$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: /TTFbwPiS8jbFOmj8UMNCgoQxg0gUbjtTcZ8WFMXCfg= Subject key identifier: 8B:69:24:D5:DC:C2:B5:64:D0:48:97:4D:B5:BB:90:43:98:92:67:29 Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0E57 Signing time: Fri 08 Aug 2025 18:18:23 +0000 Manifest this update: Fri 08 Aug 2025 18:18:22 +0000 Manifest next update: Fri 15 Aug 2025 18:18:22 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: o41TwtY/QtATNHRIlYHlEd+9jTcUfLhA47oSxYXf94I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Aug 8 18:18:22 2025 GMT Not After : Aug 15 18:18:22 2025 GMT Subject: CN=68963f6f-338e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:38:43:94:ba:be:fa:ad:0c:05:1d:fe:74: 12:92:85:a3:08:e0:17:b1:53:31:d4:19:df:47:cd: e9:76:9c:79:44:0b:de:e7:8a:8e:5e:bb:c4:4d:c7: 1b:d4:7b:b0:56:66:a6:e5:45:cc:13:b1:e0:e5:e5: 11:ee:f2:89:b1:5b:be:14:3d:12:7d:5f:2f:26:dc: e3:ee:53:48:00:83:b3:c7:08:ef:87:e9:0f:cb:8b: 71:4e:11:9c:9a:5d:ef:79:9f:29:97:6e:1f:0e:89: 52:c9:3d:f7:59:6a:34:1d:19:f5:56:7b:66:25:43: 2d:d2:05:d3:00:23:f8:f1:42:6d:0a:b1:b3:6c:2f: 4d:e3:37:2a:fa:49:4f:2b:ff:0b:f1:3e:b2:86:24: b3:93:92:28:74:ff:54:d1:3e:40:24:81:1d:dc:ed: d4:d8:bf:51:ef:ff:af:3b:a7:8a:f8:d4:64:71:67: b8:73:f3:5b:1a:bc:a4:f3:66:ee:90:30:9d:ad:b3: 18:2c:c3:db:00:b4:d5:9c:c3:2b:ed:96:82:ea:9d: aa:a7:42:3c:88:35:25:ee:d0:cc:2e:8e:6c:02:a6: 02:e2:94:bd:e2:3a:08:dd:08:32:76:e8:15:96:95: 00:3c:d3:21:d1:f9:40:cb:22:09:53:77:8e:f8:83: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:69:24:D5:DC:C2:B5:64:D0:48:97:4D:B5:BB:90:43:98:92:67:29 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:02:96:97:61:4e:4a:22:c2:44:65:a9:01:5d:7a:24:52:04: da:e1:49:28:da:41:d0:fc:39:8a:f0:de:a4:b7:6e:19:0c:31: 3c:9b:c4:01:2b:79:ca:a8:78:76:6a:29:5d:7c:91:c9:1f:a0: a9:a2:e7:03:b5:96:3d:62:ff:27:e7:1f:f7:c3:b2:13:f4:6a: 23:88:8c:3e:ce:44:0b:ef:ea:2f:67:93:64:f3:d6:96:60:07: d3:84:f7:c5:43:11:7e:d5:43:7e:77:1a:be:96:0c:df:3f:1c: bf:0e:a8:52:2b:4f:2a:c2:b2:c9:f9:5c:f6:f4:4b:a4:14:89: a5:fb:5c:d4:8d:ec:92:1c:49:1f:c4:b8:c6:f1:0a:1e:30:22: 0e:db:d4:11:ea:67:22:95:00:36:25:90:5d:8e:c3:2f:d3:fa: d5:49:ab:25:88:3d:04:3c:8c:1e:73:76:44:7c:7a:7f:a5:ea: aa:ee:06:87:52:cf:03:d0:c8:2e:ba:63:22:85:e9:bd:b6:e4: 91:bb:f1:26:52:20:2b:cf:52:06:68:e5:6a:6e:e7:3c:20:fc: 32:eb:4b:a1:a9:f7:94:98:24:f8:81:9a:19:42:4f:65:8b:8b: 5a:4f:f4:c0:01:80:11:84:d6:6d:b9:20:81:a8:c7:80:7a:18: 29:3e:a0:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjUwODA4MTgxODIyWhcNMjUwODE1MTgxODIyWjAYMRYwFAYD VQQDEw02ODk2M2Y2Zi0zMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1s4Q5S6vvqtDAUd/nQSkoWjCOAXsVMx1BnfR83pdpx5RAve54qOXrvETccb 1HuwVmam5UXME7Hg5eUR7vKJsVu+FD0SfV8vJtzj7lNIAIOzxwjvh+kPy4txThGc ml3veZ8pl24fDolSyT33WWo0HRn1VntmJUMt0gXTACP48UJtCrGzbC9N4zcq+klP K/8L8T6yhiSzk5IodP9U0T5AJIEd3O3U2L9R7/+vO6eK+NRkcWe4c/NbGryk82bu kDCdrbMYLMPbALTVnMMr7ZaC6p2qp0I8iDUl7tDMLo5sAqYC4pS94joI3QgydugV lpUAPNMh0flAyyIJU3eO+INHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItpJNXc wrVk0EiXTbW7kEOYkmcpMB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrApaXYU5KIsJEZakBXXokUgTa4Uko2kHQ/DmK8N6kt24ZDDE8m8QB K3nKqHh2aildfJHJH6CpoucDtZY9Yv8n5x/3w7IT9GojiIw+zkQL7+ovZ5Nk89aW YAfThPfFQxF+1UN+dxq+lgzfPxy/DqhSK08qwrLJ+Vz29EukFIml+1zUjeySHEkf xLjG8QoeMCIO29QR6mcilQA2JZBdjsMv0/rVSasliD0EPIwec3ZEfHp/peqq7gaH Us8D0MguumMihem9tuSRu/EmUiArz1IGaOVqbuc8IPwy60uhqfeUmCT4gZoZQk9l i4taT/TAAYARhNZtuSCBqMeAehgpPqCz -----END CERTIFICATE-----Generated at Sun Aug 10 19:02:07 2025 by rpki-client