$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json) Hash identifier: EhJXWCrtt9PMPDWHkQLs6vqosL0NqGCidyKJlqneYzw= Subject key identifier: 57:E5:E5:33:E7:FB:C0:55:E4:BC:C3:01:88:D9:A5:21:F4:4B:0E:8A Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft Manifest number: 12 Signing time: Mon 11 Aug 2025 08:20:34 +0000 Manifest this update: Mon 11 Aug 2025 08:20:33 +0000 Manifest next update: Mon 18 Aug 2025 08:20:33 +0000 Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: D2q1zDYIKueTAuGw9j3LOjeV8frXcG8yPicR0og2+Co=) 2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Validity Not Before: Aug 11 08:20:33 2025 GMT Not After : Aug 18 08:20:33 2025 GMT Subject: CN=6899a7d1-9601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:be:b4:00:2b:33:ab:93:82:43:88:47:72:e2: b4:e3:53:8d:e0:76:fa:f4:b8:66:71:45:30:f8:9f: 1b:2c:d9:64:21:18:03:82:90:d7:81:68:bb:f3:96: f9:a7:05:a8:5e:66:54:a8:01:b8:4a:72:a6:1f:71: e2:2c:d1:7a:c8:d3:27:a8:90:7d:e1:38:69:68:b5: ae:da:b9:b7:f6:7d:b2:b1:0b:16:3a:25:22:55:fb: a4:6c:71:7a:93:60:57:45:6f:ce:f1:df:71:1b:3a: 27:fa:3b:79:b4:58:15:97:c6:30:0c:8c:4d:4d:08: 77:bf:da:b6:ec:9b:fc:b9:42:0d:67:c3:d2:97:c7: 4e:0a:80:3d:34:88:b1:d4:15:ab:01:31:52:13:a2: fb:33:24:7a:1c:07:b6:26:6c:09:6c:4f:47:e6:59: e9:63:c9:9c:1e:46:00:8a:56:73:73:1d:89:e5:d1: e1:af:f6:be:c9:ef:6d:b1:cc:b0:17:68:f2:ed:b6: 71:93:fd:b4:86:51:22:45:07:2a:76:b5:c4:d0:3d: 71:4b:81:62:ec:e6:f1:d4:17:7a:fe:51:bb:89:bd: 97:7a:6c:b8:99:0b:f9:2e:51:ef:99:23:1d:3c:53: 79:86:7e:b8:a5:e6:6f:4d:9a:70:4b:37:a9:39:a7: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E5:E5:33:E7:FB:C0:55:E4:BC:C3:01:88:D9:A5:21:F4:4B:0E:8A X509v3 Authority Key Identifier: keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e3:43:2d:75:16:01:56:ad:fa:ae:bc:92:b3:6b:51:36:9f: fc:08:38:1d:41:0d:4f:08:aa:68:96:77:48:0e:ba:4d:ac:ec: 11:71:47:91:fd:fe:1e:77:b9:4f:f0:0e:5f:4b:bf:34:e6:81: db:39:dc:36:fa:67:29:17:52:21:32:c4:b4:33:bd:f1:7a:a5: fa:a1:a6:d5:65:6e:cf:cf:25:81:1c:b9:ef:95:d8:57:0b:0b: 84:fb:f0:67:b4:29:5a:3e:34:d5:de:9b:48:0c:ef:42:10:f8: 63:6e:4c:b8:62:04:2c:3a:7a:5b:80:48:f1:4a:08:9f:65:7d: 79:ec:75:a0:f0:79:33:ef:a7:54:12:ab:b3:dc:2f:fd:cf:cb: a0:26:e6:e3:7b:6e:2f:c7:d7:e5:b9:24:cd:1f:53:46:f0:35: 96:0b:dc:ae:90:2b:8b:b7:2f:07:f7:9c:e0:bb:87:81:a6:4d: ca:41:4b:45:90:3f:48:82:a8:2e:8c:df:40:5b:9f:be:6c:0e: df:0b:ce:7f:3f:94:e2:c3:a8:34:87:6d:d7:a3:97:a9:cf:d1: 3f:c0:c9:d9:31:6f:a9:d0:37:b7:1d:ad:7b:6e:01:24:26:e5: bb:96:fe:20:e6:d6:61:94:1d:b3:2d:e4:58:d8:10:16:d2:66: c0:f1:a8:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw QjVDQ0M2MDAeFw0yNTA4MTEwODIwMzNaFw0yNTA4MTgwODIwMzNaMBgxFjAUBgNV BAMTDTY4OTlhN2QxLTk2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpvrQAKzOrk4JDiEdy4rTjU43gdvr0uGZxRTD4nxss2WQhGAOCkNeBaLvzlvmn BaheZlSoAbhKcqYfceIs0XrI0yeokH3hOGlota7aubf2fbKxCxY6JSJV+6RscXqT YFdFb87x33EbOif6O3m0WBWXxjAMjE1NCHe/2rbsm/y5Qg1nw9KXx04KgD00iLHU FasBMVITovszJHocB7YmbAlsT0fmWeljyZweRgCKVnNzHYnl0eGv9r7J722xzLAX aPLttnGT/bSGUSJFByp2tcTQPXFLgWLs5vHUF3r+UbuJvZd6bLiZC/kuUe+ZIx08 U3mGfril5m9NmnBLN6k5p2VDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV+XlM+f7 wFXkvMMBiNmlIfRLDoowHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/jQy11FgFWrfquvJKza1E2n/wIOB1BDU8IqmiWd0gOuk2s7BFxR5H9 /h53uU/wDl9LvzTmgds53Db6ZykXUiEyxLQzvfF6pfqhptVlbs/PJYEcue+V2FcL C4T78Ge0KVo+NNXem0gM70IQ+GNuTLhiBCw6eluASPFKCJ9lfXnsdaDweTPvp1QS q7PcL/3Py6Am5uN7bi/H1+W5JM0fU0bwNZYL3K6QK4u3Lwf3nOC7h4GmTcpBS0WQ P0iCqC6M30Bbn75sDt8Lzn8/lOLDqDSHbdejl6nP0T/Aydkxb6nQN7cdrXtuASQm 5buW/iDm1mGUHbMt5FjYEBbSZsDxqAg= -----END CERTIFICATE-----Generated at Mon Aug 11 10:35:22 2025 by rpki-client