$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: aQq/loSoNDss2ciAdmdLsroWzRIB7F1tB0HuWc3g0rk= Subject key identifier: 01:07:B0:F3:42:E3:CD:CD:8A:45:CE:54:49:4E:7A:3B:7E:76:23:DD Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 09EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 09E8 Signing time: Fri 22 Aug 2025 20:00:41 +0000 Manifest this update: Fri 22 Aug 2025 20:00:40 +0000 Manifest next update: Fri 29 Aug 2025 20:00:40 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: MVjlZ6Z7yD3o4FlF7Q+l2wJrjDob8jp+12vtVcQzOXo=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: Aug 22 20:00:40 2025 GMT Not After : Aug 29 20:00:40 2025 GMT Subject: CN=68a8cc68-0bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a9:65:77:65:f0:f3:bb:be:37:44:e2:f9:c0: de:92:7c:f3:5b:1b:ca:f2:d7:08:83:e3:c6:48:5f: ba:f8:7f:47:10:ff:d1:54:5b:ff:47:6d:a5:c0:1d: 2f:c3:09:37:09:f9:87:e4:02:ad:9f:ea:25:73:1a: 99:5d:fd:22:7e:ee:35:2a:6e:6e:74:c0:13:27:24: 9a:09:b2:f7:15:ac:63:53:00:e2:10:43:e4:31:94: 52:52:13:b8:25:5e:7f:63:2e:8f:89:59:c6:c9:c0: 46:16:51:fa:27:97:77:e9:f8:70:08:34:86:00:f2: cb:43:f1:52:99:ac:1b:8c:27:c4:d0:61:b9:85:39: bd:ef:f9:5f:87:c2:06:1d:50:44:c0:75:c8:65:23: 2a:37:04:dc:3b:0d:3f:70:dc:17:6d:b2:6b:0e:9e: 9f:91:1f:2c:11:1a:8f:2f:2b:2b:d9:23:82:6c:36: 23:f7:2f:f0:07:1b:91:33:95:7e:8e:63:78:6a:65: 2e:16:cb:52:17:0f:09:22:b2:74:5c:b8:74:4d:45: 0d:1f:ee:93:87:2e:d2:4d:44:a6:b7:a1:40:de:bb: 73:68:05:64:b8:a6:7a:26:b2:f6:89:0c:eb:b5:22: 05:1a:3e:a7:57:06:9c:7e:34:75:92:91:58:05:9c: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:07:B0:F3:42:E3:CD:CD:8A:45:CE:54:49:4E:7A:3B:7E:76:23:DD X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0f:6a:00:09:41:c7:b9:79:62:65:90:f0:fe:94:14:06:32: f4:e7:20:24:bd:5c:93:cb:e5:ae:ab:76:0d:8e:73:81:c4:1a: 4d:dd:f3:f5:f4:b9:74:62:dc:c1:ac:43:16:9d:3d:7e:9f:b3: ed:9e:89:a1:f7:df:bb:65:0d:57:bc:e1:58:8e:a9:af:e3:23: d4:41:4b:3b:26:fb:e1:65:18:72:49:ad:d3:0e:9c:59:7c:1b: 23:b0:43:88:c0:8a:e1:dd:f3:11:e4:3e:30:54:ee:20:99:92: dd:eb:aa:b0:a3:af:7b:b7:6c:c5:e2:45:2d:2b:73:e2:7a:ec: 39:7e:00:52:10:79:ba:c3:de:cf:0b:01:29:ff:60:9a:d4:f8: fc:1d:92:05:2c:69:e4:d0:91:b9:f2:92:53:7b:cc:f2:bc:4b: 10:ec:34:bb:d0:b0:11:bc:dd:12:2e:5d:6b:94:2b:e4:50:7f: 9a:00:3f:b3:31:79:7f:41:d7:fd:fd:e3:90:b6:78:9b:20:ab: fa:fd:5c:48:bd:1c:23:1b:c8:11:76:f7:d1:e5:5f:84:4a:f7: 1a:7f:7e:16:72:2c:4d:69:c1:89:f6:2f:fe:70:1f:a8:b1:06: be:45:fe:6f:04:7c:67:f3:de:e6:91:5a:99:83:7f:92:6d:7a: ba:37:97:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjUwODIyMjAwMDQwWhcNMjUwODI5MjAwMDQwWjAYMRYwFAYD VQQDEw02OGE4Y2M2OC0wYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+alld2Xw87u+N0Ti+cDeknzzWxvK8tcIg+PGSF+6+H9HEP/RVFv/R22lwB0v wwk3CfmH5AKtn+olcxqZXf0ifu41Km5udMATJySaCbL3FaxjUwDiEEPkMZRSUhO4 JV5/Yy6PiVnGycBGFlH6J5d36fhwCDSGAPLLQ/FSmawbjCfE0GG5hTm97/lfh8IG HVBEwHXIZSMqNwTcOw0/cNwXbbJrDp6fkR8sERqPLysr2SOCbDYj9y/wBxuRM5V+ jmN4amUuFstSFw8JIrJ0XLh0TUUNH+6Thy7STUSmt6FA3rtzaAVkuKZ6JrL2iQzr tSIFGj6nVwacfjR1kpFYBZzumQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEHsPNC 483NikXOVElOejt+diPdMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPD2oACUHHuXliZZDw/pQUBjL05yAkvVyTy+Wuq3YNjnOBxBpN3fP1 9Ll0YtzBrEMWnT1+n7Ptnomh99+7ZQ1XvOFYjqmv4yPUQUs7JvvhZRhySa3TDpxZ fBsjsEOIwIrh3fMR5D4wVO4gmZLd66qwo697t2zF4kUtK3Pieuw5fgBSEHm6w97P CwEp/2Ca1Pj8HZIFLGnk0JG58pJTe8zyvEsQ7DS70LARvN0SLl1rlCvkUH+aAD+z MXl/Qdf9/eOQtnibIKv6/VxIvRwjG8gRdvfR5V+ESvcaf34WcixNacGJ9i/+cB+o sQa+Rf5vBHxn897mkVqZg3+SbXq6N5fQ -----END CERTIFICATE-----Generated at Sun Aug 24 09:01:45 2025 by rpki-client