$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: KeLOacZ6i3qAuYCoUOrrI0GchXFDoT5iiGVPTuFM6sA= Subject key identifier: 59:ED:A9:32:BE:66:BF:24:67:BE:A2:C6:8D:5D:58:AA:21:06:FB:55 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 090E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 08FF Signing time: Sun 10 Aug 2025 20:21:25 +0000 Manifest this update: Sun 10 Aug 2025 20:21:25 +0000 Manifest next update: Sun 17 Aug 2025 20:21:25 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: YJokJ2dg1tWcs+88napYEllVehSIXH340GtYH3vlT0o=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: liguL5yWelfphfIz9rHVaKh3TqmzzrhEVoBWguDMI9M=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: /n6JoBCxKb39xofyDRMG1k20W82UdWlbULQ4CPVAgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2318 (0x90e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Aug 10 20:21:25 2025 GMT Not After : Aug 17 20:21:25 2025 GMT Subject: CN=6898ff45-f8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:d0:90:91:90:2c:f9:1c:c5:07:6c:35:ff: f6:94:53:07:a0:67:a9:75:c8:0f:c4:55:fb:37:7f: 96:87:96:db:7f:9d:ba:29:38:8c:ea:57:1f:ea:f5: 62:d6:14:d4:b1:08:eb:0c:af:a8:df:87:18:cd:9a: 26:dd:5a:a4:f0:a8:97:84:7e:48:03:5b:06:13:8a: f1:b2:77:d2:5a:8a:40:75:80:b3:56:2c:6c:16:58: 5b:e3:b0:70:54:51:cb:00:be:4d:e1:de:2d:99:89: 09:4c:40:f8:7d:8f:a4:d1:aa:9f:3d:66:5e:ec:2d: b1:8b:c0:ec:e9:19:a6:60:3f:91:c8:6a:7f:ce:29: 87:2b:a9:7c:e3:97:fc:40:07:b2:a7:96:fc:25:2b: 63:1d:d2:8e:04:da:74:07:48:fc:84:c2:8e:82:21: 80:ce:4c:fd:5b:04:b4:52:71:ae:75:60:72:f5:32: 36:83:c7:6e:dc:54:7a:68:8e:a6:ea:85:0b:8c:df: 7a:07:35:57:d4:7e:20:a9:80:bf:ea:ce:25:49:71: ac:fc:f5:91:ca:f0:0d:c9:cd:15:2a:c9:a7:1f:d8: 3f:5e:80:0b:ed:32:90:d8:be:d2:be:c0:01:cc:f0: 37:42:68:e3:a0:20:d1:74:2a:7f:cb:d7:e4:d9:c4: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:ED:A9:32:BE:66:BF:24:67:BE:A2:C6:8D:5D:58:AA:21:06:FB:55 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8c:01:0a:28:98:93:a0:b3:46:a0:87:9f:a4:b5:24:63:68: 0c:43:f8:22:b9:e4:da:b4:69:e5:ef:3d:c5:84:2c:77:4b:59: 69:e4:8e:a5:70:69:48:bd:d9:ed:e0:77:58:b6:c1:f5:93:3b: 1d:f9:14:36:c0:9b:67:75:e4:7d:e6:f4:c1:c6:cb:d3:0d:21: bf:cf:5a:6b:fc:e7:1e:8e:ec:91:b8:39:17:fc:78:f8:06:83: cf:f6:af:a0:57:d7:45:6e:a8:1e:84:47:c5:64:64:10:7c:5c: 06:8d:b9:6a:00:b7:91:dc:5e:b4:b2:4b:93:f6:eb:a7:3d:c0: 1f:31:ba:a5:ef:ca:2a:c1:e3:aa:eb:83:d5:42:65:be:f9:74: 51:98:c1:96:73:e9:c9:af:05:62:3e:8d:c6:c5:a3:d8:3f:58: 1d:1d:49:76:a5:ae:cf:3b:50:67:2b:f6:9b:69:93:63:38:f4: 22:53:8e:27:6b:b3:6c:66:7b:a7:52:2b:9b:a3:09:0e:bd:9a: b6:f2:ff:d5:cf:7c:5a:33:25:7f:e0:d6:ef:3b:d1:5d:69:bf: 8a:85:44:28:b8:1f:19:6c:44:83:52:69:bc:e8:09:ed:94:f1: 51:21:ed:99:2e:c3:52:a7:58:55:bf:6e:a6:45:9a:d7:92:6f: 8f:3b:f2:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUwODEwMjAyMTI1WhcNMjUwODE3MjAyMTI1WjAYMRYwFAYD VQQDEw02ODk4ZmY0NS1mOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq7QkJGQLPkcxQdsNf/2lFMHoGepdcgPxFX7N3+Wh5bbf526KTiM6lcf6vVi 1hTUsQjrDK+o34cYzZom3Vqk8KiXhH5IA1sGE4rxsnfSWopAdYCzVixsFlhb47Bw VFHLAL5N4d4tmYkJTED4fY+k0aqfPWZe7C2xi8Ds6RmmYD+RyGp/zimHK6l845f8 QAeyp5b8JStjHdKOBNp0B0j8hMKOgiGAzkz9WwS0UnGudWBy9TI2g8du3FR6aI6m 6oULjN96BzVX1H4gqYC/6s4lSXGs/PWRyvANyc0VKsmnH9g/XoAL7TKQ2L7SvsAB zPA3QmjjoCDRdCp/y9fk2cRoBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFntqTK+ Zr8kZ76ixo1dWKohBvtVMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+jAEKKJiToLNGoIefpLUkY2gMQ/giueTatGnl7z3FhCx3S1lp5I6l cGlIvdnt4HdYtsH1kzsd+RQ2wJtndeR95vTBxsvTDSG/z1pr/OcejuyRuDkX/Hj4 BoPP9q+gV9dFbqgehEfFZGQQfFwGjblqALeR3F60skuT9uunPcAfMbql78oqweOq 64PVQmW++XRRmMGWc+nJrwViPo3GxaPYP1gdHUl2pa7PO1BnK/abaZNjOPQiU44n a7NsZnunUiubowkOvZq28v/Vz3xaMyV/4NbvO9Fdab+KhUQouB8ZbESDUmm86Ant lPFRIe2ZLsNSp1hVv26mRZrXkm+PO/JD -----END CERTIFICATE-----Generated at Mon Aug 11 01:44:58 2025 by rpki-client