$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: CO7QHWYNhCBbVMS55N8LHtHpxhmd0wvx97a8IQDe+uY= Subject key identifier: FF:94:D1:D4:A2:66:AE:F3:5E:31:DB:70:05:96:4D:18:97:41:E2:96 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 7D Signing time: Tue 05 Aug 2025 07:18:51 +0000 Manifest this update: Tue 05 Aug 2025 07:18:50 +0000 Manifest next update: Tue 12 Aug 2025 07:18:50 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: tcDcFFN0DSqOONkLoGqjwaW30UW6CbilSK0mKn1pxFc=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Aug 5 07:18:50 2025 GMT Not After : Aug 12 07:18:50 2025 GMT Subject: CN=6891b05b-b26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:2a:fb:f2:11:b3:34:d2:d8:2c:2a:bc:5a: e0:37:01:d3:52:d8:8a:ef:f8:05:25:b3:81:1f:81: c9:41:e1:2a:5b:0d:59:c0:8c:89:23:e6:dd:e9:ec: e6:79:c9:54:2d:ea:b2:92:08:5c:3f:99:85:c3:3c: 5c:b8:8a:4c:8d:63:ec:8d:29:5d:b2:3d:92:47:19: c2:8c:a2:ee:62:78:70:25:8a:94:4e:29:14:28:72: 94:f6:07:9e:33:f5:33:51:10:74:70:ac:8d:fc:bb: bd:92:7e:0b:59:6f:88:f2:88:18:3d:97:1e:6e:fd: a7:5f:0f:79:d7:53:08:03:6f:7c:bd:ff:06:a0:85: 17:1e:95:d9:de:cc:9d:1a:45:e3:15:7c:97:72:f0: f2:d6:8d:30:6b:0b:df:36:42:d9:c1:63:7d:13:8e: ec:64:b3:b5:01:a3:0d:01:20:df:26:d5:6c:41:bf: fa:86:c6:e4:77:7c:73:89:cd:c6:ce:96:f4:71:b4: e6:17:d1:cd:e5:5a:9a:80:2b:b3:94:42:c6:e2:fc: 92:9c:69:b1:ef:21:7f:5c:30:7d:16:f4:ce:97:da: 08:fc:fb:0b:51:26:b5:db:cf:56:26:8e:d9:a3:38: b8:5c:ad:93:72:4a:e6:e7:e6:03:44:62:de:01:70: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:94:D1:D4:A2:66:AE:F3:5E:31:DB:70:05:96:4D:18:97:41:E2:96 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:81:fc:43:76:fe:eb:ac:49:07:a1:ad:05:fe:24:b7:25:52: b9:4a:7d:8e:3b:0a:d9:74:ce:58:3d:80:b2:0c:4b:e2:b7:f9: ed:26:87:22:fc:7c:04:02:4e:70:f7:bc:da:c6:0c:0a:f1:e4: d8:be:5d:7b:f6:46:d7:31:fd:e7:2d:99:f4:f0:13:39:08:f2: de:3e:4f:28:8c:c0:70:e5:83:52:0a:98:cb:8f:81:7d:0e:b7: c2:36:51:97:cb:ca:74:60:d0:d7:3f:76:fe:65:37:6a:2c:c5: 41:c5:46:80:be:9c:03:c1:24:7e:b7:df:6c:93:98:4a:f4:db: 9f:d1:e8:9a:3c:51:72:f2:d3:fa:83:1c:1e:e1:97:98:0b:0c: e6:76:af:e0:75:91:11:8d:9f:ed:3e:13:4a:03:6f:e7:1c:3a: 68:08:e5:60:9f:f2:49:4a:4c:82:be:8c:4a:f8:83:ca:2b:07: 36:1a:85:47:3a:7c:28:92:93:dd:f9:02:27:96:f8:86:4e:58: 31:6e:9f:8b:af:10:a6:58:cb:0f:7c:8f:93:16:f2:91:8d:4c: 61:51:6b:14:3c:a0:b4:85:4f:80:19:08:12:70:f2:16:cc:d7: b4:e5:3d:8f:de:2f:32:0e:d1:1d:66:8a:c2:21:55:e6:67:d3: 4e:ff:a5:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3 RDAyMTFCNTAeFw0yNTA4MDUwNzE4NTBaFw0yNTA4MTIwNzE4NTBaMBgxFjAUBgNV BAMTDTY4OTFiMDViLWIyNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM2Sr78hGzNNLYLCq8WuA3AdNS2Irv+AUls4EfgclB4SpbDVnAjIkj5t3p7OZ5 yVQt6rKSCFw/mYXDPFy4ikyNY+yNKV2yPZJHGcKMou5ieHAlipROKRQocpT2B54z 9TNREHRwrI38u72SfgtZb4jyiBg9lx5u/adfD3nXUwgDb3y9/waghRceldnezJ0a ReMVfJdy8PLWjTBrC982QtnBY30Tjuxks7UBow0BIN8m1WxBv/qGxuR3fHOJzcbO lvRxtOYX0c3lWpqAK7OUQsbi/JKcabHvIX9cMH0W9M6X2gj8+wtRJrXbz1Ymjtmj OLhcrZNySubn5gNEYt4BcD1HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/5TR1KJm rvNeMdtwBZZNGJdB4pYwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1 OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHiB/EN2/uusSQehrQX+JLclUrlKfY47Ctl0zlg9gLIMS+K3+e0mhyL8 fAQCTnD3vNrGDArx5Ni+XXv2Rtcx/ectmfTwEzkI8t4+TyiMwHDlg1IKmMuPgX0O t8I2UZfLynRg0Nc/dv5lN2osxUHFRoC+nAPBJH6332yTmEr025/R6Jo8UXLy0/qD HB7hl5gLDOZ2r+B1kRGNn+0+E0oDb+ccOmgI5WCf8klKTIK+jEr4g8orBzYahUc6 fCiSk935AieW+IZOWDFun4uvEKZYyw98j5MW8pGNTGFRaxQ8oLSFT4AZCBJw8hbM 17TlPY/eLzIO0R1misIhVeZn007/pb8= -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:19 2025 by rpki-client