:04:53:b2: f6:9f:34:ef:e2:78:60:e2:37:03:60:d4:b5:a1:3e:ed:83:d5: 73:1e:be:6a:45:5d:dc:5c:86:5c:76:58:74:e3:32:79:d7:fe: c4:79:ba:42:65:db:a7:c2:22:a6:17:ce:83:ab:92:d1:ee:19: 38:ee:71:6a:09:32:f5:2e:4a:4a:ed:48:39:9a:07:9e:8f:05: 26:05:5f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUwODA5MDYxNjE4WhcNMjUwODE2MDYxNjE4WjAYMRYwFAYD VQQDEw02ODk2ZTdiMi1mMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykhAymFEN1WnCyrqN9tQ1cKNWjIq7rPm363RxkKJOW6CUy/N7pW5e53ZXMS9 I8jywbjZX+U1Z6PEj4JFv0LQfItPkd+TDekBs5GTSTL+P2Qd+xLzzju5JQUtsDQo Ui/n7X7dfEYqoAP/KH7iUapJdsE6Zl3o07uOtjeVIkfnZ4Equ5BrxoMFKryS/gUo 4vqzJMh8JBbRVTdLYFokpenSawgZ1e9w/YCxRaTWWjCXwOMg+4R4nbcfKBKSRnru uCd+UX+39wT6pXSu4hyDLkFZ1DoIC0LL4zuEzrCcwupD1gHlMo/umxxIfjSsnCFf G2x/YS66vL1uFIcDGF190aitOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHskwS9p dRCKc3gniQhvLmnMsd5zMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjKsY2mVIKur8JJHopPwqGQ8ztdPGV5Dy/tVD/R/M2tpxW7Wpenenj QaX7099i77XKBwSCoTP4ik4dcriKU9lY2pl+LxJc3Cq4C1KPB+WXDP9gKR5GaCXb ORKMa9yKVLZMByOb9xUpm2ceNWkvbb4Boq76KMAYsJ6XgqHfMI5TsO5BATnwaJkP 1d0P0jUlcyJpvu48hMPQbxLjwe2OMyrcynUJcAX7VV+7zGSucW+U9TYEU7L2nzTv 4nhg4jcDYNS1oT7tg9VzHr5qRV3cXIZcdlh04zJ51/7EebpCZdunwiKmF86Dq5LR 7hk47nFqCTL1LkpK7Ug5mgeejwUmBV9u -----END CERTIFICATE-----Generated at Sun Aug 10 05:46:19 2025 by rpki-client