$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: LnU4B5nVIIdMS2zh1YyTejzj+7TbKo5DvRDdvTiCwVY= Subject key identifier: F0:18:1D:D3:98:9F:F5:B2:DB:DD:E4:F8:03:BD:39:09:4E:21:76:45 Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: A6 Signing time: Tue 05 Aug 2025 06:44:09 +0000 Manifest this update: Tue 05 Aug 2025 06:44:08 +0000 Manifest next update: Tue 12 Aug 2025 06:44:08 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: +iO4czXzupMCGEuWF5L9N1wLQzmFFtaKTBz5RSO9BfE=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: WB7ggddHEomyZcx3S7RLh6MvEgEJdGUHo6oxjSeOfsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: Aug 5 06:44:08 2025 GMT Not After : Aug 12 06:44:08 2025 GMT Subject: CN=6891a839-0300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:21:06:e7:e4:13:f3:5f:43:ac:34:eb:85: 09:c2:bb:d3:59:3d:fc:36:8d:a5:9d:1f:95:82:03: 55:8c:b3:d4:91:e0:c1:00:f7:15:02:1e:6d:2f:ad: 6f:44:81:28:5e:12:96:31:29:55:ff:7f:d9:d0:81: a8:be:c6:6f:67:0f:85:04:1d:ab:2c:54:72:81:92: 13:86:05:aa:af:92:e4:3e:26:91:b3:8d:7d:82:29: b4:e1:d5:a4:eb:ac:68:5c:48:c7:0a:af:7d:46:da: ba:ce:72:0d:d5:2a:b3:59:6a:a1:41:93:97:bc:97: a6:37:aa:2b:d3:f2:20:f3:4b:cb:1e:4d:ad:0e:9f: d2:d6:85:e7:08:3d:1c:17:f0:d7:39:48:ea:41:c3: 4f:4d:f4:51:5a:0e:fa:5a:95:81:e5:a8:5f:58:07: 25:c2:24:b7:6b:ce:17:15:dc:bd:d6:65:5f:74:fd: 2f:e6:9a:f6:58:db:b5:36:ae:d9:0f:e9:08:af:07: c7:88:e3:19:f0:00:02:f6:8e:59:35:02:6f:4a:20: 75:09:dc:d5:1c:41:ab:23:35:94:d4:c4:68:c5:29: d0:38:ff:49:0e:74:7d:86:8c:c6:a4:16:fc:7a:58: 3b:79:36:fe:9c:95:58:62:06:75:39:a9:0a:e7:49: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:18:1D:D3:98:9F:F5:B2:DB:DD:E4:F8:03:BD:39:09:4E:21:76:45 X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:93:42:94:b2:3a:9b:f8:89:1c:a9:a7:57:37:8a:8c:37:cb: ef:08:67:3d:31:66:7d:d6:1f:93:03:5a:ad:91:47:38:5c:d0: f4:72:24:f3:a8:c0:66:57:c0:d6:7d:0c:72:bc:5d:93:a2:1a: a3:39:b1:37:8c:bd:28:67:60:47:5c:be:00:f7:8c:60:34:ee: e8:da:d2:d1:40:3a:20:d4:3f:1b:88:8b:65:b6:39:19:21:6b: c2:0b:01:39:97:62:0e:e7:25:8c:cb:1a:e7:96:52:75:1d:63: 31:13:b9:0e:8b:7f:44:fc:e9:9c:da:1f:9a:ca:30:c7:e8:4b: 6c:3e:4b:d7:ee:fa:8d:18:12:d8:66:85:cb:b1:14:03:75:3c: 27:fb:7f:07:64:57:11:f7:66:9a:0f:52:20:c5:cf:2d:55:fd: 59:cd:d5:cb:a6:e2:c6:4f:bd:e5:1e:85:ad:23:af:e4:49:e4: 0b:d1:ce:63:25:bc:78:73:d4:e0:e7:f8:97:83:64:22:a5:40: 01:9d:89:99:cf:2d:06:be:41:72:ac:ca:50:cb:8e:31:25:9e: 31:81:25:6a:57:ad:70:aa:72:43:df:32:9d:e3:9d:0d:fc:b4: 32:cb:ae:7b:6f:43:a7:3a:1e:b3:b9:0a:b4:57:ad:ae:ae:dd: 5b:d1:8d:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3NTkxMTAvBgNVBAUTKDY0MTBCMzVBRDFBOEU5MUZFQkQ4NUI0NDM3NjY4QzJB NjlEQUE3REEwHhcNMjUwODA1MDY0NDA4WhcNMjUwODEyMDY0NDA4WjAYMRYwFAYD VQQDEw02ODkxYTgzOS0wMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2N0hBufkE/NfQ6w064UJwrvTWT38No2lnR+VggNVjLPUkeDBAPcVAh5tL61v RIEoXhKWMSlV/3/Z0IGovsZvZw+FBB2rLFRygZIThgWqr5LkPiaRs419gim04dWk 66xoXEjHCq99Rtq6znIN1SqzWWqhQZOXvJemN6or0/Ig80vLHk2tDp/S1oXnCD0c F/DXOUjqQcNPTfRRWg76WpWB5ahfWAclwiS3a84XFdy91mVfdP0v5pr2WNu1Nq7Z D+kIrwfHiOMZ8AAC9o5ZNQJvSiB1CdzVHEGrIzWU1MRoxSnQOP9JDnR9hozGpBb8 elg7eTb+nJVYYgZ1OakK50kQ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAYHdOY n/Wy293k+AO9OQlOIXZFMB8GA1UdIwQYMBaAFGQQs1rRqOkf69hbRDdmjCpp2qfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc1OS8xMDZDRkQ2NDc2 RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZSX3IyRnRFTjJhTUttbmFw OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc1OS8xMDZDRkQ2NDc2RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZS X3IyRnRFTjJhTUttbmFwOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIk0KUsjqb+IkcqadXN4qMN8vvCGc9MWZ91h+TA1qtkUc4XND0ciTz qMBmV8DWfQxyvF2TohqjObE3jL0oZ2BHXL4A94xgNO7o2tLRQDog1D8biItltjkZ IWvCCwE5l2IO5yWMyxrnllJ1HWMxE7kOi39E/Omc2h+ayjDH6EtsPkvX7vqNGBLY ZoXLsRQDdTwn+38HZFcR92aaD1Igxc8tVf1ZzdXLpuLGT73lHoWtI6/kSeQL0c5j Jbx4c9Tg5/iXg2QipUABnYmZzy0GvkFyrMpQy44xJZ4xgSVqV61wqnJD3zKd450N /LQyy657b0OnOh6zuQq0V62urt1b0Y3e -----END CERTIFICATE-----Generated at Wed Aug 6 10:56:48 2025 by rpki-client