$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft File: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json) Hash identifier: 45bX8TXk5/yUKs+QBYZ+rhs83qFUFSgdAC3JBTeGTLc= Subject key identifier: 59:89:94:5D:3F:D7:D5:49:58:3F:6F:F6:51:EB:73:77:53:E0:1F:A6 Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft Manifest number: 90 Signing time: Sat 09 Aug 2025 06:56:05 +0000 Manifest this update: Sat 09 Aug 2025 06:56:04 +0000 Manifest next update: Sat 16 Aug 2025 06:56:04 +0000 Files and hashes: 1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: KX4wqf9Kpq8xy7YQNXfgXobUQCjIFF7MCD6Onq+w2gU=) 2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: 0M5YhxGhV5QHRGKOQlvw9XsWvMIjTk3A7Z1MV3xW494=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: Aug 9 06:56:04 2025 GMT Not After : Aug 16 06:56:04 2025 GMT Subject: CN=6896f105-75f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a5:ed:21:03:fe:b3:5d:ba:af:7c:db:94:93: 9d:cc:b2:40:05:de:dd:f1:e4:aa:c6:ca:4b:f7:39: 1f:d8:46:32:a5:28:b2:db:dd:cd:6f:b6:d2:63:27: 27:9b:cc:10:ac:b0:02:73:d0:7f:2c:8e:dd:75:84: 26:98:7e:e1:78:98:96:80:09:de:ce:53:39:e6:95: 76:31:93:c9:58:e0:16:44:58:c9:5f:60:0e:7f:65: c5:e2:23:0b:9f:a3:4c:b8:06:a7:e4:06:a6:8d:dd: d9:cb:0f:23:61:01:d5:ed:9a:36:2e:ba:c5:9c:7d: b8:dd:6e:e5:dd:e3:33:6c:8c:8a:57:ff:a7:99:1c: 7b:02:76:2c:98:55:3b:6b:7f:63:c6:be:48:c0:0b: aa:cc:f9:b7:87:ce:6a:16:be:4c:a2:6e:c0:81:75: b0:b9:de:b1:75:5f:03:c5:b5:72:ba:e6:ce:ab:03: b8:d4:fa:82:d2:16:da:2c:e2:66:b7:60:69:95:d9: 79:52:cf:1f:94:c0:7a:e4:78:e5:0a:f4:ed:f5:34: bd:36:dc:0e:2e:0a:81:aa:8f:b9:fd:83:db:88:73: 8d:ff:27:cd:57:6a:87:21:8b:34:60:dd:ab:5a:11: 08:21:d8:4f:36:5a:99:c6:8d:0d:27:fc:c6:cd:d8: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:94:5D:3F:D7:D5:49:58:3F:6F:F6:51:EB:73:77:53:E0:1F:A6 X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d0:15:7b:84:07:a4:18:7e:9a:98:c3:d4:fd:f9:60:a4:b9: 60:0c:7f:d9:fc:a1:03:ad:2d:ed:4e:8c:1b:b7:df:ce:bd:f8: 0e:0a:64:a1:38:00:67:e2:46:2d:c5:6d:05:1d:b0:bd:cf:b6: 85:c1:2a:df:8d:a9:3c:6e:bd:df:26:3e:3b:87:91:04:47:70: 93:c2:24:d8:13:d4:0d:79:10:b4:d5:6c:f8:db:48:01:e8:ed: fc:9c:38:16:47:ed:7d:0c:94:f4:ae:69:15:a4:58:30:84:90: b0:cc:49:f3:e2:9b:23:ab:81:54:30:4a:7c:9c:07:77:ce:bd: 03:34:4c:11:a6:41:0b:27:9a:c9:e3:b7:71:be:4e:0a:8c:1e: 83:3e:5d:c5:1d:bd:b5:c9:0c:16:58:c3:59:d6:aa:ee:f5:6b: bb:a3:9c:94:7e:be:15:0e:ba:67:0f:91:ce:06:22:b9:34:0d: c7:4b:e7:fa:bd:fb:aa:70:b7:4f:a1:c5:1a:e5:05:ef:8d:87: 6a:d0:76:e5:7f:c3:a2:77:17:92:51:9d:fb:b4:2c:5c:3c:3c: a7:02:f0:00:f5:a2:4c:cf:ec:23:e3:2b:3f:4d:f6:58:c1:1d: c9:d9:e9:7a:f8:b7:7f:43:6d:0c:8b:c8:f3:cd:0b:e5:70:a5: a8:df:51:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA5RkUxMTAvBgNVBAUTKDY0Q0NDMTY2QzU4QzM4RkU4Q0MxOTc2RjVDRjA3QzFE RDA2RjY4MTQwHhcNMjUwODA5MDY1NjA0WhcNMjUwODE2MDY1NjA0WjAYMRYwFAYD VQQDEw02ODk2ZjEwNS03NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aXtIQP+s126r3zblJOdzLJABd7d8eSqxspL9zkf2EYypSiy293Nb7bSYycn m8wQrLACc9B/LI7ddYQmmH7heJiWgAnezlM55pV2MZPJWOAWRFjJX2AOf2XF4iML n6NMuAan5Aamjd3Zyw8jYQHV7Zo2LrrFnH243W7l3eMzbIyKV/+nmRx7AnYsmFU7 a39jxr5IwAuqzPm3h85qFr5Mom7AgXWwud6xdV8DxbVyuubOqwO41PqC0hbaLOJm t2Bpldl5Us8flMB65HjlCvTt9TS9NtwOLgqBqo+5/YPbiHON/yfNV2qHIYs0YN2r WhEIIdhPNlqZxo0NJ/zGzdisjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmJlF0/ 19VJWD9v9lHrc3dT4B+mMB8GA1UdIwQYMBaAFGTMwWbFjDj+jMGXb1zwfB3Qb2gU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDlGRS8zODAzQUExQzlC MTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9QNk13WmR2WFBCOEhkQnZh QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDlGRS8zODAzQUExQzlCMTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9Q Nk13WmR2WFBCOEhkQnZhQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK0BV7hAekGH6amMPU/flgpLlgDH/Z/KEDrS3tTowbt9/OvfgOCmSh OABn4kYtxW0FHbC9z7aFwSrfjak8br3fJj47h5EER3CTwiTYE9QNeRC01Wz420gB 6O38nDgWR+19DJT0rmkVpFgwhJCwzEnz4psjq4FUMEp8nAd3zr0DNEwRpkELJ5rJ 47dxvk4KjB6DPl3FHb21yQwWWMNZ1qru9Wu7o5yUfr4VDrpnD5HOBiK5NA3HS+f6 vfuqcLdPocUa5QXvjYdq0Hblf8OidxeSUZ37tCxcPDynAvAA9aJMz+wj4ys/TfZY wR3J2el6+Ld/Q20Mi8jzzQvlcKWo31Gz -----END CERTIFICATE-----Generated at Sun Aug 10 10:39:44 2025 by rpki-client