$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft File: RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json) Hash identifier: c4LzIX2q0Fn+nmGxxfsV/eJMKWJvjMIIcvXHH07pJ34= Subject key identifier: 03:24:93:84:F1:6D:05:8C:97:2D:93:5E:E0:4D:F1:A4:3D:FA:B3:A0 Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E Certificate issuer: /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft Manifest number: 0126 Signing time: Mon 04 Aug 2025 14:54:00 +0000 Manifest this update: Mon 04 Aug 2025 14:53:59 +0000 Manifest next update: Mon 11 Aug 2025 14:53:59 +0000 Files and hashes: 1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: bSljYGjMJ08LRS7SOgVEtMGzEjifoASGpkqIVfFyxlw=) 2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: /mgu4P2twSDACdGUYPekQQEcvJH+CFlbuOsPxwdYvXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E Validity Not Before: Aug 4 14:53:59 2025 GMT Not After : Aug 11 14:53:59 2025 GMT Subject: CN=6890c987-11da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1f:eb:35:39:eb:09:40:97:a7:60:e1:0e:7d: b2:bd:6a:a2:43:ee:b7:d4:58:8d:9f:a8:c0:3c:55: e9:99:00:89:71:72:81:29:ee:e6:4a:51:b9:21:8a: 88:96:3f:ee:e2:47:27:af:53:bd:6c:f8:67:95:39: 1b:81:ad:ff:2f:69:eb:94:32:a6:5f:5c:8a:58:e9: 0f:a0:f9:3a:b6:79:67:c3:2b:28:50:76:59:8f:3b: f6:3f:a8:64:e4:18:f2:6e:f4:ac:03:09:3e:23:09: c9:73:9a:3b:3b:f5:fe:31:c3:da:bd:65:8c:41:7c: 40:da:4b:c2:35:05:8a:16:5e:d6:6c:4d:8e:eb:6b: ae:79:10:3d:4f:d8:2b:17:ea:67:ee:6f:7f:91:34: ef:50:12:74:b2:ea:13:e7:c7:bc:7e:fc:7f:96:2c: fa:99:9c:9b:7d:d7:9e:f4:a9:e5:af:d2:34:22:3e: cb:4a:81:34:f6:e2:4b:83:a3:9a:b2:71:22:9d:2f: 2c:ad:ce:8e:9e:24:f8:0b:38:eb:f0:e8:c7:1c:f2: 8c:e2:ca:df:53:58:1c:cc:3d:1a:9d:64:14:c9:c4: e9:3d:c4:06:d3:9f:b6:d0:2a:11:81:ad:7f:2f:5a: e9:51:b3:3f:62:16:79:6e:e3:4c:c0:7d:e9:5c:62: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:93:84:F1:6D:05:8C:97:2D:93:5E:E0:4D:F1:A4:3D:FA:B3:A0 X509v3 Authority Key Identifier: keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:62:c9:cc:d4:21:29:6d:08:2e:10:20:77:e4:0d:cb:e8:8e: 73:2e:91:32:dd:56:8c:62:6e:12:6b:c7:ab:52:cc:c0:f1:b2: 38:8e:43:bd:a5:ea:88:96:bc:b1:45:e6:60:c4:0a:c2:ab:99: 78:bf:38:5d:41:b4:65:ba:50:8b:ca:d3:2c:66:a2:2c:e4:3f: 6c:74:85:c9:b6:15:8d:3d:a9:62:54:1c:ea:8e:0c:88:b0:41: cc:90:1f:b5:2c:55:0c:cd:ce:bf:6d:ef:34:45:ab:86:34:45: c1:e3:cf:70:00:11:e0:17:82:e8:81:a9:c4:f4:66:74:24:bd: 08:d4:2a:54:1d:10:89:a7:a8:00:45:d8:43:8e:f4:82:af:ea: 6c:99:22:55:ce:bb:b3:7b:aa:d8:3c:4f:66:12:b2:5e:fe:4e: 45:de:84:59:43:81:ad:c0:f8:f2:3b:e9:54:ef:1c:be:c7:38: f9:33:b2:48:9c:90:f0:c3:55:cc:55:7c:71:b2:05:fb:f1:31: 9d:ed:1e:3d:dd:2c:dd:c0:14:a8:49:08:33:6f:aa:fc:b7:70: 2c:ed:b1:70:df:fc:96:f3:92:8c:79:e0:05:7c:05:45:84:40: b5:13:6c:61:ee:87:2a:1b:0e:d0:e6:ff:5f:d4:1d:33:35:e2: 28:da:ae:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDQ1OTRGMkVDMTdERjU2QzNEMDY1NDBGMzY2RDJBRjEx OEIzMTdGMUUwHhcNMjUwODA0MTQ1MzU5WhcNMjUwODExMTQ1MzU5WjAYMRYwFAYD VQQDEw02ODkwYzk4Ny0xMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7x/rNTnrCUCXp2DhDn2yvWqiQ+631FiNn6jAPFXpmQCJcXKBKe7mSlG5IYqI lj/u4kcnr1O9bPhnlTkbga3/L2nrlDKmX1yKWOkPoPk6tnlnwysoUHZZjzv2P6hk 5BjybvSsAwk+IwnJc5o7O/X+McPavWWMQXxA2kvCNQWKFl7WbE2O62uueRA9T9gr F+pn7m9/kTTvUBJ0suoT58e8fvx/liz6mZybfdee9Knlr9I0Ij7LSoE09uJLg6Oa snEinS8src6OniT4Czjr8OjHHPKM4srfU1gczD0anWQUycTpPcQG05+20CoRga1/ L1rpUbM/YhZ5buNMwH3pXGKaDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMkk4Tx bQWMly2TXuBN8aQ9+rOgMB8GA1UdIwQYMBaAFEWU8uwX31bD0GVA82bSrxGLMX8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC81REI1NTVBQUI4 REExMUVFQkM0QkVDMkRDNEY5QUUwMi9SWlR5N0JmZlZzUFFaVUR6WnRLdkVZc3hm eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JaVHk3QmZmVnNQUVpVRHpadEt2RVlzeGZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC81REI1NTVBQUI4REExMUVFQkM0QkVDMkRDNEY5QUUwMi9SWlR5N0JmZlZz UFFaVUR6WnRLdkVZc3hmeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDYsnM1CEpbQguECB35A3L6I5zLpEy3VaMYm4Sa8erUszA8bI4jkO9 peqIlryxReZgxArCq5l4vzhdQbRlulCLytMsZqIs5D9sdIXJthWNPaliVBzqjgyI sEHMkB+1LFUMzc6/be80RauGNEXB489wABHgF4LoganE9GZ0JL0I1CpUHRCJp6gA RdhDjvSCr+psmSJVzruze6rYPE9mErJe/k5F3oRZQ4GtwPjyO+lU7xy+xzj5M7JI nJDww1XMVXxxsgX78TGd7R493SzdwBSoSQgzb6r8t3As7bFw3/yW85KMeeAFfAVF hEC1E2xh7ocqGw7Q5v9f1B0zNeIo2q6L -----END CERTIFICATE-----Generated at Wed Aug 6 07:59:19 2025 by rpki-client