$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: yBBWU8Pa0rLOQB4ZwrubUBuQqTGfZQXA1IdYTRE04eQ= Subject key identifier: 4E:E2:25:CA:A5:8A:13:8B:C3:DC:06:31:5E:05:5E:1C:47:6F:31:83 Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2A1F Signing time: Wed 06 Aug 2025 17:04:49 +0000 Manifest this update: Wed 06 Aug 2025 17:04:48 +0000 Manifest next update: Wed 13 Aug 2025 17:04:48 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: WgMX7+fvoy6rtIDIPpTp2dfjxH36MdKdlw1UQ6ygURw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Aug 6 17:04:48 2025 GMT Not After : Aug 13 17:04:48 2025 GMT Subject: CN=68938b30-2d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:24:a2:b5:7e:5c:95:cf:13:83:29:2e:58: 2f:92:b1:a5:68:93:5a:eb:d4:1a:a8:68:52:12:c6: 89:4a:22:4a:58:65:15:dd:72:9b:37:99:22:13:af: 54:25:3e:d7:a9:57:79:4c:e3:2c:89:1e:5f:c1:39: 6b:d4:cd:01:46:6e:70:4e:aa:32:90:bc:ac:08:94: 77:1e:c7:c3:78:8e:be:3b:4c:67:84:42:37:82:55: d1:52:98:bf:d2:bc:99:8b:74:d9:aa:be:44:ee:fd: a9:63:6d:30:4d:64:84:81:41:90:12:29:b1:54:05: 67:8e:19:12:1f:21:91:8a:09:5a:1a:f6:ca:5f:8a: e3:87:7b:8f:f7:1b:00:1d:6a:5b:55:76:c0:d9:27: c2:43:d5:4a:a7:80:4f:3b:7c:34:a3:c6:94:5b:48: 3c:a5:eb:33:d2:d6:14:09:12:0d:c7:99:99:4a:1d: 95:44:70:c5:29:e2:ca:fa:35:28:4a:3a:1d:d8:01: 77:a5:d2:c8:cc:18:77:51:d9:73:4b:52:dd:68:79: b1:d0:ab:69:24:04:a7:7d:82:3e:4a:fc:5b:04:a3: 68:28:02:e5:02:4e:72:b2:a2:cc:c9:20:3f:c9:fe: 26:d0:29:e9:db:3b:8a:9a:6c:62:43:7a:7c:73:bb: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E2:25:CA:A5:8A:13:8B:C3:DC:06:31:5E:05:5E:1C:47:6F:31:83 X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e2:e8:8d:cb:27:3f:da:34:24:02:50:77:b5:93:3f:58:88: 61:78:d8:56:16:73:16:21:35:27:c1:30:a4:a4:fa:55:3f:fb: a8:1f:3a:29:3d:30:75:11:25:b3:fa:55:54:5b:3f:7f:36:56: 6c:91:e8:32:47:6c:64:b8:80:06:56:54:ad:8a:6c:1f:a9:b6: 9e:01:0c:19:94:38:a8:b0:bb:7b:44:79:a2:32:6a:8a:ae:f4: 2b:49:a5:42:e1:54:6e:10:bf:a1:d4:2f:b4:c1:74:c3:76:d3: 26:8a:9b:89:f9:49:c8:c2:93:cc:c4:36:8e:14:5a:7f:50:92: 36:09:5b:34:04:2d:03:c6:3d:50:92:c3:24:f9:ba:6a:2d:e9: e7:3d:22:b4:21:c3:bf:50:9a:d4:fa:ec:04:41:e6:31:af:9c: 7b:a9:08:42:1f:eb:38:55:1e:7a:5f:e3:5d:19:c4:af:dd:fd: 5c:53:13:bb:0e:7e:24:0a:90:48:86:df:89:d1:bc:75:a4:e7: 40:4f:9c:20:34:e8:8b:cf:4d:3b:c9:e0:2f:d1:9f:4d:29:a3: f2:8f:cb:84:41:73:69:d4:96:f9:b1:4f:8e:92:a2:9a:09:7c: 1a:82:4a:b7:ae:2f:c0:ea:10:46:e0:54:79:d5:7d:ce:25:f2: 40:3f:6a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUwODA2MTcwNDQ4WhcNMjUwODEzMTcwNDQ4WjAYMRYwFAYD VQQDEw02ODkzOGIzMC0yZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I0korV+XJXPE4MpLlgvkrGlaJNa69QaqGhSEsaJSiJKWGUV3XKbN5kiE69U JT7XqVd5TOMsiR5fwTlr1M0BRm5wTqoykLysCJR3HsfDeI6+O0xnhEI3glXRUpi/ 0ryZi3TZqr5E7v2pY20wTWSEgUGQEimxVAVnjhkSHyGRiglaGvbKX4rjh3uP9xsA HWpbVXbA2SfCQ9VKp4BPO3w0o8aUW0g8pesz0tYUCRINx5mZSh2VRHDFKeLK+jUo Sjod2AF3pdLIzBh3UdlzS1LdaHmx0KtpJASnfYI+SvxbBKNoKALlAk5ysqLMySA/ yf4m0Cnp2zuKmmxiQ3p8c7vgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7iJcql ihOLw9wGMV4FXhxHbzGDMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA84uiNyyc/2jQkAlB3tZM/WIhheNhWFnMWITUnwTCkpPpVP/uoHzop PTB1ESWz+lVUWz9/NlZskegyR2xkuIAGVlStimwfqbaeAQwZlDiosLt7RHmiMmqK rvQrSaVC4VRuEL+h1C+0wXTDdtMmipuJ+UnIwpPMxDaOFFp/UJI2CVs0BC0Dxj1Q ksMk+bpqLennPSK0IcO/UJrU+uwEQeYxr5x7qQhCH+s4VR56X+NdGcSv3f1cUxO7 Dn4kCpBIht+J0bx1pOdAT5wgNOiLz007yeAv0Z9NKaPyj8uEQXNp1Jb5sU+OkqKa CXwagkq3ri/A6hBG4FR51X3OJfJAP2qf -----END CERTIFICATE-----Generated at Fri Aug 8 13:10:06 2025 by rpki-client