$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: Mv7XKl800yjGyHCeJcCFD8vHCa2+pYzqvPtbNh5TB4A= Subject key identifier: BE:16:D3:79:9D:5A:67:B0:2F:EF:5B:C5:B3:8E:DD:41:AA:2D:6F:BE Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 08D9 Signing time: Sun 10 Aug 2025 20:26:35 +0000 Manifest this update: Sun 10 Aug 2025 20:26:34 +0000 Manifest next update: Sun 17 Aug 2025 20:26:34 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: FpFbsPEj31XGeJoJdPMYnfQSbEFmIRF2+z7/4vplKYk=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: gGLM1HQ1iS7fd20ceMBraz36fZdGiyHwpUVermAbtmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Aug 10 20:26:34 2025 GMT Not After : Aug 17 20:26:34 2025 GMT Subject: CN=6899007b-cb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:8b:90:93:9e:2d:2e:1a:2d:42:f4:5f:cd: 4b:39:9d:06:c9:85:d8:35:29:41:04:66:bc:eb:50: de:b2:f0:4e:64:99:08:e5:9c:b2:7a:11:9d:b4:4e: 4a:f6:6c:dd:fc:eb:fa:5d:af:39:6e:0c:a4:9d:5e: 1a:0e:7c:7e:e6:13:fe:cc:27:96:79:cf:93:25:8c: 60:e0:9b:a4:e4:52:1f:6c:f6:87:7c:54:a8:a2:6f: 5f:30:27:e8:dc:bb:d8:74:41:a7:b4:06:41:6f:77: 09:01:9c:3f:e3:fb:09:0c:bf:e2:73:41:dd:3f:7f: 88:47:67:d6:df:7a:64:37:7a:f9:60:cc:c7:9d:04: 93:ef:bc:96:70:55:17:d1:91:39:59:80:a6:40:71: 82:da:32:f3:c1:d2:c5:07:11:17:c8:cf:2c:af:be: b6:73:22:58:94:56:17:29:10:f4:f1:95:3a:1c:a9: 70:d0:c5:f3:74:3f:25:79:4d:2f:3b:ef:7d:41:57: 6f:90:08:95:f1:3f:fa:74:13:65:6b:61:48:a9:aa: 68:46:a3:9e:6a:8c:d1:d9:32:85:e3:bd:73:fc:e5: 4d:54:1a:43:1f:35:39:5c:ca:ae:2f:d6:77:ae:e6: b8:26:33:94:62:05:45:88:67:76:2c:52:7b:7d:d5: e3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:D3:79:9D:5A:67:B0:2F:EF:5B:C5:B3:8E:DD:41:AA:2D:6F:BE X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:19:e3:b4:a2:50:c7:32:60:47:3f:2c:16:dc:14:c1:86:f0: 44:05:e3:1b:75:9b:83:3a:26:dd:28:f7:23:12:0f:58:b3:ef: be:22:c1:c3:b0:ff:9c:74:60:2b:9b:7d:cb:de:7b:37:dc:bd: 1d:bf:c3:87:3d:d0:81:69:dc:11:22:ff:13:b5:36:25:1f:a2: f0:51:1b:01:cb:d6:bc:1b:07:f4:18:e4:1d:08:16:a3:65:99: 78:6c:46:fe:b7:02:9f:49:97:5a:fc:f7:77:79:d9:e6:64:36: 72:d5:92:68:e7:c5:7c:6c:37:62:b6:a2:c0:15:4a:8e:32:54: 23:5d:53:c8:af:75:6a:ff:d3:71:c8:78:ee:7a:34:57:63:c0: 8f:96:a4:6f:71:33:66:2d:20:61:a5:cd:ac:2a:c4:87:72:5f: 0f:88:b0:6b:9e:b8:35:2d:57:c9:b7:da:76:32:34:de:9b:33: 6f:35:0f:f7:54:35:39:55:e6:dc:b1:a6:24:f3:3e:0b:c7:55: 64:89:d2:0c:60:76:c0:f4:56:f4:79:c4:a8:10:d8:54:b7:f2: 08:d3:f0:a6:06:af:46:88:f9:82:0f:81:8f:04:a8:d7:33:9c: da:d0:87:7d:5d:08:a3:39:5c:67:59:13:07:bf:b6:2c:fd:29: f5:32:82:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjUwODEwMjAyNjM0WhcNMjUwODE3MjAyNjM0WjAYMRYwFAYD VQQDEw02ODk5MDA3Yi1jYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/KLkJOeLS4aLUL0X81LOZ0GyYXYNSlBBGa861DesvBOZJkI5ZyyehGdtE5K 9mzd/Ov6Xa85bgyknV4aDnx+5hP+zCeWec+TJYxg4Juk5FIfbPaHfFSoom9fMCfo 3LvYdEGntAZBb3cJAZw/4/sJDL/ic0HdP3+IR2fW33pkN3r5YMzHnQST77yWcFUX 0ZE5WYCmQHGC2jLzwdLFBxEXyM8sr762cyJYlFYXKRD08ZU6HKlw0MXzdD8leU0v O+99QVdvkAiV8T/6dBNla2FIqapoRqOeaozR2TKF471z/OVNVBpDHzU5XMquL9Z3 rua4JjOUYgVFiGd2LFJ7fdXjTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4W03md WmewL+9bxbOO3UGqLW++MB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjGeO0olDHMmBHPywW3BTBhvBEBeMbdZuDOibdKPcjEg9Ys+++IsHD sP+cdGArm33L3ns33L0dv8OHPdCBadwRIv8TtTYlH6LwURsBy9a8Gwf0GOQdCBaj ZZl4bEb+twKfSZda/Pd3ednmZDZy1ZJo58V8bDditqLAFUqOMlQjXVPIr3Vq/9Nx yHjuejRXY8CPlqRvcTNmLSBhpc2sKsSHcl8PiLBrnrg1LVfJt9p2MjTemzNvNQ/3 VDU5VebcsaYk8z4Lx1VkidIMYHbA9Fb0ecSoENhUt/II0/CmBq9GiPmCD4GPBKjX M5za0Id9XQijOVxnWRMHv7Ys/Sn1MoL3 -----END CERTIFICATE-----Generated at Mon Aug 11 04:18:19 2025 by rpki-client