$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: YD/eTEbqcCx6G/zWISEQ7j2AAW5b+sjlPTm6ueMPdwk= Subject key identifier: 2D:38:AC:61:2D:00:E4:32:BD:2F:0D:44:B1:6E:73:B9:6D:ED:EF:C7 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 0839 Signing time: Sun 10 Aug 2025 20:45:00 +0000 Manifest this update: Sun 10 Aug 2025 20:45:00 +0000 Manifest next update: Sun 17 Aug 2025 20:45:00 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: 7hUGrUwwixksXRssABLgFLyK42MoTBJV6kMv/Yl+Sr0=) 2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8=) 3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: 1CIYo//bwjYUMyQBStYQUQ8rbC/A2KlKjD1S8BvGyiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Aug 10 20:45:00 2025 GMT Not After : Aug 17 20:45:00 2025 GMT Subject: CN=689904cc-2d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:f4:2d:f0:f9:f8:c8:b6:39:37:b7:55:4e: 52:dd:cb:8b:77:33:42:87:cc:40:45:c9:93:82:67: 79:0f:56:64:5b:ff:77:60:da:bc:d8:11:68:53:93: b2:d1:dd:ba:52:be:6f:4d:0c:c2:72:17:41:5c:30: b6:33:1d:e2:e9:bc:06:9c:38:f3:32:96:0b:b4:56: b8:0e:94:12:58:dc:bb:a4:5d:8e:9f:c0:9a:86:43: 8c:83:9a:a8:28:ac:4f:b3:55:0a:b1:75:21:52:84: 35:2a:23:72:73:f8:35:9b:bf:6f:5c:e4:c5:b1:67: 89:69:9a:a1:79:f0:f9:29:06:a6:a0:7c:d7:30:64: a7:ef:c0:4d:22:d3:a3:bf:69:e0:cd:01:bd:56:64: a9:55:16:d4:c0:e2:ae:cc:d7:3a:53:29:3f:5a:22: e3:a9:cb:e3:6f:04:8f:aa:89:2b:a9:73:de:e0:42: 51:5c:6b:40:cd:1e:08:34:42:7d:7b:77:72:6c:a0: f0:92:79:a1:58:d1:06:cd:80:72:b9:b1:cc:8d:ee: ab:61:a0:2c:d5:d2:17:02:e4:2c:25:bd:75:a5:6d: a2:59:20:16:11:f4:4f:4f:43:ca:a0:70:ea:30:a8: 21:82:74:80:95:b3:c7:84:ee:5c:47:a1:76:c0:f9: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:38:AC:61:2D:00:E4:32:BD:2F:0D:44:B1:6E:73:B9:6D:ED:EF:C7 X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:25:93:d0:21:9d:cd:37:81:b2:06:12:a2:43:88:f2:05:b1: c4:1a:33:65:3f:f4:87:97:c4:36:7b:4b:1e:29:a5:00:3d:0b: dc:40:26:89:d4:1a:64:fd:58:cc:38:15:74:c1:cd:b9:b2:af: a8:53:cf:4e:6e:f9:0f:b9:24:f4:77:8f:bf:11:20:96:09:d3: f4:ea:74:69:e3:13:3b:6d:94:bc:d2:6c:5e:2d:77:0f:09:ad: 96:1f:51:b0:77:ce:65:75:e8:52:fd:51:1e:f9:36:ef:8f:43: 3f:ea:87:fa:e6:fa:a4:22:f1:f6:de:32:30:3f:8e:5e:f2:13: 66:66:e5:24:f9:c3:4b:d6:a3:f3:3b:67:bd:d6:7e:8e:d5:07: 73:d7:3a:e0:d8:7d:b2:50:e6:4f:ff:2d:89:a4:59:70:fe:6c: a0:b5:1a:77:6a:5d:4e:10:c7:4f:db:1e:90:6e:72:75:7b:08: d4:01:89:3e:6b:5f:59:76:9b:7d:12:95:a5:38:f5:8a:dc:e5: 44:f7:e5:1b:96:1e:41:08:74:e6:9e:62:7c:33:0e:38:f8:d0: 12:d7:76:8b:0f:dc:36:65:a8:cc:c3:14:93:3c:65:3e:52:b4: 42:cc:4c:b8:ab:27:8c:f1:98:e6:ba:d4:e2:92:c2:34:c6:f1: 2e:c7:37:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjUwODEwMjA0NTAwWhcNMjUwODE3MjA0NTAwWjAYMRYwFAYD VQQDEw02ODk5MDRjYy0yZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wr0LfD5+Mi2OTe3VU5S3cuLdzNCh8xARcmTgmd5D1ZkW/93YNq82BFoU5Oy 0d26Ur5vTQzCchdBXDC2Mx3i6bwGnDjzMpYLtFa4DpQSWNy7pF2On8CahkOMg5qo KKxPs1UKsXUhUoQ1KiNyc/g1m79vXOTFsWeJaZqhefD5KQamoHzXMGSn78BNItOj v2ngzQG9VmSpVRbUwOKuzNc6Uyk/WiLjqcvjbwSPqokrqXPe4EJRXGtAzR4INEJ9 e3dybKDwknmhWNEGzYByubHMje6rYaAs1dIXAuQsJb11pW2iWSAWEfRPT0PKoHDq MKghgnSAlbPHhO5cR6F2wPlNCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC04rGEt AOQyvS8NRLFuc7lt7e/HMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsJZPQIZ3NN4GyBhKiQ4jyBbHEGjNlP/SHl8Q2e0seKaUAPQvcQCaJ 1Bpk/VjMOBV0wc25sq+oU89ObvkPuST0d4+/ESCWCdP06nRp4xM7bZS80mxeLXcP Ca2WH1Gwd85ldehS/VEe+Tbvj0M/6of65vqkIvH23jIwP45e8hNmZuUk+cNL1qPz O2e91n6O1Qdz1zrg2H2yUOZP/y2JpFlw/mygtRp3al1OEMdP2x6QbnJ1ewjUAYk+ a19Zdpt9EpWlOPWK3OVE9+Ublh5BCHTmnmJ8Mw44+NAS13aLD9w2ZajMwxSTPGU+ UrRCzEy4qyeM8ZjmutTiksI0xvEuxzdZ -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:42 2025 by rpki-client