$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: B4ea3Q2oAkL+K9E03J04GyRqDzLQNtjaD78h/AKsHPQ= Subject key identifier: 3D:22:BB:F2:D8:91:33:A8:63:74:D3:D2:7D:C1:D4:C4:4D:E4:E5:F2 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: A9 Signing time: Sat 23 Aug 2025 06:23:17 +0000 Manifest this update: Sat 23 Aug 2025 06:23:17 +0000 Manifest next update: Sat 30 Aug 2025 06:23:17 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: /Vk/IZ1gIHlFx+qif2Crda7U4F7KXZRWZY+Ryc7YQH0=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: iI9yotfrL9J3LQc+csF8mlXtrJJ2hdKlLEmN7bc8pzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Aug 23 06:23:17 2025 GMT Not After : Aug 30 06:23:17 2025 GMT Subject: CN=68a95e55-cbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:56:af:40:2d:b6:af:ef:ed:72:e5:33:00:b2: 8d:b3:7f:2e:3a:c0:3a:f7:13:38:c0:96:83:4c:81: 2c:99:40:97:c0:7e:63:d3:ee:35:0a:4c:5a:3b:ff: dd:6e:76:54:2b:3d:31:bf:96:32:0c:eb:68:fb:fd: 1c:b1:3b:80:96:99:1d:62:8f:83:3c:ab:d4:1d:2e: 30:80:fc:79:d5:ce:d0:94:a2:0d:37:07:0a:34:d2: cb:18:33:98:fe:a3:ad:6d:c6:0b:3c:32:ab:60:11: cd:bc:e5:33:58:22:20:a4:57:5a:23:58:5e:85:6d: 57:d6:5a:0f:b1:57:a1:51:34:b4:91:ae:da:e8:7d: 93:5e:20:01:de:6e:17:23:44:4f:2f:1d:cd:f7:71: 9e:40:7b:38:9b:04:94:5d:9f:99:13:91:3f:cf:e5: 5f:86:36:57:ba:6e:01:f1:87:82:a4:c2:7f:df:e4: 00:07:1d:df:73:ff:5f:80:f5:3e:19:90:c5:3a:23: 97:d0:2d:45:ba:55:6a:dc:f5:49:eb:6f:01:7b:1a: 9e:70:5e:ca:72:18:b5:91:4d:2c:3d:c3:7a:66:76: 1d:de:a0:b0:ce:95:53:7d:38:81:aa:58:6a:9f:da: 99:16:c2:7e:3e:62:79:99:a8:92:3b:9b:3f:5c:98: 8a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:22:BB:F2:D8:91:33:A8:63:74:D3:D2:7D:C1:D4:C4:4D:E4:E5:F2 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ee:c2:82:3f:6e:09:f4:7f:15:d9:d1:f7:47:46:3f:58:b3: c2:93:2a:e7:ac:bd:8e:83:c4:07:c7:0b:d4:e0:9b:83:54:23: 45:c3:78:bd:03:9f:53:0c:e0:82:b9:0e:68:29:99:4f:3e:6c: b1:09:99:74:22:5d:4a:23:be:88:7c:9c:6e:d3:84:dc:e7:07: 1e:a6:1d:33:79:19:64:dc:6c:03:d0:a9:7b:29:9e:9b:4d:1b: c8:f8:2b:84:9b:43:59:31:62:30:a9:0d:e9:9b:a3:90:4c:d6: ae:1b:35:18:b6:dc:51:24:b0:f4:a2:64:64:1c:eb:94:2f:4e: 1b:db:17:e2:43:aa:6e:ba:97:85:da:01:68:c4:0b:7d:f6:2a: 42:2d:08:7c:22:c7:7d:0c:38:ac:97:d4:39:1f:ee:11:50:78: bc:a6:bc:49:06:bd:5f:ca:77:17:f7:b6:39:d1:0a:a4:6a:83: 3c:91:87:08:a6:e2:f6:46:b9:6c:31:55:ab:c9:ae:84:18:2b: 44:9e:fc:91:a9:f8:62:99:4a:d8:fc:1f:f8:a2:48:f7:d9:c7: 8c:55:6a:14:49:c3:da:6d:59:b8:69:69:b5:a0:08:4d:c3:05: 51:a4:70:02:3e:d4:08:ab:76:26:0e:90:5a:c5:32:0b:bb:f5: 48:f6:90:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjUwODIzMDYyMzE3WhcNMjUwODMwMDYyMzE3WjAYMRYwFAYD VQQDEw02OGE5NWU1NS1jYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lavQC22r+/tcuUzALKNs38uOsA69xM4wJaDTIEsmUCXwH5j0+41CkxaO//d bnZUKz0xv5YyDOto+/0csTuAlpkdYo+DPKvUHS4wgPx51c7QlKINNwcKNNLLGDOY /qOtbcYLPDKrYBHNvOUzWCIgpFdaI1hehW1X1loPsVehUTS0ka7a6H2TXiAB3m4X I0RPLx3N93GeQHs4mwSUXZ+ZE5E/z+VfhjZXum4B8YeCpMJ/3+QABx3fc/9fgPU+ GZDFOiOX0C1FulVq3PVJ628BexqecF7Kchi1kU0sPcN6ZnYd3qCwzpVTfTiBqlhq n9qZFsJ+PmJ5maiSO5s/XJiKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0iu/LY kTOoY3TT0n3B1MRN5OXyMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF7sKCP24J9H8V2dH3R0Y/WLPCkyrnrL2Og8QHxwvU4JuDVCNFw3i9 A59TDOCCuQ5oKZlPPmyxCZl0Il1KI76IfJxu04Tc5wceph0zeRlk3GwD0Kl7KZ6b TRvI+CuEm0NZMWIwqQ3pm6OQTNauGzUYttxRJLD0omRkHOuUL04b2xfiQ6puupeF 2gFoxAt99ipCLQh8Isd9DDisl9Q5H+4RUHi8prxJBr1fyncX97Y50QqkaoM8kYcI puL2RrlsMVWrya6EGCtEnvyRqfhimUrY/B/4okj32ceMVWoUScPabVm4aWm1oAhN wwVRpHACPtQIq3YmDpBaxTILu/VI9pB0 -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:15 2025 by rpki-client