$ rpki-client -vvf rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft File: Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft (raw, json) Hash identifier: vKtWliLecxplde9X988m3RZm2XgMFDWUscyik+la3Ok= Subject key identifier: 62:02:CC:8B:A6:D4:58:7D:4B:5D:E4:8B:D0:4A:E4:19:AC:90:FE:E3 Authority key identifier: 67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 Certificate issuer: /CN=A91180E8/serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft Manifest number: 62 Signing time: Sat 23 Aug 2025 07:16:28 +0000 Manifest this update: Sat 23 Aug 2025 07:16:28 +0000 Manifest next update: Sat 30 Aug 2025 07:16:28 +0000 Files and hashes: 1: Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl (hash: hvOxtWaNoq0N7Jo6DZ1SdfjmvrA8q9aowGPYBZUfYcY=) 2: E368BEF2E9D611EFAC604979C4F9AE02.roa (hash: HfXLWtads28iS5LrLz0AFXei2F6BGIFKfg02w7QPxkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91180E8, serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Validity Not Before: Aug 23 07:16:28 2025 GMT Not After : Aug 30 07:16:28 2025 GMT Subject: CN=68a96acc-1a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:c2:aa:ab:40:d5:e3:ec:df:3d:20:65:9d: 91:e4:24:17:f0:ce:e9:ee:38:0a:56:b9:99:d4:2b: 79:8d:e1:60:92:9e:ea:f0:47:ae:02:93:5a:b8:a3: 3b:95:ea:29:dd:bd:f9:49:7e:2d:fc:c2:d4:84:64: 7b:c8:89:af:4a:d1:5f:ba:f7:34:eb:6b:80:08:22: 5a:ae:40:b1:9f:f2:cb:4e:a5:a6:d1:f7:24:f3:47: fd:e7:f7:cb:bb:4a:a2:e6:b1:e3:27:1f:b5:95:4d: 8b:4c:95:4e:1e:ec:6a:b7:8e:c1:33:7c:86:c0:2f: 5e:6e:e5:4e:0f:79:55:87:b1:1a:3e:a9:7a:72:61: 20:2e:9a:f9:5f:cb:12:e2:2b:73:e7:45:cc:ae:4d: df:8b:0e:be:53:d5:a0:ef:90:0d:5f:13:b5:b9:9e: 3d:76:93:70:03:8d:9e:ce:1a:22:b3:03:97:86:44: 52:b5:5a:b3:da:e5:e7:4d:f0:5b:f5:ef:e9:c4:06: 08:60:d5:f0:0f:a8:64:2b:36:8a:20:23:61:ec:c2: 77:b1:bd:7d:80:87:91:1a:50:2d:f4:c9:43:c3:c4: f8:81:7b:91:9c:0e:59:99:7b:77:d1:6b:ef:42:73: 7e:5b:63:69:5c:2f:05:74:90:75:27:60:ba:80:d8: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:CC:8B:A6:D4:58:7D:4B:5D:E4:8B:D0:4A:E4:19:AC:90:FE:E3 X509v3 Authority Key Identifier: keyid:67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b7:2e:bb:75:bf:9c:1e:95:11:df:a0:5a:79:aa:dc:ce:0e: 00:ee:35:da:59:2e:c4:55:89:8a:02:ee:44:6a:f6:cf:91:4f: 73:81:f6:2c:dd:60:b9:76:fc:55:86:e0:97:d3:ab:c8:ff:86: a2:a4:12:b4:06:b2:ff:85:86:50:c5:72:1c:9e:d1:2c:54:bb: c9:be:f8:20:53:cb:3f:a8:bf:d3:09:d2:f3:52:e9:fc:4e:8e: 40:e1:6d:90:4f:91:fc:3a:40:dc:33:53:a8:6d:3d:63:c4:44: 01:fd:28:95:75:34:8f:ea:19:9c:07:70:75:c6:3e:6d:63:02: da:7f:2c:3a:46:86:9d:62:05:5a:d7:30:61:71:98:e8:16:23: 7f:57:c7:d3:ac:3f:30:11:0b:91:06:71:7b:2b:74:80:5e:7a: 57:67:7a:f7:70:b1:7c:0e:b9:bb:39:6d:61:80:ad:55:44:9a: fe:ef:f4:b3:c3:ce:eb:6f:33:48:c7:21:e3:32:0e:52:a4:54: ba:04:7b:34:a8:fa:35:7f:15:b4:04:6c:b9:57:ef:c0:56:c6: 2f:08:f1:f1:26:8e:da:ca:14:27:e8:7d:6d:2a:31:2e:06:14: 0b:6b:54:8f:91:46:a7:d7:b7:b3:cb:33:34:8e:d6:1d:1e:f9: 66:f4:68:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODBFODExMC8GA1UEBRMoNjdGMjlCMzVBODk0MkFBNkI3RjQxQUVGQjM0QTA2NzZG RDY5NTA5NzAeFw0yNTA4MjMwNzE2MjhaFw0yNTA4MzAwNzE2MjhaMBgxFjAUBgNV BAMTDTY4YTk2YWNjLTFhMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQdcKqq0DV4+zfPSBlnZHkJBfwzunuOApWuZnUK3mN4WCSnurwR64Ck1q4ozuV 6indvflJfi38wtSEZHvIia9K0V+69zTra4AIIlquQLGf8stOpabR9yTzR/3n98u7 SqLmseMnH7WVTYtMlU4e7Gq3jsEzfIbAL15u5U4PeVWHsRo+qXpyYSAumvlfyxLi K3PnRcyuTd+LDr5T1aDvkA1fE7W5nj12k3ADjZ7OGiKzA5eGRFK1WrPa5edN8Fv1 7+nEBghg1fAPqGQrNoogI2HswnexvX2Ah5EaUC30yUPDxPiBe5GcDlmZe3fRa+9C c35bY2lcLwV0kHUnYLqA2BdRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYgLMi6bU WH1LXeSL0ErkGayQ/uMwHwYDVR0jBBgwFoAUZ/KbNaiUKqa39Brvs0oGdv1pUJcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4MEU4LzNBOUZBQzU0RTlE NjExRUY4RDA0QjY3N0M0RjlBRTAyL1pfS2JOYWlVS3FhMzlCcnZzMG9HZHYxcFVK Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWl9LYk5haVVLcWEzOUJydnMwb0dkdjFwVUpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 MEU4LzNBOUZBQzU0RTlENjExRUY4RDA0QjY3N0M0RjlBRTAyL1pfS2JOYWlVS3Fh MzlCcnZzMG9HZHYxcFVKYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGW3Lrt1v5welRHfoFp5qtzODgDuNdpZLsRViYoC7kRq9s+RT3OB9izd YLl2/FWG4JfTq8j/hqKkErQGsv+FhlDFchye0SxUu8m++CBTyz+ov9MJ0vNS6fxO jkDhbZBPkfw6QNwzU6htPWPERAH9KJV1NI/qGZwHcHXGPm1jAtp/LDpGhp1iBVrX MGFxmOgWI39Xx9OsPzARC5EGcXsrdIBeeldnevdwsXwOubs5bWGArVVEmv7v9LPD zutvM0jHIeMyDlKkVLoEezSo+jV/FbQEbLlX78BWxi8I8fEmjtrKFCfofW0qMS4G FAtrVI+RRqfXt7PLMzSO1h0e+Wb0aAw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:14:36 2025 by rpki-client