$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json) Hash identifier: vIB3Z7bjyICtUlN8EWJF1J0e7PNabddeoCvBtL8/820= Subject key identifier: C3:C3:AF:DF:2A:DC:34:48:22:29:B7:F7:75:F5:7D:24:85:30:B7:2A Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft Manifest number: 53 Signing time: Mon 11 Aug 2025 07:35:05 +0000 Manifest this update: Mon 11 Aug 2025 07:35:04 +0000 Manifest next update: Mon 18 Aug 2025 07:35:04 +0000 Files and hashes: 1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: ZHUsZohrcyuTUjEI1nQqIFwfWkwNcFipt2hFwP5JmSM=) 2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: 6uK19EDHQqPyaVVXXtHQJXfGGnOJLngyIEFvwQHYfKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A Validity Not Before: Aug 11 07:35:04 2025 GMT Not After : Aug 18 07:35:04 2025 GMT Subject: CN=68999d29-22fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:46:5d:1f:84:37:9c:2d:49:57:69:77:df: 3e:88:5c:98:62:d4:db:4a:01:68:1e:c2:4f:a9:56: 03:6b:b6:d0:0a:c8:1b:fc:0e:33:35:ce:26:cd:08: b1:26:d7:9e:06:ea:98:49:46:bd:86:2a:5e:81:76: 09:e8:04:a3:20:2a:fd:ce:19:7f:82:0d:4e:cd:6c: b3:8d:20:34:d8:70:45:e5:02:85:cf:bf:f7:94:08: 2f:df:d6:f0:47:5a:23:e4:72:22:3a:81:9e:bf:2d: c8:4a:7a:03:7e:1c:4b:19:d4:c4:f2:90:57:48:26: 83:7c:a1:66:38:bc:a3:d6:4c:fc:27:c4:3f:79:bb: c2:44:57:35:51:fc:92:d9:91:27:f7:2e:30:00:be: 09:42:23:24:e5:3b:a3:4a:96:3b:b6:79:43:b5:19: fe:70:28:2e:9f:6f:c6:ec:29:08:e7:f7:e0:04:54: 47:56:d7:02:e4:fa:d8:4f:35:51:61:3f:93:f0:ca: 5a:c9:c2:ab:9c:0b:54:b7:0f:bb:bf:13:e2:5e:f8: 8a:e9:a1:3a:2c:fd:e3:70:31:c3:2e:8e:cc:ae:b3: 72:49:80:24:db:fa:0c:51:9d:64:fa:9c:ec:74:42: dd:a4:aa:6d:25:ad:4d:b3:5d:c5:d1:9f:ea:86:21: 0d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C3:AF:DF:2A:DC:34:48:22:29:B7:F7:75:F5:7D:24:85:30:B7:2A X509v3 Authority Key Identifier: keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c9:84:74:95:89:0f:e0:ba:8e:dc:c1:8d:7c:3c:00:10:1e: b9:1c:e0:26:51:cb:68:08:9e:39:92:91:99:f9:d5:55:a6:93: e0:85:07:c5:6e:88:8d:21:80:af:e6:7b:2d:c5:5c:f6:93:e6: 1d:7a:4f:17:12:c0:ca:a1:2e:d7:ca:92:b7:75:d4:0c:b6:68: b3:75:50:7f:e8:43:82:9d:58:ea:cc:b6:c5:35:86:fd:a3:96: a5:c1:ba:fe:42:b2:01:06:b7:72:0b:d7:bd:3b:ff:f8:94:62: 65:46:51:95:a8:7b:26:8b:44:6e:47:5d:78:15:ae:85:8b:f9: 43:05:f7:b5:ce:87:55:95:d5:99:b7:8a:8a:fb:ba:25:0e:ef: 9e:04:ad:53:82:ab:23:a9:25:bd:49:ac:49:4d:40:c4:81:59: d6:93:d6:b2:fb:31:99:63:ac:bd:b2:3f:26:57:65:31:1e:e1: b6:4d:e4:82:32:7e:ba:38:09:50:5d:91:3b:96:23:6b:0d:52: 6a:73:0b:59:0b:81:72:e0:26:b9:c3:9d:2c:78:29:d6:0e:4b: 9a:71:d4:06:58:c2:b5:08:1b:ba:a0:87:96:0a:e9:18:50:8c: 6d:ed:16:aa:57:66:ee:86:e4:fa:8a:f7:27:06:1f:03:cb:e5: b9:77:76:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTQ2RDExMC8GA1UEBRMoNjY0RTU5QTAwMEI5MUU3MkY4MDNFNkQ4Njg0MTE1NEM4 MDU2Qjg4QTAeFw0yNTA4MTEwNzM1MDRaFw0yNTA4MTgwNzM1MDRaMBgxFjAUBgNV BAMTDTY4OTk5ZDI5LTIyZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTj0ZdH4Q3nC1JV2l33z6IXJhi1NtKAWgewk+pVgNrttAKyBv8DjM1zibNCLEm 154G6phJRr2GKl6BdgnoBKMgKv3OGX+CDU7NbLONIDTYcEXlAoXPv/eUCC/f1vBH WiPkciI6gZ6/LchKegN+HEsZ1MTykFdIJoN8oWY4vKPWTPwnxD95u8JEVzVR/JLZ kSf3LjAAvglCIyTlO6NKlju2eUO1Gf5wKC6fb8bsKQjn9+AEVEdW1wLk+thPNVFh P5PwylrJwqucC1S3D7u/E+Je+IrpoTos/eNwMcMujsyus3JJgCTb+gxRnWT6nOx0 Qt2kqm0lrU2zXcXRn+qGIQ0hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw8Ov3yrc NEgiKbf3dfV9JIUwtyowHwYDVR0jBBgwFoAUZk5ZoAC5HnL4A+bYaEEVTIBWuIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNDZEL0VDQjAwQjQyMDAz NzExRjBCQkQ3MjQ3NUM0RjlBRTAyL1prNVpvQUM1SG5MNEEtYllhRUVWVElCV3VJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWms1Wm9BQzVIbkw0QS1iWWFFRVZUSUJXdUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NDZEL0VDQjAwQjQyMDAzNzExRjBCQkQ3MjQ3NUM0RjlBRTAyL1prNVpvQUM1SG5M NEEtYllhRUVWVElCV3VJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIHJhHSViQ/guo7cwY18PAAQHrkc4CZRy2gInjmSkZn51VWmk+CFB8Vu iI0hgK/mey3FXPaT5h16TxcSwMqhLtfKkrd11Ay2aLN1UH/oQ4KdWOrMtsU1hv2j lqXBuv5CsgEGt3IL1707//iUYmVGUZWoeyaLRG5HXXgVroWL+UMF97XOh1WV1Zm3 ior7uiUO754ErVOCqyOpJb1JrElNQMSBWdaT1rL7MZljrL2yPyZXZTEe4bZN5IIy fro4CVBdkTuWI2sNUmpzC1kLgXLgJrnDnSx4KdYOS5px1AZYwrUIG7qgh5YK6RhQ jG3tFqpXZu6G5PqK9ycGHwPL5bl3dow= -----END CERTIFICATE-----Generated at Wed Aug 13 05:28:28 2025 by rpki-client