$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: 6GGOorYWX8t6R80bWSTRLSeRzWZ14PfcLhUWC+NaiJg= Subject key identifier: 0C:14:0A:F0:6E:84:E9:97:3C:5A:06:17:37:BC:93:05:AB:F9:47:96 Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 08E6 Signing time: Tue 12 Aug 2025 20:40:55 +0000 Manifest this update: Tue 12 Aug 2025 20:40:54 +0000 Manifest next update: Tue 19 Aug 2025 20:40:54 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: Vm76auKNP6yamNTDF28r2MpcXYeRMJd82OnROPCqeb8=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: D7lMNLpl3a55d9FcjuAmjfTmqkh4ktfxiUbFr9P5BYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: Aug 12 20:40:54 2025 GMT Not After : Aug 19 20:40:54 2025 GMT Subject: CN=689ba6d7-1e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:a5:21:dc:4d:4a:a7:c3:42:b5:f9:2f:43: cd:3f:c9:c2:f3:ef:a5:e1:6a:75:d8:43:c6:c1:e8: 4a:be:29:c4:21:28:a9:d0:c0:54:86:92:86:95:d4: cb:c7:5c:57:6b:70:72:34:0d:65:b2:b8:54:20:07: 4d:28:41:d2:f1:81:21:21:82:7e:aa:ee:a4:78:ab: f2:12:e1:6c:3d:f5:78:b0:1f:0e:3d:e7:97:a2:ec: 1b:97:b1:33:73:87:ca:00:6b:20:df:b4:16:f5:ad: b6:32:38:25:c3:6d:84:77:2f:14:57:33:0a:c6:54: ad:bf:6b:af:58:09:e0:68:ee:a7:ad:66:2e:eb:6f: e3:6a:8d:0d:c7:79:f6:25:82:db:7a:1a:b1:dc:b4: a7:3e:ec:5d:60:ab:96:53:ce:e0:a3:a4:28:c8:06: ca:c6:0e:86:bd:0d:5e:55:8a:a4:c7:7c:b3:53:05: c9:fd:cf:be:73:8c:fb:49:be:01:01:47:32:06:64: 3b:dd:3e:a8:97:dc:06:97:b1:95:9e:ac:54:b1:81: b0:6e:32:f9:15:8c:56:8e:9b:64:cd:cb:f1:c4:19: 48:10:ab:be:fe:8b:5c:92:1e:5c:4d:66:1f:18:29: 3e:fa:79:47:ef:0d:b7:4f:b9:e2:a0:bf:85:d9:37: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:14:0A:F0:6E:84:E9:97:3C:5A:06:17:37:BC:93:05:AB:F9:47:96 X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:44:57:c7:32:4d:a3:81:79:4d:5c:9f:4a:d4:7d:4b:ce:c0: be:7f:6c:d8:ce:75:bc:6a:6a:35:02:34:eb:88:15:3f:ad:0e: b0:03:d8:56:0a:4c:ac:99:f5:45:aa:4d:f2:3d:e3:ef:77:62: 16:16:a9:e4:31:91:85:4d:a3:2c:fb:d0:6d:8a:6a:16:dd:ed: 08:71:a0:12:ba:1b:9d:89:c3:c0:66:3c:9d:58:74:19:f2:0f: f2:fd:b2:28:79:33:b6:89:f3:4d:86:26:62:a2:ee:34:94:40: 79:f5:56:e7:74:28:be:44:0d:a1:81:e4:ed:be:36:2a:14:11: ff:7b:a4:07:58:b1:2f:b5:b3:67:1b:1d:6a:5d:7e:bb:78:ec: 8b:78:a9:a8:15:25:97:8f:ad:e7:52:1a:88:ff:c8:38:34:b6: 21:c2:96:44:0b:91:f9:45:16:60:2e:92:4c:2c:bb:4a:fa:3c: 5b:6b:10:b4:5f:ca:68:07:48:36:e4:bb:b1:be:e4:74:ed:72: e6:d0:52:1d:b9:0a:8a:e0:36:01:f9:12:84:8e:9f:92:ed:cd: 25:f0:fb:da:74:ad:9e:64:af:58:77:05:26:4a:fa:21:4b:d3: 10:28:60:39:2e:a9:a3:ea:b1:9c:cb:b7:25:2b:bc:a6:f1:a1: 22:2b:dc:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjUwODEyMjA0MDU0WhcNMjUwODE5MjA0MDU0WjAYMRYwFAYD VQQDEw02ODliYTZkNy0xZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMOlIdxNSqfDQrX5L0PNP8nC8++l4Wp12EPGwehKvinEISip0MBUhpKGldTL x1xXa3ByNA1lsrhUIAdNKEHS8YEhIYJ+qu6keKvyEuFsPfV4sB8OPeeXouwbl7Ez c4fKAGsg37QW9a22Mjglw22Edy8UVzMKxlStv2uvWAngaO6nrWYu62/jao0Nx3n2 JYLbehqx3LSnPuxdYKuWU87go6QoyAbKxg6GvQ1eVYqkx3yzUwXJ/c++c4z7Sb4B AUcyBmQ73T6ol9wGl7GVnqxUsYGwbjL5FYxWjptkzcvxxBlIEKu+/otckh5cTWYf GCk++nlH7w23T7nioL+F2TcWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwUCvBu hOmXPFoGFze8kwWr+UeWMB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuRFfHMk2jgXlNXJ9K1H1LzsC+f2zYznW8amo1AjTriBU/rQ6wA9hW CkysmfVFqk3yPePvd2IWFqnkMZGFTaMs+9BtimoW3e0IcaASuhudicPAZjydWHQZ 8g/y/bIoeTO2ifNNhiZiou40lEB59VbndCi+RA2hgeTtvjYqFBH/e6QHWLEvtbNn Gx1qXX67eOyLeKmoFSWXj63nUhqI/8g4NLYhwpZEC5H5RRZgLpJMLLtK+jxbaxC0 X8poB0g25LuxvuR07XLm0FIduQqK4DYB+RKEjp+S7c0l8PvadK2eZK9YdwUmSvoh S9MQKGA5Lqmj6rGcy7clK7ym8aEiK9yt -----END CERTIFICATE-----Generated at Wed Aug 13 02:47:35 2025 by rpki-client