$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: oN/6oRUesD0z9c6K9Aw7tyGfeczlUk4kSS3XosszCco= Subject key identifier: C5:D2:97:52:04:4D:EC:72:69:A0:33:DF:91:E6:19:4B:97:16:55:F2 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 306D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 305E Signing time: Fri 22 Aug 2025 15:29:50 +0000 Manifest this update: Fri 22 Aug 2025 15:29:49 +0000 Manifest next update: Fri 29 Aug 2025 15:29:49 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: HVyPnYTsmEOAY95W9qj+MKg4+xasDzPUKntpK8+/EtE=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: hQKUzdzJskNaUaPGl2kmEUdrCcgwSNhHBQ7D6gtHv6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12397 (0x306d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Aug 22 15:29:49 2025 GMT Not After : Aug 29 15:29:49 2025 GMT Subject: CN=68a88ced-ab46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:60:0b:cd:31:7e:c5:d5:75:bd:61:e9:6f: 95:1d:39:fc:8a:a3:d1:45:4c:9d:bc:1a:14:5f:13: 24:54:4d:bf:c8:f2:4c:ac:eb:d7:ed:22:57:91:32: d6:a1:44:60:d2:e9:76:7c:78:c7:03:75:12:3e:0f: ef:5b:82:55:6b:cb:61:fb:c4:7b:a1:c6:2a:fd:76: 64:2b:24:ad:45:bc:70:62:e6:12:c6:78:ee:ae:89: f6:49:bb:f0:41:ac:5b:41:fd:03:23:cf:fc:1f:3e: 7c:bd:1f:c2:8b:5e:89:cd:af:c8:fe:56:2b:f3:d8: 23:61:20:5a:f1:ad:af:4e:40:c0:e9:76:5c:9c:53: f1:bd:e0:e9:f1:95:36:37:e3:f9:45:34:66:94:f9: 40:34:d4:4b:b3:e8:14:f0:e3:fe:8f:cb:d0:91:91: 29:de:fc:16:5b:49:18:38:ab:b9:0d:60:72:f9:71: a2:1f:76:47:3f:80:be:b5:7f:c4:09:67:ef:f2:7d: 16:ef:e4:af:0f:cf:74:d8:ee:57:ff:dc:42:9d:c5: 64:3f:7f:24:30:c9:87:6b:99:d7:ba:4f:42:65:5d: 8c:9c:3b:4a:67:fb:79:9b:8f:c1:1f:46:99:71:6a: 15:d1:9a:36:33:fe:ae:71:74:7c:c7:35:b1:5c:a1: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D2:97:52:04:4D:EC:72:69:A0:33:DF:91:E6:19:4B:97:16:55:F2 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:30:62:cb:95:fa:27:26:bb:0a:77:b5:7f:f9:04:d4:a7:14: ee:20:06:9f:36:fc:6b:b3:0f:d6:f9:39:75:fd:9c:55:ca:b6: 47:38:cb:71:8c:0d:ec:83:56:49:16:56:75:e6:e2:aa:0f:9a: d8:94:70:4c:d1:75:a3:af:f5:43:8a:07:9e:77:9a:c9:93:2b: 9d:2b:24:08:9c:6e:1c:7c:f2:76:12:48:16:5b:b5:f7:5d:4d: dc:14:1f:fc:0a:b6:df:6b:67:20:a8:31:b6:9a:cf:a1:06:86: 02:42:7c:55:6f:56:03:ec:63:aa:0f:80:0e:74:e5:4b:12:cd: 86:dd:15:27:65:b4:4e:fa:89:d4:34:c5:ce:01:f5:73:e8:d7: 6b:64:e6:00:42:37:c5:c0:86:a7:6a:0a:dc:0a:af:0b:1f:0b: fd:d9:78:6f:d6:2d:cb:41:d6:25:94:cf:5a:2c:01:e6:ec:94: 7b:09:a2:ea:62:5b:45:e9:d6:e4:bd:17:7a:b7:16:4e:10:7e: 39:ec:16:2d:0d:df:84:b3:41:ff:85:3b:8b:5d:15:3f:83:a8: 7b:34:59:24:5f:56:e0:65:bf:d4:4e:ac:cf:41:c8:fa:86:fb: 6d:91:0e:0e:ea:43:1e:e7:80:72:51:ff:3a:a7:b6:38:1b:8d: 13:cd:23:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUwODIyMTUyOTQ5WhcNMjUwODI5MTUyOTQ5WjAYMRYwFAYD VQQDEw02OGE4OGNlZC1hYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty9gC80xfsXVdb1h6W+VHTn8iqPRRUydvBoUXxMkVE2/yPJMrOvX7SJXkTLW oURg0ul2fHjHA3USPg/vW4JVa8th+8R7ocYq/XZkKyStRbxwYuYSxnjuron2Sbvw QaxbQf0DI8/8Hz58vR/Ci16Jza/I/lYr89gjYSBa8a2vTkDA6XZcnFPxveDp8ZU2 N+P5RTRmlPlANNRLs+gU8OP+j8vQkZEp3vwWW0kYOKu5DWBy+XGiH3ZHP4C+tX/E CWfv8n0W7+SvD8902O5X/9xCncVkP38kMMmHa5nXuk9CZV2MnDtKZ/t5m4/BH0aZ cWoV0Zo2M/6ucXR8xzWxXKGpdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXSl1IE TexyaaAz35HmGUuXFlXyMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7MGLLlfonJrsKd7V/+QTUpxTuIAafNvxrsw/W+Tl1/ZxVyrZHOMtx jA3sg1ZJFlZ15uKqD5rYlHBM0XWjr/VDigeed5rJkyudKyQInG4cfPJ2EkgWW7X3 XU3cFB/8Crbfa2cgqDG2ms+hBoYCQnxVb1YD7GOqD4AOdOVLEs2G3RUnZbRO+onU NMXOAfVz6NdrZOYAQjfFwIanagrcCq8LHwv92Xhv1i3LQdYllM9aLAHm7JR7CaLq YltF6dbkvRd6txZOEH457BYtDd+Es0H/hTuLXRU/g6h7NFkkX1bgZb/UTqzPQcj6 hvttkQ4O6kMe54ByUf86p7Y4G40TzSOc -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:53 2025 by rpki-client