$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: WrhI85MbD+wGg2XW9Ih7sht/1PQ9Yc+pcgUsRiM8oIo= Subject key identifier: 91:A7:31:F7:0F:0F:88:8D:E0:D9:BE:49:DB:1D:7A:84:C3:5B:E2:84 Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 0D Signing time: Tue 05 Aug 2025 08:48:09 +0000 Manifest this update: Tue 05 Aug 2025 08:48:09 +0000 Manifest next update: Tue 12 Aug 2025 08:48:09 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: ZfX8Qzd+9md3w7qxz4Tg6aD76mnEwY/8lZPGCWyqGtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Aug 5 08:48:09 2025 GMT Not After : Aug 12 08:48:09 2025 GMT Subject: CN=6891c549-5f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:3a:47:90:13:68:bf:6d:62:b9:f7:dc:59: e1:77:4b:8d:a2:d2:7c:7c:2d:c0:a3:43:c2:ff:61: 27:d8:d2:4d:31:a0:e0:2c:8b:55:6d:71:d8:da:4e: 3f:53:82:cb:0f:ce:c8:67:ac:c7:5c:7c:7e:e2:58: c3:f7:da:9e:07:a1:1a:b3:e9:2a:1d:7a:2b:03:5c: 91:12:02:92:1e:3b:c7:0f:94:34:9a:fc:d7:34:48: 37:07:cd:93:f0:c5:23:74:1f:fe:f7:cb:17:1e:c9: 7b:7f:af:14:e0:c4:fd:a9:8b:96:e7:4d:59:5e:dd: d2:90:fa:7f:20:5a:96:14:36:b2:89:1d:fa:b2:c6: 73:98:3b:f2:a7:c3:a4:8a:ec:5e:e3:17:04:86:c4: b6:d7:af:7f:67:2f:cd:cc:68:40:5c:91:26:dc:11: d8:02:d6:55:96:50:86:36:89:66:43:7c:82:d8:a7: 07:fc:9c:10:eb:80:2f:ec:e0:26:2d:51:ab:af:62: db:d7:5a:1e:11:49:29:2e:f0:56:56:11:f3:ee:d9: 7d:ae:74:02:b0:51:ef:43:dd:43:43:ff:a2:fc:e3: 33:7a:46:96:0d:77:bf:89:7f:17:b2:e5:69:72:92: e4:ee:b0:39:a8:ec:24:97:99:56:df:df:20:10:8f: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A7:31:F7:0F:0F:88:8D:E0:D9:BE:49:DB:1D:7A:84:C3:5B:E2:84 X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:16:5c:48:4d:4e:39:ae:26:a2:44:ab:2c:66:df:d4:7c:2c: 48:7d:07:f7:a2:7f:32:c6:4e:41:21:da:82:cb:e6:fd:98:5f: be:d7:c8:ba:32:47:8a:d6:db:11:c6:79:47:84:1a:69:22:98: 66:31:2b:5d:63:e9:bf:f9:64:5b:7d:68:58:f7:21:49:78:ea: d9:33:61:24:f7:8d:70:66:fd:63:63:38:0f:9e:dd:1d:e2:19: 77:f3:8f:26:6c:a0:cb:b7:f6:02:7f:aa:3c:86:68:90:f0:e7: 08:8d:0f:fd:db:e4:fd:1f:3e:8a:04:a0:c8:2a:9b:94:dd:7c: 23:61:f1:99:7d:a3:b8:09:fd:e4:ba:59:1d:28:3e:a1:43:03: d6:de:5d:c4:4c:e8:e4:fe:ef:90:5c:3e:4c:db:75:9f:2c:ad: 70:dc:d2:f7:ef:a3:b7:fd:6c:58:8d:65:a1:68:6e:71:02:7f: db:d8:de:b1:4b:fa:ba:38:93:5f:d6:90:1d:51:f4:ca:da:a2: b8:63:d8:75:2e:51:9e:b0:d4:0b:8a:01:67:9b:d0:f3:58:a1: 79:d0:df:57:d4:25:06:ef:75:f5:4d:68:0c:f5:ff:a0:ff:36: ae:60:84:14:eb:19:de:26:69:b6:55:a6:ee:e2:44:b2:a9:f4: 88:ec:bd:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNTA4MDUwODQ4MDlaFw0yNTA4MTIwODQ4MDlaMBgxFjAUBgNV BAMTDTY4OTFjNTQ5LTVmN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsJDpHkBNov21iuffcWeF3S42i0nx8LcCjQ8L/YSfY0k0xoOAsi1VtcdjaTj9T gssPzshnrMdcfH7iWMP32p4HoRqz6SodeisDXJESApIeO8cPlDSa/Nc0SDcHzZPw xSN0H/73yxceyXt/rxTgxP2pi5bnTVle3dKQ+n8gWpYUNrKJHfqyxnOYO/Knw6SK 7F7jFwSGxLbXr39nL83MaEBckSbcEdgC1lWWUIY2iWZDfILYpwf8nBDrgC/s4CYt UauvYtvXWh4RSSku8FZWEfPu2X2udAKwUe9D3UND/6L84zN6RpYNd7+Jfxey5Wly kuTusDmo7CSXmVbf3yAQjxQ3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkacx9w8P iI3g2b5J2x16hMNb4oQwHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFIWXEhNTjmuJqJEqyxm39R8LEh9B/eifzLGTkEh2oLL5v2YX77XyLoy R4rW2xHGeUeEGmkimGYxK11j6b/5ZFt9aFj3IUl46tkzYST3jXBm/WNjOA+e3R3i GXfzjyZsoMu39gJ/qjyGaJDw5wiND/3b5P0fPooEoMgqm5TdfCNh8Zl9o7gJ/eS6 WR0oPqFDA9beXcRM6OT+75BcPkzbdZ8srXDc0vfvo7f9bFiNZaFobnECf9vY3rFL +ro4k1/WkB1R9Mraorhj2HUuUZ6w1AuKAWeb0PNYoXnQ31fUJQbvdfVNaAz1/6D/ Nq5ghBTrGd4mabZVpu7iRLKp9IjsvbQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:38:23 2025 by rpki-client