$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json) Hash identifier: aXF+oyBsedojjRKf/0Qw56yAEcq/k89NdKmfmhWANFE= Subject key identifier: D3:E5:50:D9:3A:9F:CB:32:6E:56:8F:91:BA:69:CC:D5:31:99:FC:BB Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft Manifest number: 50 Signing time: Sat 09 Aug 2025 07:47:27 +0000 Manifest this update: Sat 09 Aug 2025 07:47:26 +0000 Manifest next update: Sat 16 Aug 2025 07:47:26 +0000 Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: TPMtTlXwo23wJ6tAxtksxj49HwwJmyfjkC4DSqxqDv4=) 2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Validity Not Before: Aug 9 07:47:26 2025 GMT Not After : Aug 16 07:47:26 2025 GMT Subject: CN=6896fd0f-8079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:90:0a:20:bf:52:27:55:73:72:c9:00:fc: e8:40:c7:40:24:5c:22:6d:78:7e:7d:2b:a3:28:71: 2d:73:da:83:09:1e:b1:1c:97:11:e1:6b:9d:b2:47: 7c:64:15:49:61:7f:24:fa:c3:82:c7:79:bc:04:fb: c8:85:8f:8e:5a:8f:a3:d1:2a:41:2d:d7:c3:1e:a6: 2e:c9:fd:3f:94:8c:3b:77:0d:e3:5c:6c:20:ec:ef: 23:86:51:58:32:42:da:a5:97:26:5f:a9:27:b2:5f: 90:b3:c8:55:a9:00:3f:54:03:66:0b:ad:e1:18:d5: 3c:17:37:63:45:94:13:f4:12:2f:d8:93:51:cf:6c: 12:54:15:3a:52:29:bf:db:4b:7f:ae:8e:c2:ae:99: 35:2b:a1:ad:bf:6c:21:3e:00:16:42:4d:2d:3b:d5: 84:35:a5:e3:e1:d3:6f:62:2f:07:17:89:82:21:8b: 4a:4f:7a:53:1f:3e:1b:0a:c5:1f:b8:c5:c5:57:e9: d2:a9:56:54:6c:cc:51:af:7c:58:04:78:bb:ea:3d: 7f:a4:23:fe:29:56:8e:81:3e:f4:17:27:a4:f0:e3: 78:44:56:14:99:c9:67:30:9b:9b:81:8b:da:4d:47: d3:d2:da:fd:44:1b:26:c4:a8:3c:12:32:1f:63:53: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E5:50:D9:3A:9F:CB:32:6E:56:8F:91:BA:69:CC:D5:31:99:FC:BB X509v3 Authority Key Identifier: keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:3a:67:71:b6:b3:aa:57:66:c3:7f:ae:e3:cd:5e:e8:d0:16: 2f:8f:40:4e:7e:f3:19:1a:b2:20:89:16:0a:80:8f:4f:4e:9e: 54:79:a1:56:ec:c0:66:0e:e8:78:86:65:72:17:ee:4a:1a:4d: 75:a2:db:60:1e:c1:fe:6f:ca:6c:8b:7c:93:70:12:f6:9d:96: 87:8b:1d:97:fc:73:71:39:ac:cd:49:5e:fb:a3:18:26:82:8e: 2f:81:cf:15:fb:a6:77:25:66:1a:b9:8d:1d:a5:29:78:c1:bc: e8:34:c7:b6:79:7e:e9:51:79:1f:09:7e:73:7f:6a:c1:9f:2e: 77:60:fc:c8:19:eb:56:2e:79:c3:c9:55:62:71:b6:e4:bf:1e: 13:f8:43:51:90:55:fc:79:8b:8f:d9:60:22:58:a5:88:66:0d: d1:57:92:09:da:b4:55:05:88:d3:15:a2:a6:7f:af:5f:b5:40: 28:15:a0:4b:b3:08:a3:18:89:4a:cd:d2:a3:8d:b6:26:8a:66: 40:53:e6:be:ab:5a:ff:6a:e3:1d:74:4f:8a:a8:bd:de:9b:f1: c4:e3:bb:35:54:ee:34:57:a9:0e:4f:ce:0d:eb:44:11:8a:17: c9:c9:7e:f5:18:99:85:09:8a:3e:6f:35:8e:f9:ce:71:7f:94: 91:ab:b6:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz QTYzQzQ0OTAeFw0yNTA4MDkwNzQ3MjZaFw0yNTA4MTYwNzQ3MjZaMBgxFjAUBgNV BAMTDTY4OTZmZDBmLTgwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjvJAKIL9SJ1VzcskA/OhAx0AkXCJteH59K6MocS1z2oMJHrEclxHha52yR3xk FUlhfyT6w4LHebwE+8iFj45aj6PRKkEt18Mepi7J/T+UjDt3DeNcbCDs7yOGUVgy QtqllyZfqSeyX5CzyFWpAD9UA2YLreEY1TwXN2NFlBP0Ei/Yk1HPbBJUFTpSKb/b S3+ujsKumTUroa2/bCE+ABZCTS071YQ1pePh029iLwcXiYIhi0pPelMfPhsKxR+4 xcVX6dKpVlRszFGvfFgEeLvqPX+kI/4pVo6BPvQXJ6Tw43hEVhSZyWcwm5uBi9pN R9PS2v1EGybEqDwSMh9jU4n1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0+VQ2Tqf yzJuVo+RumnM1TGZ/LswHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2 NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4 VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKo6Z3G2s6pXZsN/ruPNXujQFi+PQE5+8xkasiCJFgqAj09OnlR5oVbs wGYO6HiGZXIX7koaTXWi22Aewf5vymyLfJNwEvadloeLHZf8c3E5rM1JXvujGCaC ji+BzxX7pnclZhq5jR2lKXjBvOg0x7Z5fulReR8JfnN/asGfLndg/MgZ61YuecPJ VWJxtuS/HhP4Q1GQVfx5i4/ZYCJYpYhmDdFXkgnatFUFiNMVoqZ/r1+1QCgVoEuz CKMYiUrN0qONtiaKZkBT5r6rWv9q4x10T4qovd6b8cTjuzVU7jRXqQ5Pzg3rRBGK F8nJfvUYmYUJij5vNY75znF/lJGrtlw= -----END CERTIFICATE-----Generated at Mon Aug 11 04:24:38 2025 by rpki-client