$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: refh2xH+xe2K6Tvl3wL6VwXEtFiNu4NVJnhjoVJho8I= Subject key identifier: 73:D8:82:DA:A2:4A:DB:70:4F:17:EE:D1:45:2F:9E:B3:9D:58:92:AB Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 11AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 11A2 Signing time: Sun 10 Aug 2025 17:12:46 +0000 Manifest this update: Sun 10 Aug 2025 17:12:45 +0000 Manifest next update: Sun 17 Aug 2025 17:12:45 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: tccLuLGUITX/eL7eMtwfYHfMGmqtNlUi6e+xMPXRmfE=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4523 (0x11ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Aug 10 17:12:45 2025 GMT Not After : Aug 17 17:12:45 2025 GMT Subject: CN=6898d30e-9fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:e2:75:2f:0a:a9:5c:29:b9:ca:25:4c:51: 36:90:0e:d9:88:8e:7f:e3:eb:b9:74:91:a6:7b:da: 33:be:af:09:b0:5b:b5:b5:7f:ab:77:9e:29:b3:58: 74:38:01:2a:0b:2d:90:83:e5:47:bb:97:8a:ec:1f: e8:82:a5:dc:77:c5:2a:ba:1b:f8:68:2f:28:e3:65: ea:f8:a0:71:64:f8:dc:ae:e6:b3:ec:e9:17:19:a0: 99:b5:fb:b4:1b:ef:3f:42:f7:37:e0:70:36:6a:c3: b0:56:21:71:b0:29:10:7e:ab:bd:be:7c:a0:eb:3f: c9:4e:3c:4d:2d:9f:66:0f:fc:bb:2c:61:09:84:ff: 45:fe:d8:ed:d9:2b:b7:de:aa:7a:a3:39:1d:7b:0f: e6:54:cc:7d:fb:ff:eb:bc:19:b7:db:bd:e1:e2:35: 39:3e:27:35:22:f8:b6:f1:c0:83:77:64:3d:41:1d: 8b:c2:de:c3:de:b3:e6:ef:e7:44:50:16:bb:d5:95: 45:4f:f5:69:c8:29:01:3e:ab:aa:44:e0:4f:8f:f9: 08:d9:92:bf:3c:43:f4:9b:e2:7d:82:26:af:26:a5: da:5c:a3:91:59:1a:ee:04:b2:78:fe:d4:d3:63:cd: de:73:63:25:4c:a9:78:35:24:3b:ea:0a:d0:bd:87: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D8:82:DA:A2:4A:DB:70:4F:17:EE:D1:45:2F:9E:B3:9D:58:92:AB X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:99:d1:b0:45:86:a9:5f:0e:69:7f:84:93:30:d7:1b:d6:e5: 72:58:1d:9d:42:a6:85:3c:88:71:fa:d0:f6:52:47:09:0e:f7: 36:5d:95:e4:e9:c5:a2:b9:6e:56:9e:d6:6b:c1:28:2c:52:e2: cf:89:c6:50:c1:af:53:b1:df:9b:b5:d6:03:d6:ac:2f:2b:a4: be:78:4b:d6:53:6a:c2:2f:fc:c9:c7:62:8d:1f:02:6e:3f:65: ef:6d:2a:8a:12:aa:e9:36:15:d2:e3:eb:d7:7f:88:cd:31:b1: 97:8d:08:0a:42:bf:29:bd:81:50:86:21:23:8b:42:51:6e:6b: cc:a5:09:16:9e:c5:a9:10:ef:a9:21:90:33:ff:51:b9:1a:73: ad:4f:f4:93:72:11:5f:20:12:48:8a:b0:65:bb:44:3b:2a:ab: 5c:52:f9:c0:8c:28:6e:b3:cc:77:4b:ff:b7:a6:46:f3:95:63: 09:fc:b9:33:e1:65:81:9f:c4:0b:7f:bd:53:52:95:86:3e:c1: 40:1f:f8:1f:10:7b:e0:8a:71:66:ae:a3:69:18:9e:60:82:17: 0c:bf:c2:08:05:6f:c3:20:02:89:b2:64:d0:dd:c9:6e:37:94: bb:f9:7d:35:6c:89:94:f8:dd:a5:82:e1:99:51:c4:d6:49:27: 40:ee:46:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjUwODEwMTcxMjQ1WhcNMjUwODE3MTcxMjQ1WjAYMRYwFAYD VQQDEw02ODk4ZDMwZS05ZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zbidS8KqVwpucolTFE2kA7ZiI5/4+u5dJGme9ozvq8JsFu1tX+rd54ps1h0 OAEqCy2Qg+VHu5eK7B/ogqXcd8Uquhv4aC8o42Xq+KBxZPjcruaz7OkXGaCZtfu0 G+8/Qvc34HA2asOwViFxsCkQfqu9vnyg6z/JTjxNLZ9mD/y7LGEJhP9F/tjt2Su3 3qp6ozkdew/mVMx9+//rvBm3273h4jU5Pic1Ivi28cCDd2Q9QR2Lwt7D3rPm7+dE UBa71ZVFT/VpyCkBPquqROBPj/kI2ZK/PEP0m+J9giavJqXaXKORWRruBLJ4/tTT Y83ec2MlTKl4NSQ76grQvYcfHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPYgtqi SttwTxfu0UUvnrOdWJKrMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQmdGwRYapXw5pf4STMNcb1uVyWB2dQqaFPIhx+tD2UkcJDvc2XZXk 6cWiuW5WntZrwSgsUuLPicZQwa9Tsd+btdYD1qwvK6S+eEvWU2rCL/zJx2KNHwJu P2XvbSqKEqrpNhXS4+vXf4jNMbGXjQgKQr8pvYFQhiEji0JRbmvMpQkWnsWpEO+p IZAz/1G5GnOtT/STchFfIBJIirBlu0Q7KqtcUvnAjChus8x3S/+3pkbzlWMJ/Lkz 4WWBn8QLf71TUpWGPsFAH/gfEHvginFmrqNpGJ5gghcMv8IIBW/DIAKJsmTQ3clu N5S7+X01bImU+N2lguGZUcTWSSdA7kZm -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:26 2025 by rpki-client