$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: 2dyo6AFLuvYxkiIZMxN3gVvEbpLhElmJYFH+rvPzxzU= Subject key identifier: 11:86:CA:F9:BE:21:C5:C0:53:FC:A9:E8:44:B5:71:0E:5C:E0:D6:08 Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0BEE Signing time: Fri 08 Aug 2025 19:05:43 +0000 Manifest this update: Fri 08 Aug 2025 19:05:42 +0000 Manifest next update: Fri 15 Aug 2025 19:05:42 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: XhZe8I42R8YRwe8JXoXRIbcIEYNz74J45W7X4kGo2UY=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: AhG5EQmnKsHYz3IRggOMcJqSh+00kQLALDjFL//vrE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Aug 8 19:05:42 2025 GMT Not After : Aug 15 19:05:42 2025 GMT Subject: CN=68964a87-764d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:b6:70:9a:6d:fc:26:19:26:09:57:2d:c9: 9e:ea:2b:ee:57:6b:23:04:43:fb:0b:07:d9:45:95: b0:38:3c:e9:55:e3:7b:cc:c9:46:c2:e0:0a:57:98: 2f:c9:30:3f:8b:1d:8b:ea:e2:ce:d7:ca:d0:53:2f: f5:41:14:fe:90:ca:e5:8e:48:aa:fa:0d:2a:3a:f2: 25:20:c6:07:5c:bb:79:b8:df:0e:0c:29:60:4a:0a: e8:cc:8b:f1:d9:c5:56:89:84:25:e6:ce:6b:86:33: ee:72:12:96:42:c9:39:ca:6a:31:e6:29:62:ca:66: e2:00:fc:e9:8c:ec:38:f6:9f:85:0b:cd:ba:21:0c: 29:d4:fd:16:dd:8a:d0:54:5c:62:c5:38:de:0e:26: 4d:b7:6c:08:40:7e:6a:c9:f9:85:00:e3:94:67:4b: b6:36:a8:8f:ae:2e:17:8f:df:38:38:e3:2b:3f:c1: 24:82:81:cb:01:7f:bc:00:1b:e1:de:49:c1:d3:63: f6:86:16:5a:a1:44:80:91:bb:36:ce:b9:5f:96:b7: 39:86:ba:3c:93:e2:09:69:1d:27:c9:eb:cf:c9:2f: 8a:18:78:b0:b7:b5:8e:e6:ed:06:a5:58:6b:a2:c3: 67:bc:62:e6:37:46:6b:56:82:fc:f9:bf:c2:33:19: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:CA:F9:BE:21:C5:C0:53:FC:A9:E8:44:B5:71:0E:5C:E0:D6:08 X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f7:85:a1:e3:02:89:af:df:19:90:f4:84:e7:c0:97:d5:12: 35:bd:b1:b5:b7:e2:74:0a:61:66:66:43:fa:15:a6:37:52:a7: 68:c4:1e:bb:30:72:83:55:19:ce:20:52:81:16:13:eb:f5:33: 5c:47:09:05:18:05:09:42:91:89:44:b3:b9:88:df:2b:72:d1: a0:55:8b:f8:9e:54:af:2f:27:d7:38:64:90:e8:a1:d3:d5:8f: 10:76:99:b8:57:95:b6:cf:54:9c:0c:62:6c:9f:fd:01:92:c6: e4:ee:3d:00:20:73:e2:dc:02:32:20:70:d7:9b:c3:06:95:90: 60:e1:6b:89:2f:7b:69:52:d1:8c:a0:37:09:6d:7b:29:07:92: 43:d0:1c:02:05:5b:92:61:91:c2:66:77:10:70:9f:63:b9:ca: 45:4f:0a:0e:1d:3a:c5:6e:52:0c:89:1b:35:6b:57:fd:4a:c6: 07:bb:c3:00:e3:58:de:7c:05:9c:da:ab:af:d0:41:a0:89:d8: 96:2a:cd:42:55:e2:58:ce:87:76:c6:ac:4d:68:73:ae:15:ef: d7:19:e7:49:2e:01:cc:c2:b1:bb:2d:c5:cf:ee:ff:a9:63:0c: 79:16:d5:ab:95:d2:4a:77:1e:26:4d:53:90:af:64:fa:d0:2f: 47:cf:5b:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjUwODA4MTkwNTQyWhcNMjUwODE1MTkwNTQyWjAYMRYwFAYD VQQDEw02ODk2NGE4Ny03NjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/W2cJpt/CYZJglXLcme6ivuV2sjBEP7CwfZRZWwODzpVeN7zMlGwuAKV5gv yTA/ix2L6uLO18rQUy/1QRT+kMrljkiq+g0qOvIlIMYHXLt5uN8ODClgSgrozIvx 2cVWiYQl5s5rhjPuchKWQsk5ymox5iliymbiAPzpjOw49p+FC826IQwp1P0W3YrQ VFxixTjeDiZNt2wIQH5qyfmFAOOUZ0u2NqiPri4Xj984OOMrP8EkgoHLAX+8ABvh 3knB02P2hhZaoUSAkbs2zrlflrc5hro8k+IJaR0nyevPyS+KGHiwt7WO5u0GpVhr osNnvGLmN0ZrVoL8+b/CMxkPOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGGyvm+ IcXAU/yp6ES1cQ5c4NYIMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC194Wh4wKJr98ZkPSE58CX1RI1vbG1t+J0CmFmZkP6FaY3UqdoxB67 MHKDVRnOIFKBFhPr9TNcRwkFGAUJQpGJRLO5iN8rctGgVYv4nlSvLyfXOGSQ6KHT 1Y8Qdpm4V5W2z1ScDGJsn/0Bksbk7j0AIHPi3AIyIHDXm8MGlZBg4WuJL3tpUtGM oDcJbXspB5JD0BwCBVuSYZHCZncQcJ9jucpFTwoOHTrFblIMiRs1a1f9SsYHu8MA 41jefAWc2quv0EGgidiWKs1CVeJYzod2xqxNaHOuFe/XGedJLgHMwrG7LcXP7v+p Ywx5FtWrldJKdx4mTVOQr2T60C9Hz1t/ -----END CERTIFICATE-----Generated at Sun Aug 10 10:35:58 2025 by rpki-client