$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json) Hash identifier: qct/9nc3DPFUgyJ9XdmV/hbL7y4jm+fJCai9Vnjh1Co= Subject key identifier: 4C:54:04:8C:BF:CE:04:6A:8E:82:86:A2:6C:7F:6E:09:45:1D:5E:88 Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 30D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft Manifest number: 30B9 Signing time: Sun 10 Aug 2025 15:23:35 +0000 Manifest this update: Sun 10 Aug 2025 15:23:35 +0000 Manifest next update: Sun 17 Aug 2025 15:23:35 +0000 Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: 0CTv/moUMLYhgXgC4sQ7KljieIL3O2HJY/aNIu5DlrI=) 2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: 54WI7bxOwof+H1Cz8+uPiLZ+tzpprbk2GuCnR0w5MUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12498 (0x30d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Validity Not Before: Aug 10 15:23:35 2025 GMT Not After : Aug 17 15:23:35 2025 GMT Subject: CN=6898b977-a993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:ae:20:b4:bb:07:16:d4:04:07:c5:d4:cd: 17:a8:9f:83:0d:c1:b2:91:1f:2c:40:70:f1:0c:fb: ad:32:c8:2d:98:9c:0d:94:bd:06:84:0d:d8:4c:81: 04:4e:b2:ec:26:a7:b3:89:e9:9e:92:b4:c3:0b:6e: 8e:ad:3d:71:c0:87:ce:ea:cf:e1:2e:8b:cb:3f:47: 24:fc:73:c3:d2:d3:1e:02:0d:36:f9:2e:7f:2e:38: ff:09:49:7a:c4:d9:e3:21:7b:a2:b6:05:29:da:73: bf:d8:59:ca:1b:fa:f8:3b:01:84:08:72:be:d8:85: a9:7f:df:21:8b:8a:6e:55:54:ad:16:1b:b6:d9:1e: af:d7:b5:d9:08:33:37:13:ae:db:c8:9b:50:d3:ee: 35:58:4c:3b:3b:49:89:a6:16:48:51:9d:36:ba:15: 73:7d:b8:dd:9d:84:45:cc:39:8f:1f:4c:4d:11:d8: 5e:2d:2e:e7:fb:85:9f:44:eb:70:19:09:e0:72:a2: dd:fc:eb:bb:c4:3e:74:e8:43:7c:a0:d6:c4:31:bb: ab:d7:c5:79:ca:30:4f:12:a4:c7:ac:b5:89:d9:78: 76:82:9c:91:2e:5a:dd:d9:b2:98:b8:97:fc:4e:72: 82:d5:9b:06:29:f2:bd:3d:82:2c:00:43:cf:da:61: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:54:04:8C:BF:CE:04:6A:8E:82:86:A2:6C:7F:6E:09:45:1D:5E:88 X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b5:78:c7:1e:76:e0:fe:56:04:39:09:a8:2f:38:0a:1e:2e: 0b:87:4d:df:9f:80:51:93:b3:f9:0b:c4:d5:49:8f:80:6b:fb: d7:ec:ee:c3:d7:0e:bf:77:a2:ae:bb:e2:9a:ac:8e:44:f2:9b: 3b:d6:ae:74:89:4b:d6:e9:dd:97:a0:69:a7:6d:f5:b1:0c:4b: 9c:82:1b:8a:81:31:18:91:38:dc:e3:93:27:f7:7b:50:24:34: 41:a9:44:cc:95:e5:fb:67:f2:15:61:21:e0:98:0a:2c:cb:d2: 7d:40:a4:52:98:53:a5:c3:55:55:17:34:4a:19:b1:ab:de:b4: ac:17:82:1e:be:f4:98:f9:92:70:15:fb:2c:29:50:cf:8d:67: 73:7c:82:fc:c4:38:28:4e:c5:65:15:8b:47:50:35:1c:08:8b: 4b:ce:75:70:3b:7f:76:36:0d:1c:e4:a6:f0:ac:02:37:91:b7: 50:80:14:e8:05:62:4f:6a:b7:d7:e9:4f:80:83:21:6b:a8:04: ed:29:4b:df:7c:0a:a6:ba:d5:c5:fd:0e:a3:6e:a5:9a:28:c3: 73:34:d1:9f:1b:bc:33:92:aa:d5:00:54:0e:4e:17:7a:f6:cb: b6:03:cc:de:1d:95:c2:c5:3d:00:f2:9d:6a:71:22:fa:fa:5b: f5:7f:b6:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjUwODEwMTUyMzM1WhcNMjUwODE3MTUyMzM1WjAYMRYwFAYD VQQDEw02ODk4Yjk3Ny1hOTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWuuILS7BxbUBAfF1M0XqJ+DDcGykR8sQHDxDPutMsgtmJwNlL0GhA3YTIEE TrLsJqeziemekrTDC26OrT1xwIfO6s/hLovLP0ck/HPD0tMeAg02+S5/Ljj/CUl6 xNnjIXuitgUp2nO/2FnKG/r4OwGECHK+2IWpf98hi4puVVStFhu22R6v17XZCDM3 E67byJtQ0+41WEw7O0mJphZIUZ02uhVzfbjdnYRFzDmPH0xNEdheLS7n+4WfROtw GQngcqLd/Ou7xD506EN8oNbEMbur18V5yjBPEqTHrLWJ2Xh2gpyRLlrd2bKYuJf8 TnKC1ZsGKfK9PYIsAEPP2mEHhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExUBIy/ zgRqjoKGomx/bglFHV6IMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUEzNy82ODY4RTAyOEU3RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2 dmd1VW5lRHRnRGc1QmdWQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYtXjHHnbg/lYEOQmoLzgKHi4Lh03fn4BRk7P5C8TVSY+Aa/vX7O7D 1w6/d6Kuu+KarI5E8ps71q50iUvW6d2XoGmnbfWxDEucghuKgTEYkTjc45Mn93tQ JDRBqUTMleX7Z/IVYSHgmAosy9J9QKRSmFOlw1VVFzRKGbGr3rSsF4IevvSY+ZJw FfssKVDPjWdzfIL8xDgoTsVlFYtHUDUcCItLznVwO392Ng0c5KbwrAI3kbdQgBTo BWJParfX6U+AgyFrqATtKUvffAqmutXF/Q6jbqWaKMNzNNGfG7wzkqrVAFQOThd6 9su2A8zeHZXCxT0A8p1qcSL6+lv1f7ap -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:44 2025 by rpki-client