$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: jnbxAFUdaSe4IzmcRH000/GgXfyzCTm2sQcjsCWh4H8= Subject key identifier: 27:03:E4:9E:FC:5F:4D:6B:D3:B5:3A:0D:9E:D8:97:AF:B5:05:BD:E4 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 04EB Signing time: Sun 10 Aug 2025 23:49:50 +0000 Manifest this update: Sun 10 Aug 2025 23:49:50 +0000 Manifest next update: Sun 17 Aug 2025 23:49:50 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: 5NcWqQ/K4+0CiTcdnzCJTOYOD3bdtLuq6rATmoPtXg4=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: Aug 10 23:49:50 2025 GMT Not After : Aug 17 23:49:50 2025 GMT Subject: CN=6899301e-2a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:69:5d:83:f8:97:6f:f6:bb:df:76:be:7f: aa:4c:c3:c1:0d:21:dc:b6:b9:4a:7a:a8:f9:bd:0b: f8:94:d1:88:12:98:f4:94:52:0a:ff:4d:36:45:08: db:74:c0:68:00:9a:71:57:88:e1:af:46:9e:30:63: a1:ae:e6:16:a4:0d:a6:0c:82:b3:cb:92:11:86:a9: af:b4:09:d0:1c:b0:c8:4b:1d:ad:a2:83:1b:6f:91: 72:a4:79:1d:8d:0f:ef:dc:06:4a:99:d6:93:08:f3: 25:5b:0a:d5:2a:44:a0:14:bb:15:9a:56:0e:cf:0c: f6:f4:c0:1b:cd:14:f6:9a:cd:dd:98:b4:40:ea:25: cb:29:79:a4:7b:5f:7a:15:bb:ad:57:da:d2:2b:a6: 33:6c:f6:6e:fd:90:09:90:e9:65:31:0d:28:68:bd: bc:6e:ef:36:1e:1b:17:19:dc:be:ef:fb:76:0a:7c: 9a:a5:3e:05:cc:15:a1:43:68:6f:0b:e9:4e:80:0f: b4:70:22:78:0f:ee:21:ae:62:4c:72:d3:62:dc:7e: 03:01:97:98:f2:9d:10:4d:54:44:b0:76:3a:b2:e0: 89:a4:9d:cd:e1:64:a5:df:64:d8:6c:57:fe:bf:ea: 4d:b4:1a:b2:ae:78:e2:3b:0a:b5:fc:7e:3a:23:a8: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:E4:9E:FC:5F:4D:6B:D3:B5:3A:0D:9E:D8:97:AF:B5:05:BD:E4 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5f:7b:4c:4d:a9:02:14:32:60:d4:94:a2:52:62:fe:3a:58: 0f:81:c5:0a:04:93:e7:b6:8e:47:ef:3f:da:42:19:4e:6f:3c: 98:59:31:ae:b0:54:2b:26:62:9b:f5:3e:83:09:d9:28:8d:44: 6a:5b:11:ee:07:bb:4b:e1:9a:a9:07:c6:1a:70:39:66:20:3d: f7:ed:92:9e:a5:33:ac:70:a6:ef:b2:11:fc:d5:3f:f7:91:06: 39:83:41:5b:ae:da:80:e9:8e:ae:73:73:89:1b:c5:29:ea:30: a0:a1:6e:6f:be:b9:2a:47:53:0c:87:5c:a4:85:b0:5d:0c:47: a3:63:b4:fa:ab:68:2a:9c:c3:65:92:15:7e:d5:10:1e:df:53: de:71:62:68:f6:c8:7c:c5:6a:78:c0:84:74:d6:06:19:e1:67: 28:46:ea:f5:56:91:ad:7b:28:cc:9a:69:ff:99:3e:05:9b:5e: 9d:f1:a3:ba:1c:5d:e9:18:94:c0:32:6a:76:1f:46:7f:c1:af: 83:3b:ea:5a:c8:38:26:67:9d:83:e0:34:ed:76:70:df:08:32: 86:31:c6:31:ce:ce:45:f3:e4:09:c5:fb:b9:11:0c:c5:5d:57: e1:2d:4a:fd:0c:50:8a:79:69:f0:5e:5a:88:06:35:b6:a2:d8: 5f:93:b4:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUwODEwMjM0OTUwWhcNMjUwODE3MjM0OTUwWjAYMRYwFAYD VQQDEw02ODk5MzAxZS0yYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuJpXYP4l2/2u992vn+qTMPBDSHctrlKeqj5vQv4lNGIEpj0lFIK/002RQjb dMBoAJpxV4jhr0aeMGOhruYWpA2mDIKzy5IRhqmvtAnQHLDISx2tooMbb5FypHkd jQ/v3AZKmdaTCPMlWwrVKkSgFLsVmlYOzwz29MAbzRT2ms3dmLRA6iXLKXmke196 FbutV9rSK6YzbPZu/ZAJkOllMQ0oaL28bu82HhsXGdy+7/t2CnyapT4FzBWhQ2hv C+lOgA+0cCJ4D+4hrmJMctNi3H4DAZeY8p0QTVREsHY6suCJpJ3N4WSl32TYbFf+ v+pNtBqyrnjiOwq1/H46I6j15QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcD5J78 X01r07U6DZ7Yl6+1Bb3kMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/X3tMTakCFDJg1JSiUmL+OlgPgcUKBJPnto5H7z/aQhlObzyYWTGu sFQrJmKb9T6DCdkojURqWxHuB7tL4ZqpB8YacDlmID337ZKepTOscKbvshH81T/3 kQY5g0FbrtqA6Y6uc3OJG8Up6jCgoW5vvrkqR1MMh1ykhbBdDEejY7T6q2gqnMNl khV+1RAe31PecWJo9sh8xWp4wIR01gYZ4WcoRur1VpGteyjMmmn/mT4Fm16d8aO6 HF3pGJTAMmp2H0Z/wa+DO+payDgmZ52D4DTtdnDfCDKGMcYxzs5F8+QJxfu5EQzF XVfhLUr9DFCKeWnwXlqIBjW2othfk7Tj -----END CERTIFICATE-----Generated at Wed Aug 13 00:30:25 2025 by rpki-client