$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: uEAEWIqr+1ehtgJuXpeRWFuKkrxwAGmj9uyjN8f3IOE= Subject key identifier: 9F:FA:6B:E1:63:8A:B0:31:E3:BA:6D:1B:63:16:DC:A9:34:CC:42:3A Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 0876 Signing time: Mon 04 Aug 2025 20:56:13 +0000 Manifest this update: Mon 04 Aug 2025 20:56:13 +0000 Manifest next update: Mon 11 Aug 2025 20:56:13 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: isgG54vpaFH/Sezav6bCKL7nHm8xO7d+ieq1ruPdheA=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: f9tQPToB76p1pPXGROGF6QphrQQvfLBw4Gw3PGjwt1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Aug 4 20:56:13 2025 GMT Not After : Aug 11 20:56:13 2025 GMT Subject: CN=68911e6d-dd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:e9:58:1a:15:a6:7a:f3:d3:94:16:f1:15: 2c:b0:55:5a:9f:f8:08:55:2b:98:69:c8:67:96:58: 2b:12:b0:2b:51:c4:0e:8b:ef:d2:e0:5f:3e:40:3c: 8f:5c:d2:e9:2a:23:79:18:25:e7:7d:08:1d:71:60: 70:c8:74:5f:a3:04:2d:08:68:fc:1d:00:8d:20:86: c1:c4:13:ae:96:46:3a:f7:c0:b0:8c:5b:a9:e0:09: 98:ee:b0:d4:1c:7c:ce:c6:e7:86:eb:42:7e:16:af: 29:41:41:20:99:50:54:06:ae:f8:d8:f2:cc:50:5c: d2:31:d1:4a:56:0e:0f:bf:48:55:1e:f6:b0:0c:12: 20:fe:3c:79:ec:86:c8:6b:16:7a:f4:91:a0:8f:f3: 38:b6:56:7b:f2:25:a0:22:b6:d5:f6:c0:d2:de:db: c5:09:57:4b:21:8c:d9:78:df:63:e9:84:4e:09:f7: b8:33:70:11:ae:f0:4d:38:8c:c8:f9:79:fa:b3:8a: 95:7a:e0:2b:33:aa:d9:97:be:65:6b:d9:01:24:18: 0f:46:1d:60:17:2c:59:8c:8e:3e:2c:17:5f:fd:57: 05:5f:e4:b2:a0:a4:dc:be:44:8e:cc:9b:0b:3e:a0: a8:6d:63:36:82:58:a1:c5:7f:5b:b3:ed:37:ef:24: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FA:6B:E1:63:8A:B0:31:E3:BA:6D:1B:63:16:DC:A9:34:CC:42:3A X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a3:c6:42:19:9a:c3:16:9f:5b:ef:32:7e:f4:82:80:26:5a: 34:d2:85:02:2f:b9:d0:ce:90:8f:c0:86:ef:d0:3e:9b:32:37: c6:fb:ba:ea:10:cf:9f:dc:ee:25:be:4f:9b:14:1c:1e:e2:49: 83:50:23:52:a0:43:73:d5:4f:50:5b:a0:01:96:c6:fb:8b:e2: 9b:c6:dd:bc:aa:c8:71:66:64:73:71:2b:7a:f1:28:e0:20:2a: 39:05:48:af:80:63:4d:a8:25:8d:0e:04:a7:4b:cc:35:9c:d5: 96:40:05:0d:14:cb:34:33:79:80:69:50:67:32:61:93:b6:bb: 4f:33:c4:b8:46:a3:80:23:7f:95:1e:31:e9:1e:cb:f0:8a:48: a9:4e:82:bd:db:82:8e:7c:ac:d9:b4:54:cf:ac:c9:5a:ae:78: 76:cd:a1:4b:11:f9:08:ab:3d:b6:a5:5b:9f:b2:90:2b:2e:d4: 51:1b:ae:bd:db:5d:09:67:28:77:62:23:a9:3b:bf:ef:a2:cf: 78:a3:d1:05:fb:8b:9e:8f:63:78:8b:30:90:69:c4:53:e5:61: f3:78:f1:b5:aa:89:70:38:4e:b6:a6:85:90:38:b1:a2:05:1e: 29:4c:9f:4f:ab:fd:2d:d0:d3:7f:66:21:90:b3:1c:0e:a8:0e: ef:94:f1:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUwODA0MjA1NjEzWhcNMjUwODExMjA1NjEzWjAYMRYwFAYD VQQDEw02ODkxMWU2ZC1kZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmn7pWBoVpnrz05QW8RUssFVan/gIVSuYachnllgrErArUcQOi+/S4F8+QDyP XNLpKiN5GCXnfQgdcWBwyHRfowQtCGj8HQCNIIbBxBOulkY698CwjFup4AmY7rDU HHzOxueG60J+Fq8pQUEgmVBUBq742PLMUFzSMdFKVg4Pv0hVHvawDBIg/jx57IbI axZ69JGgj/M4tlZ78iWgIrbV9sDS3tvFCVdLIYzZeN9j6YROCfe4M3ARrvBNOIzI +Xn6s4qVeuArM6rZl75la9kBJBgPRh1gFyxZjI4+LBdf/VcFX+SyoKTcvkSOzJsL PqCobWM2glihxX9bs+037yQiAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/6a+Fj irAx47ptG2MW3Kk0zEI6MB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmo8ZCGZrDFp9b7zJ+9IKAJlo00oUCL7nQzpCPwIbv0D6bMjfG+7rq EM+f3O4lvk+bFBwe4kmDUCNSoENz1U9QW6ABlsb7i+Kbxt28qshxZmRzcSt68Sjg ICo5BUivgGNNqCWNDgSnS8w1nNWWQAUNFMs0M3mAaVBnMmGTtrtPM8S4RqOAI3+V HjHpHsvwikipToK924KOfKzZtFTPrMlarnh2zaFLEfkIqz22pVufspArLtRRG669 210JZyh3YiOpO7/vos94o9EF+4uej2N4izCQacRT5WHzePG1qolwOE62poWQOLGi BR4pTJ9Pq/0t0NN/ZiGQsxwOqA7vlPE+ -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:03 2025 by rpki-client