$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: E9xzrj8hz/WgaqM+iZ/KtvAQqM3wvSfobrczA3kznCg= Subject key identifier: 30:5A:DD:4E:28:AF:38:FC:71:E4:F7:98:FD:74:38:40:26:7F:E4:20 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 0318 Signing time: Sat 23 Aug 2025 01:26:37 +0000 Manifest this update: Sat 23 Aug 2025 01:26:36 +0000 Manifest next update: Sat 30 Aug 2025 01:26:36 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: 2lkT9JJtNawcu3moGahf+3hovS0yq4SqaoW3tARii2s=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: RnbjFxdhVYxbEY3yp6uidgVt3+flm27oqhA1+XpnuB4=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: 3npwV8/+wiUK9JBAZyO0+8UedY3k/f+O7Td/WLjNjlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Aug 23 01:26:36 2025 GMT Not After : Aug 30 01:26:36 2025 GMT Subject: CN=68a918cd-5e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:1d:04:18:59:bd:c9:47:55:dd:27:11:74: 40:69:56:4f:d1:6b:ff:bb:33:b6:54:c6:db:9d:88: e8:56:6f:c3:5b:5a:de:a2:e2:f0:29:83:c4:5b:cb: 6c:5c:aa:b6:13:97:dc:2a:2d:fe:f4:3e:f0:c5:02: 4f:20:81:3d:f7:83:04:bf:65:4c:aa:33:86:11:97: 75:ef:ec:66:32:9f:c5:25:83:37:e9:62:ac:df:03: 8e:b8:af:f3:2b:ad:89:40:9d:68:b7:e3:d1:94:57: 51:51:5d:30:41:93:8d:20:de:fd:0e:ec:5c:52:a9: 68:2b:4e:d7:a9:ac:1c:28:56:ba:af:8f:36:f9:a4: fc:f4:a8:a2:73:9f:6d:97:e0:9b:07:8c:9a:f2:37: 4b:b5:21:2a:55:87:31:31:78:8c:3a:14:36:2a:1c: a2:fa:1b:89:af:2b:81:6b:f1:96:14:fe:06:07:8d: e7:9d:f2:db:82:0f:07:8b:d1:cc:a8:62:0d:5b:d8: 97:6e:42:88:c2:5d:dd:35:42:47:1c:3d:8c:40:fa: e2:85:e9:04:15:d8:17:39:c7:79:02:63:d0:41:ef: 9d:98:64:c9:31:08:82:50:07:40:72:81:99:c3:cd: 07:92:39:5a:ca:c2:22:ea:03:cc:35:1d:9d:01:7a: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5A:DD:4E:28:AF:38:FC:71:E4:F7:98:FD:74:38:40:26:7F:E4:20 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5f:ce:fc:ae:b4:99:1d:9f:5f:86:3f:df:e3:94:84:f1:3b: 2a:ec:5a:21:b4:70:4f:03:f5:a4:bb:e3:4c:a2:01:3e:c8:b2: ad:c3:ed:20:0a:8a:3b:d8:e5:ed:24:c2:5b:4a:88:9d:2a:ee: f6:8c:35:50:b4:04:18:4e:f2:d4:d8:f6:42:e9:40:a0:28:cf: 15:8d:11:6a:e0:af:d9:f1:e5:ca:dd:e8:20:71:79:f6:6e:8f: b1:d4:a6:cd:aa:e0:85:6f:e9:1a:0f:af:f5:f2:4b:22:df:91: 00:4c:7d:e7:85:b6:5b:7e:43:fe:20:06:db:bc:d4:b5:82:ea: 3f:ce:a0:1b:cb:bb:2c:91:e5:4e:02:d8:1f:57:cf:84:e0:a6: 03:2e:83:2d:8d:cc:b7:30:09:91:51:a4:d2:bd:23:0a:a8:ca: e7:bf:63:5d:ea:df:18:78:a7:71:45:35:e5:82:10:2a:eb:f2: dd:f1:0e:39:36:62:a5:f5:e3:92:b7:b4:dd:84:d2:1c:23:a7: 18:c4:95:a6:85:e0:49:e9:a6:a4:9c:11:ed:54:91:85:15:00: 08:49:0b:a5:e7:01:a3:90:83:89:0d:69:bb:cb:bb:cc:75:84: a3:8e:70:9a:43:a8:28:27:d1:60:5b:3d:37:fa:aa:a3:93:f4: 2d:d8:ce:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwODIzMDEyNjM2WhcNMjUwODMwMDEyNjM2WjAYMRYwFAYD VQQDEw02OGE5MThjZC01ZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDkdBBhZvclHVd0nEXRAaVZP0Wv/uzO2VMbbnYjoVm/DW1reouLwKYPEW8ts XKq2E5fcKi3+9D7wxQJPIIE994MEv2VMqjOGEZd17+xmMp/FJYM36WKs3wOOuK/z K62JQJ1ot+PRlFdRUV0wQZONIN79DuxcUqloK07XqawcKFa6r482+aT89Kiic59t l+CbB4ya8jdLtSEqVYcxMXiMOhQ2Khyi+huJryuBa/GWFP4GB43nnfLbgg8Hi9HM qGINW9iXbkKIwl3dNUJHHD2MQPrihekEFdgXOcd5AmPQQe+dmGTJMQiCUAdAcoGZ w80HkjlaysIi6gPMNR2dAXrFpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBa3U4o rzj8ceT3mP10OEAmf+QgMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9X878rrSZHZ9fhj/f45SE8Tsq7FohtHBPA/Wku+NMogE+yLKtw+0g Coo72OXtJMJbSoidKu72jDVQtAQYTvLU2PZC6UCgKM8VjRFq4K/Z8eXK3eggcXn2 bo+x1KbNquCFb+kaD6/18ksi35EATH3nhbZbfkP+IAbbvNS1guo/zqAby7sskeVO AtgfV8+E4KYDLoMtjcy3MAmRUaTSvSMKqMrnv2Nd6t8YeKdxRTXlghAq6/Ld8Q45 NmKl9eOSt7TdhNIcI6cYxJWmheBJ6aaknBHtVJGFFQAISQul5wGjkIOJDWm7y7vM dYSjjnCaQ6goJ9FgWz03+qqjk/Qt2M7b -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:00 2025 by rpki-client