$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: jT39fxz4BQrDnVAiIUL2vAQpRbanx/fOCM6TVGsjltk= Subject key identifier: 9E:25:11:05:33:D4:97:BF:CF:A7:C1:F2:D6:0A:1B:CC:DC:95:B6:C5 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 98 Signing time: Tue 05 Aug 2025 06:54:09 +0000 Manifest this update: Tue 05 Aug 2025 06:54:09 +0000 Manifest next update: Tue 12 Aug 2025 06:54:09 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: Dwv2RjieslkQjIc5qQw1/oaXmgXdE3dv79e2ajWwYj8=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Aug 5 06:54:09 2025 GMT Not After : Aug 12 06:54:09 2025 GMT Subject: CN=6891aa91-14c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:da:51:fd:57:b1:f5:d0:83:69:6c:2a:67: 41:81:3f:59:28:dd:26:2d:98:45:6b:4d:72:54:b0: b7:4f:44:1d:95:6c:55:7a:37:b6:9c:90:9c:25:37: b9:c6:5e:ee:32:77:07:ee:e1:be:3f:7f:66:91:73: e8:9a:cb:1c:a9:c1:43:68:ce:07:ec:73:9f:66:39: fd:22:34:90:e0:fa:24:c8:f5:7f:4f:8e:7c:cd:2c: a5:c7:c3:4d:2e:3a:9d:69:c0:e8:a2:13:f9:71:d7: 2d:a7:9f:f2:f0:ac:15:dc:37:c1:2a:80:07:2d:df: de:9a:6b:61:8a:5e:fb:ec:9b:c8:c2:01:be:1e:1c: 72:13:b5:aa:9b:b7:7e:a0:3b:2d:04:8a:4f:fa:ad: b8:e3:55:d4:b2:2c:b4:69:63:b9:cb:84:0d:2b:94: 83:14:f2:03:1a:8d:94:ba:ed:1e:01:e5:cf:08:3d: 8f:a8:02:c2:20:e9:e3:64:4c:91:77:a4:05:9d:e2: 51:1e:57:ad:c2:46:b8:bd:40:70:4d:20:95:20:5c: 3e:82:04:32:d0:fc:c5:6b:22:80:31:92:b9:1e:ca: 9a:b8:d9:f3:9e:5e:01:cb:b8:ec:d2:78:48:2d:9d: e9:dd:3c:bb:4a:4a:53:fd:bb:b2:d2:14:bc:79:1d: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:11:05:33:D4:97:BF:CF:A7:C1:F2:D6:0A:1B:CC:DC:95:B6:C5 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2c:f6:e0:dc:78:63:5f:a3:9c:b1:d9:c5:d8:fe:d7:3e:6d: e0:08:5d:5c:36:8f:dd:a3:ec:f2:11:2b:20:dc:bb:03:07:f1: a0:3d:c8:a8:ea:e9:82:46:d1:d9:4d:72:03:08:24:17:92:ad: f3:a5:04:c7:7a:66:79:02:2a:59:b6:8e:de:cc:99:c0:bb:ff: 3a:a9:67:f7:5e:4f:52:b3:a6:bc:32:3c:1d:86:ff:7e:cd:3f: f7:56:a1:46:01:a1:aa:5b:62:4d:99:1d:05:64:0e:18:06:1b: 5d:16:85:88:48:36:74:e2:66:a6:eb:9d:5e:49:00:fc:16:9e: 0d:51:7d:7c:7a:82:46:86:2c:57:bd:a5:cc:9c:00:10:be:0a: 30:1c:c8:f8:27:4a:a9:a9:60:18:ca:c0:0f:ed:30:51:2f:3a: a1:ec:65:41:73:65:67:5b:be:5a:4d:3b:1a:5a:cd:44:ba:a0: c1:2d:73:a7:62:2c:09:3c:53:6f:aa:3a:a3:af:79:c9:2f:5e: 59:61:75:20:72:ef:52:93:ed:f6:21:ec:29:07:59:d5:9e:c2: 90:9b:d3:80:84:e7:e8:29:b4:5e:aa:ed:e0:68:44:a7:63:0d: 2e:b7:ee:82:67:96:7a:b2:c3:ad:68:cc:74:8f:35:d0:e8:f1: f4:2d:22:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUwODA1MDY1NDA5WhcNMjUwODEyMDY1NDA5WjAYMRYwFAYD VQQDEw02ODkxYWE5MS0xNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLzaUf1XsfXQg2lsKmdBgT9ZKN0mLZhFa01yVLC3T0QdlWxVeje2nJCcJTe5 xl7uMncH7uG+P39mkXPomsscqcFDaM4H7HOfZjn9IjSQ4PokyPV/T458zSylx8NN LjqdacDoohP5cdctp5/y8KwV3DfBKoAHLd/emmthil777JvIwgG+HhxyE7Wqm7d+ oDstBIpP+q2441XUsiy0aWO5y4QNK5SDFPIDGo2Uuu0eAeXPCD2PqALCIOnjZEyR d6QFneJRHletwka4vUBwTSCVIFw+ggQy0PzFayKAMZK5HsqauNnznl4By7js0nhI LZ3p3Ty7SkpT/buy0hS8eR1mrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4lEQUz 1Je/z6fB8tYKG8zclbbFMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlLPbg3HhjX6OcsdnF2P7XPm3gCF1cNo/do+zyESsg3LsDB/GgPcio 6umCRtHZTXIDCCQXkq3zpQTHemZ5AipZto7ezJnAu/86qWf3Xk9Ss6a8Mjwdhv9+ zT/3VqFGAaGqW2JNmR0FZA4YBhtdFoWISDZ04mam651eSQD8Fp4NUX18eoJGhixX vaXMnAAQvgowHMj4J0qpqWAYysAP7TBRLzqh7GVBc2VnW75aTTsaWs1EuqDBLXOn YiwJPFNvqjqjr3nJL15ZYXUgcu9Sk+32IewpB1nVnsKQm9OAhOfoKbRequ3gaESn Yw0ut+6CZ5Z6ssOtaMx0jzXQ6PH0LSIY -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:29 2025 by rpki-client