$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: 56KzVRfHs7sPrPSbF645Ka2vn59F6T7ruv3lBbdVzig= Subject key identifier: A5:16:4E:B7:2E:98:5A:90:D7:83:B3:E8:A1:3D:1A:55:44:C2:98:3B Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 07CA Signing time: Sun 10 Aug 2025 21:13:17 +0000 Manifest this update: Sun 10 Aug 2025 21:13:17 +0000 Manifest next update: Sun 17 Aug 2025 21:13:17 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: jcymgO5kKxANLRgbHwVkic7bJN1KrLBpDdP7w+QQyr0=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: qTxqjLafp1eHZVEFc07aPaguHdK/MmmTaVfaOIj+sXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: Aug 10 21:13:17 2025 GMT Not After : Aug 17 21:13:17 2025 GMT Subject: CN=68990b6d-65a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:c4:3f:06:3a:f6:ce:3a:c2:e8:27:ca:75: 10:c7:65:b5:74:5c:f2:2c:04:62:71:81:52:28:b9: 7c:28:4b:ed:33:9f:45:e3:23:45:ae:05:ca:3d:6a: 42:78:70:26:58:90:b4:75:b8:db:ba:55:ec:8f:89: b0:08:12:c5:30:1b:ca:8b:d8:22:26:56:22:4a:44: db:42:2c:42:9d:a0:f7:51:52:94:28:00:fc:ed:52: e6:9d:19:76:45:fb:f3:88:b3:0e:19:97:9a:22:01: 8c:58:61:a3:0b:01:b3:0e:b5:01:f8:87:e3:17:5a: ea:4a:75:69:cd:d3:a5:5c:72:09:d3:85:38:6c:6b: 9e:22:31:d4:30:bb:cb:ef:f2:77:d7:da:06:f9:e5: 07:f5:62:b4:98:58:9f:e7:af:bb:b3:96:bb:32:07: 67:32:8a:6a:8c:9b:b0:1d:be:81:00:8f:c9:f2:a5: 2e:78:49:19:76:e7:cf:06:c7:e2:2d:cd:bc:6f:a6: 94:b1:2e:4e:ee:3c:22:11:d4:d4:eb:44:f4:2d:43: 93:92:35:3f:65:a9:d7:8b:ff:c5:e0:27:40:b2:ee: 59:c7:f4:e9:95:1b:31:09:57:01:73:e0:5e:5f:85: c8:30:85:11:bb:5d:03:69:4d:1c:c0:5c:ef:71:06: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:4E:B7:2E:98:5A:90:D7:83:B3:E8:A1:3D:1A:55:44:C2:98:3B X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:64:1f:6d:17:cb:0b:93:f4:85:e8:95:7c:50:6e:4a:23:1f: 3f:e8:89:4b:24:a3:0e:e6:34:4f:6b:2e:41:a0:88:cd:44:c8: 67:7d:56:fd:90:41:59:50:78:cb:4c:1a:7a:d0:89:be:54:da: 2e:c8:b3:d8:40:90:3e:5d:df:99:0a:9b:e4:08:78:81:3c:40: 2b:b5:0a:0f:e8:7a:9b:1c:0d:e9:a8:f6:33:9d:8d:94:9f:bb: 5d:ac:fc:40:b6:eb:b3:23:c3:9b:b7:4a:85:8c:f1:99:c5:6c: 92:19:1a:8c:c3:bd:42:08:de:8e:22:90:17:09:e2:a5:e2:7b: e9:5f:4a:5e:d7:59:0a:4a:72:06:72:b6:b8:d2:65:6f:ab:79: 75:99:3d:c5:4b:74:89:2c:b7:4b:91:94:b7:92:e8:6f:b7:07: be:18:60:50:fd:3f:9e:93:a6:1c:13:22:6b:8c:f9:61:9b:ae: c3:b7:93:1d:67:c4:4a:58:f3:d3:fc:ce:b3:df:b1:db:b1:46: 8c:23:91:31:3a:f4:11:c3:12:bb:38:3d:39:2a:43:ee:d4:e7: ad:21:f1:de:40:bf:aa:49:34:2f:62:66:a7:ea:71:48:3a:db: 50:a7:6b:bc:9e:7d:47:b6:30:22:3c:5b:44:0b:35:28:8e:b5: bd:98:af:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjUwODEwMjExMzE3WhcNMjUwODE3MjExMzE3WjAYMRYwFAYD VQQDEw02ODk5MGI2ZC02NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkXEPwY69s46wugnynUQx2W1dFzyLARicYFSKLl8KEvtM59F4yNFrgXKPWpC eHAmWJC0dbjbulXsj4mwCBLFMBvKi9giJlYiSkTbQixCnaD3UVKUKAD87VLmnRl2 RfvziLMOGZeaIgGMWGGjCwGzDrUB+IfjF1rqSnVpzdOlXHIJ04U4bGueIjHUMLvL 7/J319oG+eUH9WK0mFif56+7s5a7MgdnMopqjJuwHb6BAI/J8qUueEkZdufPBsfi Lc28b6aUsS5O7jwiEdTU60T0LUOTkjU/ZanXi//F4CdAsu5Zx/TplRsxCVcBc+Be X4XIMIURu10DaU0cwFzvcQaPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUWTrcu mFqQ14Oz6KE9GlVEwpg7MB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZB9tF8sLk/SF6JV8UG5KIx8/6IlLJKMO5jRPay5BoIjNRMhnfVb9 kEFZUHjLTBp60Im+VNouyLPYQJA+Xd+ZCpvkCHiBPEArtQoP6HqbHA3pqPYznY2U n7tdrPxAtuuzI8Obt0qFjPGZxWySGRqMw71CCN6OIpAXCeKl4nvpX0pe11kKSnIG cra40mVvq3l1mT3FS3SJLLdLkZS3kuhvtwe+GGBQ/T+ek6YcEyJrjPlhm67Dt5Md Z8RKWPPT/M6z37HbsUaMI5ExOvQRwxK7OD05KkPu1OetIfHeQL+qSTQvYman6nFI OttQp2u8nn1HtjAiPFtECzUojrW9mK/y -----END CERTIFICATE-----Generated at Mon Aug 11 10:30:22 2025 by rpki-client