$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: ochrI3B9StP9TV1EO/Sn4AdqwqmgiHWcDPzSNLi40Rk= Subject key identifier: AA:C3:89:13:97:B4:F7:C6:14:02:B6:EA:11:2D:C6:F2:96:3B:6F:F0 Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: B9 Signing time: Fri 08 Aug 2025 22:23:07 +0000 Manifest this update: Fri 08 Aug 2025 22:23:06 +0000 Manifest next update: Fri 15 Aug 2025 22:23:06 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: Re/AYHyaEIpPXPJDEMAgtPSb1gR+NMFv2Q2kTTVH39k=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: sv5lUJDA6AnF6C7zo5VgHahgAG0mo9/6mAvGr0va81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Aug 8 22:23:06 2025 GMT Not After : Aug 15 22:23:06 2025 GMT Subject: CN=689678ca-2f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:00:5a:66:f7:cb:cb:f6:98:33:59:c5:aa:22: 2f:58:a6:fb:a7:6d:39:62:fb:9c:38:56:d9:ad:03: d9:89:4a:62:fb:43:61:8f:a0:ed:fc:78:33:79:bd: c9:ad:cb:5c:7d:d6:c2:a2:dc:d8:96:d8:cd:7e:5d: 78:0c:da:ee:c3:3a:74:a5:42:0f:79:93:6c:8c:57: 6b:fe:98:f9:f8:56:c3:c5:b8:12:c3:11:0a:a9:c3: fa:76:ab:d6:ca:29:1a:7e:4c:09:f7:d5:a0:c0:ef: b0:1a:94:48:35:71:f1:f1:cc:d9:a8:c5:e9:2d:d7: ca:5c:0f:02:b1:d0:8b:a9:51:56:ee:da:59:77:9f: 78:50:9b:14:ac:41:30:ce:7f:c5:66:1b:ea:9d:f4: 92:5c:58:55:36:9a:f7:30:cf:50:f5:10:d3:7b:f9: 82:a3:c0:52:2e:ca:f4:20:e1:78:8b:5d:3b:70:be: a1:a8:91:d6:23:cb:e7:d3:c2:c5:3d:b9:cd:3e:f3: 3b:46:11:db:4e:20:c1:38:da:8d:4c:78:40:06:80: 3c:47:f8:84:1f:7c:0b:0c:01:d3:04:c9:0b:a5:2c: 05:ac:97:ca:8b:4c:f3:fb:01:98:de:93:5d:f8:48: 1a:c6:7c:ef:e3:39:5d:03:f7:77:83:c7:12:dd:26: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C3:89:13:97:B4:F7:C6:14:02:B6:EA:11:2D:C6:F2:96:3B:6F:F0 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:28:a6:be:fc:70:ac:ea:0f:bb:1a:81:23:c0:a5:97:fb:6b: df:65:55:51:e2:3a:08:a0:e6:3e:64:a9:29:37:44:fd:f7:6b: 9d:14:32:04:72:50:90:ec:2f:ed:9e:10:1e:06:0d:75:2b:d8: 95:04:a8:77:09:47:56:3d:08:5b:28:81:8b:e0:4a:ce:94:37: 83:da:9c:38:2d:75:83:2c:67:55:20:62:f7:bc:71:47:cf:16: 96:58:b2:37:44:16:80:a3:6d:aa:82:19:6d:f7:4a:2a:8d:27: 19:7b:6a:42:b2:e0:99:c3:66:7c:cf:32:ef:b9:b1:ef:38:9f: 36:c2:88:d7:92:d0:ab:f0:5c:b1:00:e3:52:76:e8:06:a9:b4: 28:00:c9:12:13:db:7a:de:9f:55:96:37:45:d0:7c:88:84:64: 54:52:13:85:96:c1:b6:e8:bb:7f:a9:9b:3c:6e:70:73:b0:b7: 4f:07:c7:e7:6e:d8:df:9b:0e:28:8a:a1:33:f0:73:58:fc:fa: 1b:bc:4e:fb:bf:7c:31:fa:6f:46:72:af:f8:98:4e:5c:7e:63: 32:4b:ce:90:fc:3d:49:4b:79:d6:6f:71:d1:26:da:89:6e:ca: 7c:cd:f9:6f:50:94:3b:63:13:01:58:c4:43:b8:8b:7d:b0:50: 58:cf:ae:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjUwODA4MjIyMzA2WhcNMjUwODE1MjIyMzA2WjAYMRYwFAYD VQQDEw02ODk2NzhjYS0yZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gBaZvfLy/aYM1nFqiIvWKb7p205YvucOFbZrQPZiUpi+0Nhj6Dt/Hgzeb3J rctcfdbCotzYltjNfl14DNruwzp0pUIPeZNsjFdr/pj5+FbDxbgSwxEKqcP6dqvW yikafkwJ99WgwO+wGpRINXHx8czZqMXpLdfKXA8CsdCLqVFW7tpZd594UJsUrEEw zn/FZhvqnfSSXFhVNpr3MM9Q9RDTe/mCo8BSLsr0IOF4i107cL6hqJHWI8vn08LF PbnNPvM7RhHbTiDBONqNTHhABoA8R/iEH3wLDAHTBMkLpSwFrJfKi0zz+wGY3pNd +Egaxnzv4zldA/d3g8cS3SYkiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrDiROX tPfGFAK26hEtxvKWO2/wMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0 czk4NkhFMlhEeXFvWEtyWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvKKa+/HCs6g+7GoEjwKWX+2vfZVVR4joIoOY+ZKkpN0T992udFDIE clCQ7C/tnhAeBg11K9iVBKh3CUdWPQhbKIGL4ErOlDeD2pw4LXWDLGdVIGL3vHFH zxaWWLI3RBaAo22qghlt90oqjScZe2pCsuCZw2Z8zzLvubHvOJ82wojXktCr8Fyx AONSdugGqbQoAMkSE9t63p9VljdF0HyIhGRUUhOFlsG26Lt/qZs8bnBzsLdPB8fn btjfmw4oiqEz8HNY/PobvE77v3wx+m9Gcq/4mE5cfmMyS86Q/D1JS3nWb3HRJtqJ bsp8zflvUJQ7YxMBWMRDuIt9sFBYz65u -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:44 2025 by rpki-client