$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: tAqsBIPJQiwjQX/yRk8uCCKsZtW9FfRzTUAdZv15+0I= Subject key identifier: FF:AB:CA:64:E6:4A:AC:77:1D:7A:A5:41:81:0B:E2:21:3D:32:0B:3B Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 050B Signing time: Sat 09 Aug 2025 00:10:09 +0000 Manifest this update: Sat 09 Aug 2025 00:10:08 +0000 Manifest next update: Sat 16 Aug 2025 00:10:08 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: oQEN2iAb6zhCesAwYHhJrcP6aC41GMacWTqNT8snQ2o=) 2: 17C20748736C11F08782972FC4F9AE02.roa (hash: uD/+VbEQuvKB4FlDEdrzat2jHSaev4WUMeRzTzDdRDA=) 3: FC486232736B11F09A4B592FC4F9AE02.roa (hash: GJj987mcyemhe86huNqoL1bW0xxlYiZaflQLLJS4GO0=) 4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Aug 9 00:10:08 2025 GMT Not After : Aug 16 00:10:08 2025 GMT Subject: CN=689691e0-28f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:2e:cd:d6:81:18:6b:e5:a1:9c:2e:4e:ae: 8a:f4:d8:d7:6d:5d:c5:f7:1f:8c:bf:43:0b:64:87: 12:d1:7c:3f:7d:04:ef:f9:53:8d:52:3d:13:68:9e: 55:38:5c:ae:c3:b9:30:f7:e8:5e:e7:45:7e:eb:c4: 17:66:c3:88:f8:5e:80:97:c1:f0:11:fe:c2:e0:9b: 50:bd:a2:be:92:92:69:6c:9a:d6:62:2f:4d:10:35: b5:5f:88:a5:35:85:b0:d6:e8:d8:b6:59:2f:f5:e5: dc:aa:84:d0:b8:4a:b3:48:af:f9:b3:27:1f:7c:e9: b0:a0:4c:32:d3:d2:d4:ad:af:26:a6:aa:52:85:04: a3:93:dc:69:25:8f:5c:67:ad:12:e7:2f:7c:a6:9c: f1:fb:d1:8b:3c:a1:12:d5:5e:f4:fb:07:42:33:07: 2d:89:0d:95:0a:b0:78:5e:17:52:6c:13:cb:23:ee: 80:e2:8d:c5:dd:c6:83:29:c2:32:54:4b:be:a8:dc: 60:6d:da:d9:a5:a4:53:3e:e6:5c:b5:24:ed:e6:cb: 11:a6:ff:d8:af:77:76:2e:df:fa:c1:5d:c6:7c:61: a8:39:4f:90:a2:b4:d6:92:c3:7b:38:45:d0:4d:b0: 3f:e8:1e:11:8e:97:fb:56:57:26:ea:27:81:25:44: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:CA:64:E6:4A:AC:77:1D:7A:A5:41:81:0B:E2:21:3D:32:0B:3B X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1f:98:e0:ed:4e:9a:56:7a:8a:25:ba:30:f1:9d:62:c7:a9: d8:a5:c4:ef:fe:ce:89:de:e6:b8:4f:6c:ff:06:e4:70:a8:32: 9f:0f:10:fe:20:40:71:f8:03:c5:df:05:15:77:f3:77:76:c1: 27:6c:05:9a:a2:64:ff:4b:2f:a3:86:2c:b4:12:b2:14:0c:a0: bb:10:c0:38:dd:d4:ea:7a:e1:10:7d:fd:ea:9e:5d:a0:10:59: 91:f1:f5:98:31:c5:a1:3f:db:15:b2:94:ce:37:c3:f3:f8:39: 0d:af:1e:4d:ce:1f:d3:d7:1c:d3:88:0d:9b:ba:9c:04:07:ae: 1e:50:13:ef:b3:62:8f:6b:3c:79:b3:45:a5:c6:60:a1:58:60: 54:8f:73:33:cf:8d:ca:d2:3b:d4:56:07:f7:d7:d7:06:cb:fb: 25:26:86:09:bc:28:3a:07:30:da:12:62:f6:b3:82:d8:ae:28: 3f:37:0a:28:bb:31:6b:c5:82:80:58:83:73:2b:da:9b:1f:cf: 75:05:04:e8:da:f9:4d:54:80:02:3a:f6:3c:b8:67:9a:fc:75: cd:ee:0d:c8:e9:2a:11:9a:f9:7b:e8:68:f9:f2:b0:15:72:98: 32:d6:4e:6a:6d:c3:5d:43:ec:4d:e8:69:82:81:22:75:d0:0b: 19:84:38:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUwODA5MDAxMDA4WhcNMjUwODE2MDAxMDA4WjAYMRYwFAYD VQQDEw02ODk2OTFlMC0yOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GAuzdaBGGvloZwuTq6K9NjXbV3F9x+Mv0MLZIcS0Xw/fQTv+VONUj0TaJ5V OFyuw7kw9+he50V+68QXZsOI+F6Al8HwEf7C4JtQvaK+kpJpbJrWYi9NEDW1X4il NYWw1ujYtlkv9eXcqoTQuEqzSK/5sycffOmwoEwy09LUra8mpqpShQSjk9xpJY9c Z60S5y98ppzx+9GLPKES1V70+wdCMwctiQ2VCrB4XhdSbBPLI+6A4o3F3caDKcIy VEu+qNxgbdrZpaRTPuZctSTt5ssRpv/Yr3d2Lt/6wV3GfGGoOU+QorTWksN7OEXQ TbA/6B4Rjpf7Vlcm6ieBJURmzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+rymTm Sqx3HXqlQYEL4iE9Mgs7MB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIH5jg7U6aVnqKJbow8Z1ix6nYpcTv/s6J3ua4T2z/BuRwqDKfDxD+ IEBx+APF3wUVd/N3dsEnbAWaomT/Sy+jhiy0ErIUDKC7EMA43dTqeuEQff3qnl2g EFmR8fWYMcWhP9sVspTON8Pz+DkNrx5Nzh/T1xzTiA2bupwEB64eUBPvs2KPazx5 s0WlxmChWGBUj3Mzz43K0jvUVgf319cGy/slJoYJvCg6BzDaEmL2s4LYrig/Nwoo uzFrxYKAWINzK9qbH891BQTo2vlNVIACOvY8uGea/HXN7g3I6SoRmvl76Gj58rAV cpgy1k5qbcNdQ+xN6GmCgSJ10AsZhDhh -----END CERTIFICATE-----Generated at Sat Aug 9 02:52:43 2025 by rpki-client