$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: /4Czwgc0C2jaz4Iwl+n/FXoCj3pkO0qqcMJtmWYuSqQ= Subject key identifier: C5:96:94:8B:F9:A6:95:95:4E:24:E8:FB:62:96:7B:52:44:36:2B:B1 Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: 0120 Signing time: Sat 23 Aug 2025 05:02:16 +0000 Manifest this update: Sat 23 Aug 2025 05:02:16 +0000 Manifest next update: Sat 30 Aug 2025 05:02:16 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: z7ighF+5tOV28FZt2xjlky/VsrcQ4NqMb3w6zZlWW2Y=) 2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: Aug 23 05:02:16 2025 GMT Not After : Aug 30 05:02:16 2025 GMT Subject: CN=68a94b58-1a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:f3:ae:22:be:73:7b:d1:62:6b:8b:c2:85: 88:28:36:9a:40:4c:be:5b:11:61:aa:a7:19:40:9f: db:31:38:a6:5d:81:25:89:a2:0c:43:ef:15:2d:3e: 58:7b:1b:24:11:c9:98:0f:99:28:07:89:46:14:1b: 7e:1b:1b:48:ac:42:4d:a1:59:19:17:37:c7:10:f7: a9:29:82:8a:21:8f:4e:42:ef:c2:95:83:2d:37:5b: f7:dd:fd:3b:e9:de:d2:76:84:b0:c6:c6:28:03:06: 9a:10:15:7f:e6:6b:7e:cf:ad:59:73:bb:b7:00:e0: 42:6f:fa:37:c6:e9:9b:4f:99:02:5d:cf:81:70:a6: 07:5d:01:f9:60:a4:59:4b:9a:0d:5e:82:92:ce:85: 8d:91:00:49:b5:b7:ab:a2:ce:94:85:30:6d:d3:50: bd:11:d7:9a:88:d2:d7:5e:33:25:b5:18:7c:50:be: 9a:0d:c1:4e:b9:66:dd:28:e1:f3:ac:e9:fb:5a:7b: 15:59:ff:c5:57:69:32:3a:74:a3:33:2d:44:20:3a: 89:96:02:94:e9:21:e3:d7:3e:af:19:b5:48:bc:26: 1d:01:72:b2:02:5f:bb:83:50:3e:ae:a1:b8:d9:c9: 7a:29:33:a7:8c:b5:56:f0:03:4f:ed:d2:a1:70:92: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:94:8B:F9:A6:95:95:4E:24:E8:FB:62:96:7B:52:44:36:2B:B1 X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:d5:69:3a:f2:f4:5c:15:a2:fa:67:23:bf:fb:06:5a:48:43: 67:4a:cf:59:36:28:2f:0e:ee:ba:b9:64:c7:88:56:0c:8e:19: 96:cb:bc:57:8e:3e:68:6b:08:06:3d:f7:a9:9b:02:6f:50:6a: 12:03:90:48:c5:f6:41:5b:95:9c:df:1f:51:c6:da:d9:c0:3c: 03:c9:9f:39:97:e1:a2:78:71:b5:f6:08:12:e3:45:af:40:6d: 8d:bc:99:44:ee:59:2c:7a:8f:b6:4b:a3:a3:be:28:a2:7c:6b: 7b:03:0f:0c:73:7a:6d:77:08:39:0c:66:be:9c:6a:3d:84:41: ea:e7:d2:20:9d:23:8d:08:0a:9b:3c:84:02:d0:30:12:26:d1: 72:b2:46:5a:6c:c1:eb:be:93:4d:3e:87:59:a5:fa:5a:95:ef: e2:59:8f:3b:f2:f1:9e:19:dd:23:7a:3c:b2:c5:6e:d6:35:dd: 50:22:d1:32:f3:a6:ba:ef:80:42:67:42:6e:37:6a:da:ad:7e: 84:fe:ae:a8:58:57:28:8e:47:1d:3a:38:84:f0:8c:24:a4:a7: 3e:37:5d:68:a3:49:03:34:fb:28:37:00:84:b8:0c:87:51:bf: 70:c4:84:8a:9c:80:5b:2a:70:84:ca:57:b6:69:29:7d:21:c0: eb:e9:6c:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB QTczMUI1NTIwHhcNMjUwODIzMDUwMjE2WhcNMjUwODMwMDUwMjE2WjAYMRYwFAYD VQQDEw02OGE5NGI1OC0xYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlrzriK+c3vRYmuLwoWIKDaaQEy+WxFhqqcZQJ/bMTimXYEliaIMQ+8VLT5Y exskEcmYD5koB4lGFBt+GxtIrEJNoVkZFzfHEPepKYKKIY9OQu/ClYMtN1v33f07 6d7SdoSwxsYoAwaaEBV/5mt+z61Zc7u3AOBCb/o3xumbT5kCXc+BcKYHXQH5YKRZ S5oNXoKSzoWNkQBJtberos6UhTBt01C9EdeaiNLXXjMltRh8UL6aDcFOuWbdKOHz rOn7WnsVWf/FV2kyOnSjMy1EIDqJlgKU6SHj1z6vGbVIvCYdAXKyAl+7g1A+rqG4 2cl6KTOnjLVW8ANP7dKhcJI2ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWWlIv5 ppWVTiTo+2KWe1JENiuxMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5 RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC11Wk68vRcFaL6ZyO/+wZaSENnSs9ZNigvDu66uWTHiFYMjhmWy7xX jj5oawgGPfepmwJvUGoSA5BIxfZBW5Wc3x9RxtrZwDwDyZ85l+GieHG19ggS40Wv QG2NvJlE7lkseo+2S6OjviiifGt7Aw8Mc3ptdwg5DGa+nGo9hEHq59IgnSONCAqb PIQC0DASJtFyskZabMHrvpNNPodZpfpale/iWY878vGeGd0jejyyxW7WNd1QItEy 86a674BCZ0JuN2rarX6E/q6oWFcojkcdOjiE8IwkpKc+N11oo0kDNPsoNwCEuAyH Ub9wxISKnIBbKnCEyle2aSl9IcDr6WzA -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:40 2025 by rpki-client