$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: QGkEdChcTYdb4evmlh8aZpeXYzY4W7OB3Z/qGPO1xZU= Subject key identifier: A7:6B:67:49:E7:7D:C4:41:B0:99:17:29:0F:79:B2:DF:CB:45:A7:79 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 24C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 24AF Signing time: Sun 10 Aug 2025 15:44:05 +0000 Manifest this update: Sun 10 Aug 2025 15:44:05 +0000 Manifest next update: Sun 17 Aug 2025 15:44:05 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: 3mtwVpT/OOV8xG5ae8nO2Y14jIZGQy1oKG9aqD4QRbo=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9417 (0x24c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Aug 10 15:44:05 2025 GMT Not After : Aug 17 15:44:05 2025 GMT Subject: CN=6898be45-5577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:f8:3b:f7:b9:45:35:7f:5e:39:ad:66:48: c6:80:8f:f0:84:db:53:a3:96:4c:1c:26:34:71:60: a9:65:a6:48:81:62:19:20:e8:14:8d:1f:9c:04:4d: a6:ea:5b:01:45:19:d1:3a:2f:ee:f8:1e:7a:0f:ab: e2:14:e4:68:c3:48:0d:3b:bb:16:21:8b:10:ae:e5: 61:ec:30:3e:53:a2:6d:b1:34:fb:19:2e:8b:b8:a8: e9:cc:22:40:10:08:ad:6f:54:d8:6b:84:2d:af:3d: 29:01:f2:50:6d:45:83:ad:6f:37:0c:19:73:c8:e3: 9b:22:17:06:23:38:88:bf:ed:60:56:1c:09:bb:fd: 05:cb:e1:02:c4:f4:dd:50:0f:7b:fc:aa:18:f6:f0: 65:26:47:c0:31:df:46:f2:72:28:4c:04:c1:36:b4: 02:71:6a:a3:cc:74:33:f5:f0:4e:49:07:b0:86:dd: 9f:fb:23:ed:1f:6f:75:70:3b:33:59:95:08:39:02: dd:bb:33:22:c0:62:82:20:ad:58:b7:77:6f:d5:b9: 1c:15:c8:92:a7:e1:6f:23:62:d9:c5:d9:70:df:26: 77:69:24:81:48:41:54:85:b3:9d:68:56:b0:55:93: 7e:27:95:aa:d8:ba:00:1e:20:aa:4b:1d:f1:d8:18: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6B:67:49:E7:7D:C4:41:B0:99:17:29:0F:79:B2:DF:CB:45:A7:79 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:92:35:41:4c:1e:58:85:a3:1c:45:97:b6:b5:24:54:72:b8: d1:69:15:3f:98:e9:09:8c:9e:67:52:63:fc:3c:94:9a:fb:62: a0:63:ff:9e:88:4c:9c:6b:9c:53:60:d0:ac:f9:36:dd:31:23: 4f:54:67:39:3f:13:3c:16:ac:a3:69:c2:d7:8e:6d:3c:ca:57: 23:93:c8:46:8c:f9:9b:75:c4:eb:90:cb:a7:c9:4b:2a:e3:c3: 41:e4:91:7f:27:7d:b2:36:26:cf:8a:76:2c:bc:15:f5:3d:be: 83:81:7a:ba:a7:ac:48:16:90:f8:c1:df:ac:29:d4:a2:c1:55: e3:9a:11:88:d3:9c:d2:5d:2a:fd:9f:56:b2:8f:e1:db:e8:40: 8d:ae:52:ce:10:ba:ff:5b:30:1d:88:f8:60:f0:e1:13:fd:6f: b2:b9:15:b4:58:18:40:f5:78:da:c2:02:4a:3d:93:c5:36:9b: 41:58:83:2f:39:9e:7f:a7:f9:43:7a:7d:31:b1:bd:50:65:8b: ce:e5:ea:f9:84:2a:a3:62:ea:d1:46:55:76:02:f3:36:3c:ca: 2f:12:25:5d:b1:47:00:7c:20:06:55:31:a7:fb:c6:01:82:f0: e1:15:f8:78:f5:80:10:c3:b6:c7:94:32:53:c4:a9:de:27:4b: 62:43:42:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjUwODEwMTU0NDA1WhcNMjUwODE3MTU0NDA1WjAYMRYwFAYD VQQDEw02ODk4YmU0NS01NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVv4O/e5RTV/XjmtZkjGgI/whNtTo5ZMHCY0cWCpZaZIgWIZIOgUjR+cBE2m 6lsBRRnROi/u+B56D6viFORow0gNO7sWIYsQruVh7DA+U6JtsTT7GS6LuKjpzCJA EAitb1TYa4Qtrz0pAfJQbUWDrW83DBlzyOObIhcGIziIv+1gVhwJu/0Fy+ECxPTd UA97/KoY9vBlJkfAMd9G8nIoTATBNrQCcWqjzHQz9fBOSQewht2f+yPtH291cDsz WZUIOQLduzMiwGKCIK1Yt3dv1bkcFciSp+FvI2LZxdlw3yZ3aSSBSEFUhbOdaFaw VZN+J5Wq2LoAHiCqSx3x2Bg4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdrZ0nn fcRBsJkXKQ95st/LRad5MB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwkjVBTB5YhaMcRZe2tSRUcrjRaRU/mOkJjJ5nUmP8PJSa+2KgY/+e iEyca5xTYNCs+TbdMSNPVGc5PxM8FqyjacLXjm08ylcjk8hGjPmbdcTrkMunyUsq 48NB5JF/J32yNibPinYsvBX1Pb6DgXq6p6xIFpD4wd+sKdSiwVXjmhGI05zSXSr9 n1ayj+Hb6ECNrlLOELr/WzAdiPhg8OET/W+yuRW0WBhA9XjawgJKPZPFNptBWIMv OZ5/p/lDen0xsb1QZYvO5er5hCqjYurRRlV2AvM2PMovEiVdsUcAfCAGVTGn+8YB gvDhFfh49YAQw7bHlDJTxKneJ0tiQ0Jd -----END CERTIFICATE-----Generated at Sun Aug 10 18:47:02 2025 by rpki-client