$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: xmLy5WzhXOC1rKeOciEWROJSb8Zi32Kb9vIbk9hpYiE= Subject key identifier: 9E:1D:25:39:3A:9A:AE:E2:71:6A:D9:79:C7:20:BC:FA:9D:F9:E2:DF Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 0822 Signing time: Wed 06 Aug 2025 21:11:36 +0000 Manifest this update: Wed 06 Aug 2025 21:11:36 +0000 Manifest next update: Wed 13 Aug 2025 21:11:36 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: W8Lc8IRPgU2UkgoH03khi2syzB2OCn2rRynqc8VwDmo=) 2: 5CC56600558F11F084E6F15EC4F9AE02.roa (hash: xIBKPrrFFxiQYfc9KkaEQ4EE2NMobEqzAjMwpy97Iaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: Aug 6 21:11:36 2025 GMT Not After : Aug 13 21:11:36 2025 GMT Subject: CN=6893c508-4801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:a9:fb:1e:46:42:61:02:bb:3b:07:eb:fd: 80:aa:1f:a2:55:43:3f:99:8b:01:85:7f:83:7e:99: d4:dd:c3:c0:38:5f:d3:68:34:73:a5:20:58:60:f1: 56:64:2e:58:d7:b5:96:c5:6a:36:89:44:ef:04:43: 9d:07:71:fd:5f:5c:74:ee:0d:2b:af:90:5f:18:9d: 1e:88:11:8a:ba:ed:8c:68:fe:3f:ab:c8:63:b0:ac: 36:2b:fe:12:9b:d7:9f:ff:99:2c:c1:64:7f:50:8b: 05:e5:32:29:ac:e5:cd:7c:69:0e:b8:5b:de:77:6d: 4e:35:e6:15:14:0f:7e:9c:e7:45:81:7f:75:e8:e2: 31:9b:8f:51:84:d7:c3:b4:fc:b7:f1:10:26:96:7b: 9b:e3:23:b9:33:f2:21:af:35:42:5f:43:82:b3:71: 4d:50:61:8a:5e:75:c5:c2:bb:d6:f0:b3:d7:ee:be: da:93:b1:3e:5e:4a:07:73:79:e9:f1:a9:c3:ec:5b: 18:bf:95:20:72:4d:fa:2d:8f:ca:f6:ff:ba:0b:80: 89:1b:9b:d3:3b:ab:65:a0:2b:69:4d:22:32:7e:d3: fa:c1:ca:1c:e0:30:cb:fd:2d:30:67:f0:06:93:af: 72:c8:fa:09:4a:8a:5b:07:1e:3a:bc:7b:c9:ec:52: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1D:25:39:3A:9A:AE:E2:71:6A:D9:79:C7:20:BC:FA:9D:F9:E2:DF X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:eb:82:5f:ed:41:ca:c9:51:9e:c5:92:3d:57:01:3a:9d:d8: 88:a7:bb:32:68:ed:3e:e9:23:e2:09:c9:81:33:5d:31:1b:2f: 23:65:1a:cf:fb:62:20:3b:7a:b6:7a:91:24:42:cf:a6:d4:96: c3:53:99:28:5b:e3:51:1a:ba:5c:63:aa:96:26:0f:44:56:86: 14:4f:23:47:1f:0a:ac:a4:b0:1e:fd:19:c8:27:59:49:ef:94: d2:be:18:be:ad:e7:7b:71:6b:80:5d:ff:fb:b4:d3:3b:78:fe: 73:2b:07:55:d5:dc:58:56:27:8d:29:d6:d0:1a:e9:af:dc:89: 02:44:03:1f:44:4c:9c:08:ed:67:2b:18:1e:27:6a:70:b0:8c: ec:a0:c6:a0:a2:b0:51:1d:99:2a:a6:c3:13:09:3b:99:07:60: 6a:2e:ff:08:94:26:85:99:f0:aa:5a:66:1f:3c:f6:64:6f:31: 11:cd:b8:b7:4b:5e:f9:23:5d:a1:8a:e5:c2:d2:6f:d2:d9:1e: e7:89:09:65:57:92:e2:48:c3:2c:ea:a1:69:a3:6b:99:8e:5c: cc:9f:59:92:08:5d:99:0e:f2:b0:84:93:16:a6:f3:9c:c2:65: 39:45:d5:25:51:aa:2a:81:32:5a:96:6e:4e:32:6b:ee:02:79: 9a:17:d1:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUwODA2MjExMTM2WhcNMjUwODEzMjExMTM2WjAYMRYwFAYD VQQDEw02ODkzYzUwOC00ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDap+x5GQmECuzsH6/2Aqh+iVUM/mYsBhX+DfpnU3cPAOF/TaDRzpSBYYPFW ZC5Y17WWxWo2iUTvBEOdB3H9X1x07g0rr5BfGJ0eiBGKuu2MaP4/q8hjsKw2K/4S m9ef/5kswWR/UIsF5TIprOXNfGkOuFved21ONeYVFA9+nOdFgX916OIxm49RhNfD tPy38RAmlnub4yO5M/IhrzVCX0OCs3FNUGGKXnXFwrvW8LPX7r7ak7E+XkoHc3np 8anD7FsYv5Ugck36LY/K9v+6C4CJG5vTO6tloCtpTSIyftP6wcoc4DDL/S0wZ/AG k69yyPoJSopbBx46vHvJ7FImrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4dJTk6 mq7icWrZeccgvPqd+eLfMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk64Jf7UHKyVGexZI9VwE6ndiIp7syaO0+6SPiCcmBM10xGy8jZRrP +2IgO3q2epEkQs+m1JbDU5koW+NRGrpcY6qWJg9EVoYUTyNHHwqspLAe/RnIJ1lJ 75TSvhi+red7cWuAXf/7tNM7eP5zKwdV1dxYVieNKdbQGumv3IkCRAMfREycCO1n KxgeJ2pwsIzsoMagorBRHZkqpsMTCTuZB2BqLv8IlCaFmfCqWmYfPPZkbzERzbi3 S175I12hiuXC0m/S2R7niQllV5LiSMMs6qFpo2uZjlzMn1mSCF2ZDvKwhJMWpvOc wmU5RdUlUaoqgTJalm5OMmvuAnmaF9G/ -----END CERTIFICATE-----Generated at Fri Aug 8 20:42:42 2025 by rpki-client