$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft File: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json) Hash identifier: 56umLdfiwXvOetGBGKQ5bL5omt7Df1/dwOysys22Joc= Subject key identifier: 6B:41:80:77:9F:8E:E5:3D:66:BF:89:06:39:80:3A:FC:32:15:DD:2D Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 Certificate issuer: /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft Manifest number: 118D Signing time: Fri 22 Aug 2025 19:52:41 +0000 Manifest this update: Fri 22 Aug 2025 19:52:41 +0000 Manifest next update: Fri 29 Aug 2025 19:52:41 +0000 Files and hashes: 1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: mz6OnDCoY/h+WdupLOg1BTZDVbLIVPZsz0Hhy36+IWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Validity Not Before: Aug 22 19:52:41 2025 GMT Not After : Aug 29 19:52:41 2025 GMT Subject: CN=68a8ca89-d212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:5e:17:d2:dd:55:60:99:14:2f:ce:6e:30: a2:77:24:05:b6:a6:97:30:f4:d3:78:31:21:12:b2: 94:a9:9d:b3:7f:8a:4b:23:f7:79:3b:b0:11:39:08: e9:95:47:97:2b:f1:a9:dd:3c:fb:77:97:1c:35:20: 0b:e0:90:6a:0d:3a:a7:3d:3c:97:5e:61:7d:27:87: 53:5d:b7:e9:38:76:4d:41:73:4b:44:85:ea:56:1a: 88:50:16:92:d2:8f:ea:a3:35:09:db:cc:a6:87:65: 72:85:15:44:61:b3:38:76:83:d4:32:52:d3:81:d8: 8f:f5:15:77:4d:90:e1:01:1f:27:12:1b:95:01:3d: 03:68:ad:d1:df:18:fd:cf:b8:6f:fc:48:eb:56:54: ed:bb:3f:c0:e9:fa:40:1f:7b:c3:d6:ae:02:6d:63: 30:4c:2b:da:43:e0:3b:7f:0d:23:e7:97:2d:cd:04: 8f:01:4f:d2:f2:8c:d7:6d:32:6e:ab:7e:24:5a:ad: fe:dc:26:25:fa:93:24:a0:74:42:10:f9:61:e7:17: 8d:89:af:96:02:e0:6d:b5:46:62:04:10:a4:7d:1b: c5:0d:c9:3e:2f:94:a6:7b:43:7f:06:ae:d6:de:27: 0c:b0:a4:0c:91:7e:45:5f:74:16:f5:ec:62:fa:8c: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:41:80:77:9F:8E:E5:3D:66:BF:89:06:39:80:3A:FC:32:15:DD:2D X509v3 Authority Key Identifier: keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3e:5b:5a:4a:1d:5e:b6:f0:ac:18:d1:ea:bb:1c:2e:6a:87: e8:93:d4:a6:0c:b2:7f:91:05:a2:07:41:08:6e:48:45:6f:6e: e1:0f:4f:1b:39:e3:4a:cc:69:4e:b2:f6:8b:ab:af:d6:61:1d: 43:a4:2c:b8:2d:df:93:ca:60:71:25:c6:bc:1b:cf:ea:b8:de: a2:eb:10:c9:af:8b:6a:dd:bb:06:1f:79:9e:2f:73:40:96:93: a5:be:11:9f:8e:71:c1:35:15:04:1b:cb:87:02:32:7f:71:d7: 3c:b3:7d:2d:72:e4:cf:48:b7:e4:65:71:e6:55:df:55:07:36: ee:b5:24:52:b9:dd:62:fc:0a:43:ec:d8:dd:5d:21:fa:43:e1: 02:be:47:21:50:20:cd:98:b9:f2:b1:9e:9c:7d:9e:95:2d:49: 31:24:23:c5:b1:f5:cb:91:47:e7:a3:40:b2:fa:04:08:3e:30: f2:6e:bb:0e:77:0a:34:34:5b:34:eb:44:c6:53:6e:88:05:36: b3:36:53:3d:6c:67:2f:e0:06:69:e0:27:ca:33:22:ca:2b:10: ea:46:dc:31:30:82:20:b4:d4:d2:58:c9:79:3e:11:d0:3c:7e: 01:9f:cf:44:e4:c3:7f:f9:30:dc:87:80:be:79:6c:27:56:9c: 88:84:25:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDY2NzMwQkI5QTQwQjM1Q0ZFNTlCMTE4NUY2MjJEQkQw OTAwQzZEOTAwHhcNMjUwODIyMTk1MjQxWhcNMjUwODI5MTk1MjQxWjAYMRYwFAYD VQQDEw02OGE4Y2E4OS1kMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfheF9LdVWCZFC/ObjCidyQFtqaXMPTTeDEhErKUqZ2zf4pLI/d5O7AROQjp lUeXK/Gp3Tz7d5ccNSAL4JBqDTqnPTyXXmF9J4dTXbfpOHZNQXNLRIXqVhqIUBaS 0o/qozUJ28ymh2VyhRVEYbM4doPUMlLTgdiP9RV3TZDhAR8nEhuVAT0DaK3R3xj9 z7hv/EjrVlTtuz/A6fpAH3vD1q4CbWMwTCvaQ+A7fw0j55ctzQSPAU/S8ozXbTJu q34kWq3+3CYl+pMkoHRCEPlh5xeNia+WAuBttUZiBBCkfRvFDck+L5Sme0N/Bq7W 3icMsKQMkX5FX3QW9exi+ox0wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtBgHef juU9Zr+JBjmAOvwyFd0tMB8GA1UdIwQYMBaAFGZzC7mkCzXP5ZsRhfYi29CQDG2Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5jX2xteEdGOWlMYjBKQU1i WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puTUx1YVFMTmNfbG14R0Y5aUxiMEpBTWJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5j X2xteEdGOWlMYjBKQU1iWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKPltaSh1etvCsGNHquxwuaofok9SmDLJ/kQWiB0EIbkhFb27hD08b OeNKzGlOsvaLq6/WYR1DpCy4Ld+TymBxJca8G8/quN6i6xDJr4tq3bsGH3meL3NA lpOlvhGfjnHBNRUEG8uHAjJ/cdc8s30tcuTPSLfkZXHmVd9VBzbutSRSud1i/ApD 7NjdXSH6Q+ECvkchUCDNmLnysZ6cfZ6VLUkxJCPFsfXLkUfno0Cy+gQIPjDybrsO dwo0NFs060TGU26IBTazNlM9bGcv4AZp4CfKMyLKKxDqRtwxMIIgtNTSWMl5PhHQ PH4Bn89E5MN/+TDch4C+eWwnVpyIhCVM -----END CERTIFICATE-----Generated at Sat Aug 23 15:37:13 2025 by rpki-client