$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: UdiYpH9udFw5cVEWzs1C9ceZ/U45D8ysE55BjawUlwQ= Subject key identifier: 47:86:62:27:D6:08:7F:28:9C:4B:23:EB:1A:F5:CB:8D:11:A5:E5:69 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E4B Signing time: Fri 08 Aug 2025 17:58:28 +0000 Manifest this update: Fri 08 Aug 2025 17:58:27 +0000 Manifest next update: Fri 15 Aug 2025 17:58:27 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: vwTUDQbHgXiVyg+RNW7aif2prmgD88pPYvNZXrRudIg=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3673 (0xe59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Aug 8 17:58:27 2025 GMT Not After : Aug 15 17:58:27 2025 GMT Subject: CN=68963ac3-aae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:17:5f:9c:84:73:2e:4e:1c:ba:75:75:eb: 96:2b:f1:11:79:17:e5:bd:5e:97:9b:61:0f:50:21: 74:d5:3c:d2:65:fe:b7:64:f2:97:1b:51:07:cf:8b: 18:13:37:d3:3a:9f:12:b9:af:fd:b8:ba:0b:63:7a: 21:2d:33:e6:01:20:52:59:48:b3:15:9a:14:62:6b: 51:15:46:83:97:07:07:c0:6f:07:4e:17:72:7d:85: 71:9e:dc:fa:bc:6a:a2:20:71:d1:fb:15:30:3f:98: 9d:84:99:a4:2a:54:68:82:3d:fe:a1:94:34:88:8e: 4e:f8:ba:75:54:7c:ec:b9:bc:a3:5f:f0:3d:bf:a2: 78:7a:2e:d7:42:b3:57:b8:70:1d:0f:57:47:6c:1f: ac:95:b8:bb:68:98:45:e4:a9:ec:53:86:1d:48:9b: 77:0c:18:49:39:60:cb:28:0e:de:cc:a5:88:2b:be: 46:13:c8:4e:94:6b:30:07:3a:bb:7b:eb:55:66:72: 78:79:d9:e9:64:1f:32:2b:00:47:80:d0:33:63:c0: 1f:b3:36:b3:37:2d:0b:f2:06:d7:55:6a:3e:48:15: 06:f7:c8:9c:30:2c:5e:1d:5b:7c:67:cb:46:17:66: 48:59:df:aa:6f:05:99:03:9b:7e:fd:43:72:1b:7c: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:86:62:27:D6:08:7F:28:9C:4B:23:EB:1A:F5:CB:8D:11:A5:E5:69 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:33:49:72:fe:17:a1:27:4d:66:fa:c3:c8:5f:56:7a:18:d5: b2:7f:c4:0e:e9:68:0b:fa:78:c8:17:4c:72:8b:54:a9:97:ac: 19:b8:09:26:6e:e7:31:a9:2b:78:64:2b:30:5a:e5:10:8b:06: 55:1f:e7:49:e3:c1:4f:ca:c6:12:29:d3:ab:dc:d0:c3:7e:9b: d1:0e:c9:07:37:dd:32:03:fa:17:52:ae:3e:1b:11:9a:70:e5: 43:3b:30:8a:ed:13:b7:29:b9:55:e8:01:20:82:1b:bc:10:f5: f4:9c:30:c3:c1:7a:eb:93:db:c0:da:2c:15:ac:e2:bf:63:e2: b2:60:d0:c5:30:4c:ef:c9:b0:7a:61:9a:ec:5b:ee:71:af:db: 18:db:eb:e5:58:34:66:dd:74:7d:45:4e:8b:68:ef:52:72:d9: a8:bf:9a:6a:e4:92:bd:28:97:cf:48:d2:44:4e:7d:9e:3f:2c: 38:9d:7b:f2:9e:bc:ec:58:9c:06:e8:d4:05:63:12:22:f9:5e: 7b:23:a3:66:d7:4c:ef:be:72:d5:63:b1:16:f9:2a:96:a8:b7: 93:a9:08:d3:b2:94:eb:72:f8:7f:17:50:2e:1c:4b:9c:05:6c: 97:82:f0:86:67:b6:82:1f:00:5d:26:03:8f:33:c2:2f:7a:a1: d0:dc:11:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUwODA4MTc1ODI3WhcNMjUwODE1MTc1ODI3WjAYMRYwFAYD VQQDEw02ODk2M2FjMy1hYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CgXX5yEcy5OHLp1deuWK/EReRflvV6Xm2EPUCF01TzSZf63ZPKXG1EHz4sY EzfTOp8Sua/9uLoLY3ohLTPmASBSWUizFZoUYmtRFUaDlwcHwG8HThdyfYVxntz6 vGqiIHHR+xUwP5idhJmkKlRogj3+oZQ0iI5O+Lp1VHzsubyjX/A9v6J4ei7XQrNX uHAdD1dHbB+slbi7aJhF5KnsU4YdSJt3DBhJOWDLKA7ezKWIK75GE8hOlGswBzq7 e+tVZnJ4ednpZB8yKwBHgNAzY8AfszazNy0L8gbXVWo+SBUG98icMCxeHVt8Z8tG F2ZIWd+qbwWZA5t+/UNyG3xTYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeGYifW CH8onEsj6xr1y40RpeVpMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHM0ly/hehJ01m+sPIX1Z6GNWyf8QO6WgL+njIF0xyi1Spl6wZuAkm bucxqSt4ZCswWuUQiwZVH+dJ48FPysYSKdOr3NDDfpvRDskHN90yA/oXUq4+GxGa cOVDOzCK7RO3KblV6AEgghu8EPX0nDDDwXrrk9vA2iwVrOK/Y+KyYNDFMEzvybB6 YZrsW+5xr9sY2+vlWDRm3XR9RU6LaO9Sctmov5pq5JK9KJfPSNJETn2ePyw4nXvy nrzsWJwG6NQFYxIi+V57I6Nm10zvvnLVY7EW+SqWqLeTqQjTspTrcvh/F1AuHEuc BWyXgvCGZ7aCHwBdJgOPM8IveqHQ3BFw -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:34 2025 by rpki-client