$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: YnfHw+VSvqPkCA3AMaI6siAYCCsmO2PFVtyrD5AyCfE= Subject key identifier: 53:31:28:6B:6E:F0:B3:19:FF:2B:C5:C6:D8:DC:45:34:60:E5:B2:25 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 7D Signing time: Sat 09 Aug 2025 07:12:50 +0000 Manifest this update: Sat 09 Aug 2025 07:12:50 +0000 Manifest next update: Sat 16 Aug 2025 07:12:50 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: jg8bo38Ad+BHE2vy5Z1VHMinv+S1Wtej3vQFb1Xjw48=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: BCZ1HJoEZyrIFeiF3ZHLW8BBZXBaO4KH4xqAbBol+hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Aug 9 07:12:50 2025 GMT Not After : Aug 16 07:12:50 2025 GMT Subject: CN=6896f4f2-de42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:4c:ea:d6:b7:29:65:ca:8d:24:1a:2c:10: a9:a5:41:be:2a:5f:dd:63:b5:df:e9:3f:e3:57:d3: a3:ff:74:32:5b:bb:50:bc:96:78:af:ac:8d:f6:b5: 6d:68:74:c0:43:da:c2:0c:8f:8c:e8:b9:72:9a:3f: 0a:d2:2b:9b:58:ea:70:0a:54:0e:5d:53:41:1e:d7: bf:45:79:28:d5:36:63:6d:38:cf:a7:a4:a1:52:a6: ec:2f:b0:0b:82:6d:50:b8:29:21:4b:c6:80:2d:00: 6b:3f:6a:e6:56:95:aa:28:26:76:2b:25:fb:39:c6: 2a:01:6e:9b:e3:b5:93:79:32:b7:24:63:4f:9a:a4: 3b:27:f2:bb:d3:7e:4b:24:ed:b9:21:0d:80:db:2e: 54:f5:dd:25:00:41:cd:68:bd:d5:3b:17:8a:78:47: 24:7c:b1:df:33:0e:82:dc:e2:7c:cb:f6:cb:71:ee: f9:7c:8d:0c:29:e7:bd:5f:59:43:f0:f7:cb:37:5e: b1:af:3f:d8:8d:41:59:69:b5:de:d1:71:46:e5:90: 82:d9:5a:9f:0f:0b:99:ea:49:52:1d:a3:2c:a2:13: ad:e3:6e:2b:28:47:0b:3b:90:23:11:16:27:1a:46: 08:77:58:b9:2a:95:28:63:30:8f:de:7a:62:3f:c3: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:31:28:6B:6E:F0:B3:19:FF:2B:C5:C6:D8:DC:45:34:60:E5:B2:25 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:82:11:0a:19:56:35:15:c3:1d:98:18:66:ef:07:83:07:9f: df:51:62:cb:8d:a4:e0:52:48:59:7f:11:96:06:4f:91:79:b3: f9:66:c6:79:94:dd:78:74:9f:bb:36:94:fc:e3:fe:1b:4e:4c: bd:90:0b:5c:f3:ad:97:ea:22:d7:ad:b2:6c:fa:ea:0a:73:0a: b8:cd:4e:e0:45:b7:3d:be:a3:25:01:9b:81:57:58:51:da:90: 51:35:36:53:86:b9:a0:2d:8e:0e:56:78:04:67:e2:38:43:3b: a9:36:7e:30:0d:c8:65:3e:51:db:5c:ea:fd:de:81:f5:4a:df: 13:07:49:26:4a:96:a4:5b:4b:72:b5:43:40:27:81:0b:db:3c: 5a:ae:46:30:de:6a:08:e6:64:7a:7b:11:9e:de:90:17:14:5c: 6d:4b:99:68:6f:aa:c8:8e:60:14:22:da:ce:22:e9:c8:e5:34: 5e:7e:1f:7d:79:39:e2:e9:03:0a:29:05:f8:05:78:80:41:fd: 7f:5d:a8:2b:16:89:47:16:39:40:9e:5e:92:32:79:8d:1c:cd: c4:85:d2:3c:99:35:fd:47:d5:f6:60:13:1f:1c:f0:a3:c6:77: 0a:60:e7:b2:fc:e8:a2:98:ea:0e:3c:fd:52:e9:e9:2f:c3:c1: 76:00:9e:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoNjREMkIzRDY1QTVDNkNDRTREMDhENzhGRkVEQjI4NTZC NjQxRDZBMzAeFw0yNTA4MDkwNzEyNTBaFw0yNTA4MTYwNzEyNTBaMBgxFjAUBgNV BAMTDTY4OTZmNGYyLWRlNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnTEzq1rcpZcqNJBosEKmlQb4qX91jtd/pP+NX06P/dDJbu1C8lnivrI32tW1o dMBD2sIMj4zouXKaPwrSK5tY6nAKVA5dU0Ee179FeSjVNmNtOM+npKFSpuwvsAuC bVC4KSFLxoAtAGs/auZWlaooJnYrJfs5xioBbpvjtZN5MrckY0+apDsn8rvTfksk 7bkhDYDbLlT13SUAQc1ovdU7F4p4RyR8sd8zDoLc4nzL9stx7vl8jQwp571fWUPw 98s3XrGvP9iNQVlptd7RcUblkILZWp8PC5nqSVIdoyyiE63jbisoRws7kCMRFica Rgh3WLkqlShjMI/eemI/wyjbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUzEoa27w sxn/K8XG2NxFNGDlsiUwHwYDVR0jBBgwFoAUZNKz1lpcbM5NCNeP/tsoVrZB1qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzQ0NkJEN0EyQjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWk5LejFscGNiTTVOQ05lUF90c29WclpCMXFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzQ0NkJEN0EyQjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01 TkNOZVBfdHNvVnJaQjFxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGKCEQoZVjUVwx2YGGbvB4MHn99RYsuNpOBSSFl/EZYGT5F5s/lmxnmU 3Xh0n7s2lPzj/htOTL2QC1zzrZfqItetsmz66gpzCrjNTuBFtz2+oyUBm4FXWFHa kFE1NlOGuaAtjg5WeARn4jhDO6k2fjANyGU+Udtc6v3egfVK3xMHSSZKlqRbS3K1 Q0AngQvbPFquRjDeagjmZHp7EZ7ekBcUXG1LmWhvqsiOYBQi2s4i6cjlNF5+H315 OeLpAwopBfgFeIBB/X9dqCsWiUcWOUCeXpIyeY0czcSF0jyZNf1H1fZgEx8c8KPG dwpg57L86KKY6g48/VLp6S/DwXYAnss= -----END CERTIFICATE-----Generated at Sun Aug 10 05:00:34 2025 by rpki-client