$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: G+Vi5VPEDqsixWo+YLHkmvm+mj/AMr33qWVibBp8/gI= Subject key identifier: 32:CC:1A:53:04:28:7E:87:93:6B:72:8F:C3:2D:FD:30:6E:4C:56:32 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 012B Signing time: Thu 07 Aug 2025 05:21:12 +0000 Manifest this update: Thu 07 Aug 2025 05:21:12 +0000 Manifest next update: Thu 14 Aug 2025 05:21:11 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: o7HsnfFkEdiakZnOknY3ZPBKcmDk8gFSKZkCBG45LD0=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Aug 7 05:21:12 2025 GMT Not After : Aug 14 05:21:11 2025 GMT Subject: CN=689437c8-0c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:3c:f6:68:bd:c5:ff:39:ef:af:6a:19:fc: fe:e9:cb:8a:45:91:bd:28:cf:ef:30:0c:54:19:fc: e4:40:b0:6e:4e:09:64:de:0a:fe:72:67:03:75:b6: fe:14:8b:c5:dc:82:ce:96:52:d6:3f:b7:24:23:ce: aa:70:86:81:12:7c:97:9b:e7:b5:49:97:08:0c:24: 5c:e2:57:38:4c:c5:68:47:4f:df:ed:59:c5:d6:eb: 32:b3:51:7f:02:42:8b:20:6b:0c:1a:10:c6:0e:93: 8b:55:09:cd:21:53:15:f3:5c:c4:10:93:35:48:f6: ec:f7:cc:ce:9d:2f:f8:02:30:5c:ce:85:f4:1d:08: 7f:cb:57:17:5d:9f:c7:ab:b3:93:2d:ba:0e:2e:13: ad:0a:ae:cd:8d:b3:f5:c9:98:57:5d:5e:0e:79:15: fb:d4:b6:9a:4a:58:f0:b2:4c:58:d3:31:13:79:92: 42:6a:2b:46:88:d3:bb:44:96:64:37:fd:6c:ba:11: c7:67:58:b8:21:01:7d:fe:e1:a1:b8:3a:74:c6:f0: 2e:2e:a1:0b:e8:6b:ae:7b:c3:c9:5a:2c:1c:c2:d6: 4c:df:16:7e:f9:8d:68:a6:67:d9:8b:4f:c8:42:57: 7d:62:eb:07:fd:99:d7:b2:0c:5b:a4:46:d3:0e:de: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CC:1A:53:04:28:7E:87:93:6B:72:8F:C3:2D:FD:30:6E:4C:56:32 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6e:b4:7d:6e:26:55:1b:9c:95:f7:60:0c:02:45:bb:d8:6c: f4:f6:80:1d:5b:64:05:59:d5:6e:5e:42:e6:1f:dd:64:c6:b0: b6:71:d0:b6:87:fd:0e:b3:80:d0:85:d3:4b:c3:40:50:f8:11: d1:ea:94:6f:aa:45:26:76:42:5a:11:db:6c:4b:2c:16:b2:05: f5:40:1f:0f:65:5b:e7:93:7d:dc:bd:d9:eb:9d:67:02:8c:a4: 0d:f7:d7:f8:38:4b:54:82:72:59:4c:7b:48:17:a4:36:e3:d3: c9:93:5b:64:43:2b:5c:a8:46:e0:a0:c3:47:20:09:fe:15:f0: 50:92:4c:51:7d:9d:77:b2:56:97:00:4a:48:32:69:d0:1e:ed: 29:5f:08:da:b6:46:b5:44:db:0b:2a:f6:7a:66:95:2e:5e:f8: 67:e6:23:04:85:f0:f4:0d:3b:7d:1c:38:cb:cb:89:5b:c5:aa: bb:f6:9e:36:35:ad:d3:2b:c6:02:b5:50:61:fd:9e:1d:3a:a7: e7:6b:c7:f4:37:3b:d3:1b:c6:d1:ec:37:87:19:5d:a8:c8:bf: 1e:b8:ad:ee:73:96:06:57:be:21:df:12:7e:7c:76:0e:5d:ba: ee:9b:79:db:62:2b:ef:a0:19:e6:14:73:1d:ab:9e:44:eb:df: ea:04:da:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUwODA3MDUyMTEyWhcNMjUwODE0MDUyMTExWjAYMRYwFAYD VQQDEw02ODk0MzdjOC0wYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VQ89mi9xf85769qGfz+6cuKRZG9KM/vMAxUGfzkQLBuTglk3gr+cmcDdbb+ FIvF3ILOllLWP7ckI86qcIaBEnyXm+e1SZcIDCRc4lc4TMVoR0/f7VnF1usys1F/ AkKLIGsMGhDGDpOLVQnNIVMV81zEEJM1SPbs98zOnS/4AjBczoX0HQh/y1cXXZ/H q7OTLboOLhOtCq7NjbP1yZhXXV4OeRX71LaaSljwskxY0zETeZJCaitGiNO7RJZk N/1suhHHZ1i4IQF9/uGhuDp0xvAuLqEL6Guue8PJWiwcwtZM3xZ++Y1opmfZi0/I Qld9YusH/ZnXsgxbpEbTDt6jvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLMGlME KH6Hk2tyj8Mt/TBuTFYyMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPbrR9biZVG5yV92AMAkW72Gz09oAdW2QFWdVuXkLmH91kxrC2cdC2 h/0Os4DQhdNLw0BQ+BHR6pRvqkUmdkJaEdtsSywWsgX1QB8PZVvnk33cvdnrnWcC jKQN99f4OEtUgnJZTHtIF6Q249PJk1tkQytcqEbgoMNHIAn+FfBQkkxRfZ13slaX AEpIMmnQHu0pXwjatka1RNsLKvZ6ZpUuXvhn5iMEhfD0DTt9HDjLy4lbxaq79p42 Na3TK8YCtVBh/Z4dOqfna8f0NzvTG8bR7DeHGV2oyL8euK3uc5YGV74h3xJ+fHYO Xbrum3nbYivvoBnmFHMdq55E69/qBNoc -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:43 2025 by rpki-client