$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: sgktXgrEeg4hDzaxfRW+Lys1zmJ0yMRHQQA7i0IscmM= Subject key identifier: 11:66:DD:19:A1:12:28:0E:DB:F1:D9:A7:65:EA:A8:87:78:3A:17:44 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 02B1 Signing time: Sat 23 Aug 2025 03:35:59 +0000 Manifest this update: Sat 23 Aug 2025 03:35:58 +0000 Manifest next update: Sat 30 Aug 2025 03:35:58 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: FBJ/uJJspyhOV3UXWvSWiOaHoyYy2XJ8rb+gxfps2e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Aug 23 03:35:58 2025 GMT Not After : Aug 30 03:35:58 2025 GMT Subject: CN=68a9371e-1480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:ac:59:dc:08:07:33:13:f3:73:ac:cd:79: e2:5b:0f:44:5c:96:9d:03:02:5e:40:87:24:d1:f8: 71:64:48:98:c7:3e:36:a9:93:2f:ec:99:11:da:bb: fa:df:41:3a:a8:05:73:a2:1f:6e:a1:d3:8f:bd:21: 5a:36:f8:ae:6a:6f:db:11:04:8a:f6:dc:b3:01:02: 53:1d:9c:a1:a4:ce:51:6c:c1:9b:f0:3a:f8:bf:45: 1b:55:b0:05:b0:a5:20:db:5a:af:50:46:d6:d7:e8: 6f:ec:06:e9:36:7c:4f:be:89:97:c3:a1:69:c9:52: 91:4b:3d:8c:d2:51:b9:e4:76:c3:e9:d4:5d:d3:dd: 87:63:0a:ad:60:bc:02:89:e1:7e:21:d2:63:02:41: 2f:61:91:2d:c5:5f:52:c8:2d:6b:e8:99:e0:41:2b: 6c:af:db:f8:73:9e:c6:dc:2b:b4:df:e5:6e:52:36: c6:02:78:74:ff:e4:fe:04:48:ad:f4:77:fd:c0:fe: 67:6c:83:39:c5:bb:96:75:47:d1:fa:86:0c:1f:4c: 74:aa:fa:ed:a4:63:f8:94:ff:d9:46:6b:4b:96:94: 59:28:bc:d8:46:66:f5:a2:ad:3a:61:c3:a0:1b:12: ef:ca:1e:af:44:8e:b6:49:76:38:80:a4:f0:af:bc: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:DD:19:A1:12:28:0E:DB:F1:D9:A7:65:EA:A8:87:78:3A:17:44 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:19:94:58:87:7b:0c:7f:ce:5c:e5:1c:be:5f:33:b2:4a:b7: f2:dc:41:03:bf:c5:22:4d:7a:fd:e5:59:71:19:3c:9c:c8:39: 79:db:e1:fd:ec:dc:d4:8b:ad:60:25:99:3e:ca:5b:ac:f9:f3: 7e:8d:b2:1b:06:10:81:9e:06:74:0d:2f:8a:7e:7d:b0:81:30: 13:a4:48:aa:09:47:29:74:dd:e8:83:55:86:ac:2b:89:a4:fb: 7f:b4:ad:9e:2e:e0:9e:ca:c8:e2:59:b8:96:70:bb:3c:35:3f: 81:84:e8:d1:e0:7a:a3:f6:fe:fc:80:0c:c9:aa:c1:a0:bb:a4: 6a:88:7a:8f:61:11:ff:34:70:37:8e:af:72:4d:48:88:a4:dc: 1d:fa:bf:46:af:b6:a6:53:41:7a:16:4d:43:da:77:b8:26:c1: ac:80:9f:0f:cc:2b:cd:70:24:cf:49:57:70:d6:e1:68:95:e9: a4:4d:50:ce:fc:c6:32:0f:7b:42:84:5b:02:bd:48:ac:b7:ba: d7:f2:c9:2f:e0:31:65:2c:8c:82:1a:4b:0e:3a:eb:10:58:1c: 78:c2:b0:c9:3f:ac:5e:3f:af:ef:4f:9c:86:aa:07:ba:c2:be: 4a:1c:ca:ff:a0:7b:1d:40:35:77:e3:12:5a:48:eb:4a:be:30: e3:be:dd:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUwODIzMDMzNTU4WhcNMjUwODMwMDMzNTU4WjAYMRYwFAYD VQQDEw02OGE5MzcxZS0xNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4+sWdwIBzMT83OszXniWw9EXJadAwJeQIck0fhxZEiYxz42qZMv7JkR2rv6 30E6qAVzoh9uodOPvSFaNviuam/bEQSK9tyzAQJTHZyhpM5RbMGb8Dr4v0UbVbAF sKUg21qvUEbW1+hv7AbpNnxPvomXw6FpyVKRSz2M0lG55HbD6dRd092HYwqtYLwC ieF+IdJjAkEvYZEtxV9SyC1r6JngQStsr9v4c57G3Cu03+VuUjbGAnh0/+T+BEit 9Hf9wP5nbIM5xbuWdUfR+oYMH0x0qvrtpGP4lP/ZRmtLlpRZKLzYRmb1oq06YcOg GxLvyh6vRI62SXY4gKTwr7wKiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFm3Rmh EigO2/HZp2XqqId4OhdEMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMGZRYh3sMf85c5Ry+XzOySrfy3EEDv8UiTXr95VlxGTycyDl52+H9 7NzUi61gJZk+ylus+fN+jbIbBhCBngZ0DS+Kfn2wgTATpEiqCUcpdN3og1WGrCuJ pPt/tK2eLuCeysjiWbiWcLs8NT+BhOjR4Hqj9v78gAzJqsGgu6RqiHqPYRH/NHA3 jq9yTUiIpNwd+r9Gr7amU0F6Fk1D2ne4JsGsgJ8PzCvNcCTPSVdw1uFolemkTVDO /MYyD3tChFsCvUist7rX8skv4DFlLIyCGksOOusQWBx4wrDJP6xeP6/vT5yGqge6 wr5KHMr/oHsdQDV34xJaSOtKvjDjvt0S -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:06 2025 by rpki-client