$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: y89kBq8gm2auDJu01jerVnIMBmbZdH+M/6kVLR0H/bI= Subject key identifier: 7B:07:72:29:7C:B1:91:8F:B7:E6:7C:BB:00:56:AF:62:F9:73:A5:E6 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 019D Signing time: Mon 11 Aug 2025 03:27:24 +0000 Manifest this update: Mon 11 Aug 2025 03:27:23 +0000 Manifest next update: Mon 18 Aug 2025 03:27:23 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: gcr6FKDIP6VYDc4sTHNppIrOFJyeu0BUlJf9o+3MWrM=) 2: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: F77Ohmhr+pSmcNMBmLDootHjfm49x1IrVzvlaFQhQZo=) 3: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: T4SsvxhOJ8NmSlYF5F0QyIn0S5EcCqMNYfFfIGZadlw=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: 3jNUoCccmrM56z8z19CQSeUZl708g7HitdvgnX+ByM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Aug 11 03:27:23 2025 GMT Not After : Aug 18 03:27:23 2025 GMT Subject: CN=6899631c-d16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:99:05:0a:c6:77:3a:90:e5:41:c0:98:53:6c: f9:b5:d9:fd:ad:23:f0:4b:1a:da:01:76:21:09:68: 5e:6e:94:18:ec:bc:59:6f:5c:82:a1:1f:40:71:f2: c0:c7:02:c1:72:2c:e7:1b:2e:99:48:7b:ab:18:b4: c7:86:00:f4:fd:89:ae:fa:70:26:61:ab:40:22:7b: 36:f9:62:6e:de:49:73:4f:d4:5a:c0:de:ad:89:97: 54:77:ea:fc:d2:aa:5f:b0:05:fa:bd:98:e2:e8:98: be:46:7c:75:9a:da:69:db:12:f3:94:e3:b0:f5:c9: 58:ef:d5:0a:b2:6d:5d:5d:ec:ea:63:c2:10:5d:36: 25:3c:c5:7b:72:cf:a6:1d:6b:94:6d:ba:1b:e4:3b: 5e:5d:69:1b:38:d8:85:fa:91:c3:46:b5:b2:d3:65: 5d:f2:a4:8b:c2:9a:80:69:6b:2f:a8:a9:09:9f:61: 2c:b0:50:ed:81:3b:eb:bf:2c:0f:3c:f6:6a:0b:d6: 76:c3:02:69:39:c1:ef:0c:a8:ac:2d:df:b9:48:16: 10:bf:50:86:f6:ff:d7:89:af:a9:91:6f:4e:68:1d: b5:f0:04:06:a5:35:5a:6b:94:af:f7:b3:93:ea:b0: f8:9d:1b:eb:ce:0a:96:11:41:3c:d5:e8:f6:f9:78: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:07:72:29:7C:B1:91:8F:B7:E6:7C:BB:00:56:AF:62:F9:73:A5:E6 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7a:bf:94:c3:e0:eb:53:34:81:9a:0c:af:a1:01:a7:21:56: 4a:46:43:7f:6d:77:70:bf:cc:75:fa:a4:1e:1d:10:70:85:f3: 9a:f1:2a:9c:5f:a9:38:ba:07:ea:4c:72:cc:dc:16:e4:e5:78: 4b:44:be:26:0d:e1:11:3d:0b:61:7f:ed:d2:82:ce:e4:4c:0d: 3d:e8:ac:2f:65:09:80:29:90:cc:e6:49:65:60:e0:ff:3d:0c: a5:7a:ae:36:a9:85:c5:e7:30:84:16:94:84:e5:32:8f:74:ba: 1a:56:68:7a:01:0b:07:fc:96:67:97:ef:ee:58:3a:22:e4:9a: c5:fc:cd:58:c6:a2:4b:e5:c2:1e:d9:88:66:ab:a4:99:c1:00: 0c:a3:a8:d6:0f:fd:5b:f3:42:1a:16:8a:e4:67:93:a9:58:72: d4:c4:d6:b0:c9:d5:35:63:1e:e4:7e:1a:c2:93:da:4d:ef:32: 5e:76:5b:3c:fa:2f:f4:fa:8f:d6:dd:72:f8:4f:9a:4c:a7:86: 94:c9:f2:bb:78:4d:00:68:dc:76:a9:78:e9:48:7f:5c:d0:2d: 15:3c:ee:c6:01:17:d0:85:77:2f:43:46:e1:16:cd:ac:38:a5: 16:71:f9:63:41:0c:d9:f9:37:b5:5e:5c:cf:c6:1a:06:e8:36: fa:c3:42:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjUwODExMDMyNzIzWhcNMjUwODE4MDMyNzIzWjAYMRYwFAYD VQQDEw02ODk5NjMxYy1kMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pkFCsZ3OpDlQcCYU2z5tdn9rSPwSxraAXYhCWhebpQY7LxZb1yCoR9AcfLA xwLBciznGy6ZSHurGLTHhgD0/Ymu+nAmYatAIns2+WJu3klzT9RawN6tiZdUd+r8 0qpfsAX6vZji6Ji+Rnx1mtpp2xLzlOOw9clY79UKsm1dXezqY8IQXTYlPMV7cs+m HWuUbbob5DteXWkbONiF+pHDRrWy02Vd8qSLwpqAaWsvqKkJn2EssFDtgTvrvywP PPZqC9Z2wwJpOcHvDKisLd+5SBYQv1CG9v/Xia+pkW9OaB218AQGpTVaa5Sv97OT 6rD4nRvrzgqWEUE81ej2+Xg+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsHcil8 sZGPt+Z8uwBWr2L5c6XmMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4er+Uw+DrUzSBmgyvoQGnIVZKRkN/bXdwv8x1+qQeHRBwhfOa8Sqc X6k4ugfqTHLM3Bbk5XhLRL4mDeERPQthf+3Sgs7kTA096KwvZQmAKZDM5kllYOD/ PQyleq42qYXF5zCEFpSE5TKPdLoaVmh6AQsH/JZnl+/uWDoi5JrF/M1YxqJL5cIe 2Yhmq6SZwQAMo6jWD/1b80IaForkZ5OpWHLUxNawydU1Yx7kfhrCk9pN7zJedls8 +i/0+o/W3XL4T5pMp4aUyfK7eE0AaNx2qXjpSH9c0C0VPO7GARfQhXcvQ0bhFs2s OKUWcfljQQzZ+Te1XlzPxhoG6Db6w0J2 -----END CERTIFICATE-----Generated at Wed Aug 13 04:24:15 2025 by rpki-client