$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: 9NIUopBSjSZTKJ/pxC8gK/2nCvq5dG76FmqJQiJPOTA= Subject key identifier: CF:7C:87:DD:E4:E2:A6:0C:E0:E2:C5:60:15:87:25:34:38:47:EB:71 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0CA6 Signing time: Fri 08 Aug 2025 18:28:07 +0000 Manifest this update: Fri 08 Aug 2025 18:28:07 +0000 Manifest next update: Fri 15 Aug 2025 18:28:07 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: enqHq6JMe7XM/N8yPLs/hNdZWX2Q//OSWzp8kXtFPYQ=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Aug 8 18:28:07 2025 GMT Not After : Aug 15 18:28:07 2025 GMT Subject: CN=689641b7-88aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:cc:b5:68:01:6c:b0:c1:2b:00:90:ef:9c: ab:3d:57:e5:c6:44:58:e3:46:38:ba:8b:90:bd:b0: 5c:ab:a5:27:bc:8f:16:04:9b:af:26:91:0e:69:74: a1:a3:ca:cb:4c:57:00:a1:9c:ae:57:bd:40:de:df: 6b:26:d0:5f:4c:be:0a:a4:0c:68:3a:b2:ac:7c:d1: 44:fb:71:76:83:9e:b1:62:f1:d4:6a:84:af:cd:31: 3e:ca:8f:02:e2:24:72:fa:d1:e0:c6:f5:12:96:0a: 2a:00:54:d9:50:f3:bc:38:33:22:60:5c:7b:94:68: fe:3d:48:51:1a:f2:c3:bc:2a:49:4f:de:8f:2e:15: b3:08:af:87:49:51:09:57:1a:51:9d:bf:88:45:2d: 79:a8:23:39:36:9a:ad:34:78:93:1f:13:7c:63:b1: 25:a4:36:44:b1:4d:7c:ba:ef:17:40:e8:e1:e4:b1: 44:e6:6b:69:7e:23:a5:d6:5e:74:0b:a6:fd:0b:a2: 9e:09:7a:03:fc:50:40:1f:32:4e:85:05:1c:8b:1d: 9f:1e:8a:78:6c:be:70:1d:d2:7d:17:7b:af:a8:08: 19:65:9f:e7:fa:01:70:76:0f:92:27:12:15:df:91: ef:cc:71:82:a1:6d:4f:14:a7:f3:b2:30:4f:c3:79: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7C:87:DD:E4:E2:A6:0C:E0:E2:C5:60:15:87:25:34:38:47:EB:71 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:78:cb:50:4a:94:51:bf:51:79:06:a7:0a:98:78:10:cf:71: d1:53:95:e3:ff:bb:8b:a7:ce:cc:16:ff:f1:38:b3:5f:01:24: f6:dc:73:f2:be:12:6d:f9:03:44:37:14:c9:de:d9:17:7d:5c: 10:2b:0e:a2:11:f9:04:f8:76:96:99:6c:a2:ae:ff:33:cb:e6: 2a:71:e8:20:e8:98:ef:1e:3d:eb:95:72:c5:eb:d8:9d:b2:b8: 0b:40:63:1e:92:9b:c9:49:34:57:50:39:db:80:34:80:89:b4: c0:31:84:9d:e2:90:08:aa:f8:27:8f:f6:c9:4c:19:82:7f:17: 40:bc:64:45:b6:be:89:96:eb:25:89:fd:fe:20:83:f9:e0:73: 68:97:ad:b1:12:d9:ae:7a:de:2a:c5:fc:c0:61:66:e8:fe:2e: 3b:4a:b3:fc:e8:a4:d9:32:d0:37:bb:c9:f2:72:84:f6:2b:b8: c3:67:5e:59:63:d3:59:9d:06:99:c2:77:bb:e2:16:bc:fc:ed: eb:b6:ca:3a:4b:92:97:76:10:b0:fd:f6:8e:06:97:08:f0:18: fd:86:5b:69:c8:30:5d:c8:f1:32:3d:cf:e1:1a:20:dc:1c:64: 09:5f:9f:9f:f3:57:d3:af:4d:7a:50:1f:dc:3d:5b:25:60:2e: 5f:2c:36:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUwODA4MTgyODA3WhcNMjUwODE1MTgyODA3WjAYMRYwFAYD VQQDEw02ODk2NDFiNy04OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1vMtWgBbLDBKwCQ75yrPVflxkRY40Y4uouQvbBcq6UnvI8WBJuvJpEOaXSh o8rLTFcAoZyuV71A3t9rJtBfTL4KpAxoOrKsfNFE+3F2g56xYvHUaoSvzTE+yo8C 4iRy+tHgxvUSlgoqAFTZUPO8ODMiYFx7lGj+PUhRGvLDvCpJT96PLhWzCK+HSVEJ VxpRnb+IRS15qCM5NpqtNHiTHxN8Y7ElpDZEsU18uu8XQOjh5LFE5mtpfiOl1l50 C6b9C6KeCXoD/FBAHzJOhQUcix2fHop4bL5wHdJ9F3uvqAgZZZ/n+gFwdg+SJxIV 35HvzHGCoW1PFKfzsjBPw3k3EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM98h93k 4qYM4OLFYBWHJTQ4R+txMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfeMtQSpRRv1F5BqcKmHgQz3HRU5Xj/7uLp87MFv/xOLNfAST23HPy vhJt+QNENxTJ3tkXfVwQKw6iEfkE+HaWmWyirv8zy+Yqcegg6JjvHj3rlXLF69id srgLQGMekpvJSTRXUDnbgDSAibTAMYSd4pAIqvgnj/bJTBmCfxdAvGRFtr6Jlusl if3+IIP54HNol62xEtmuet4qxfzAYWbo/i47SrP86KTZMtA3u8nycoT2K7jDZ15Z Y9NZnQaZwne74ha8/O3rtso6S5KXdhCw/faOBpcI8Bj9hltpyDBdyPEyPc/hGiDc HGQJX5+f81fTr016UB/cPVslYC5fLDaN -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:20 2025 by rpki-client