$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json) Hash identifier: mOo2zhiIr4WOPxLSp5ajZw+kSzw6bzjXpx+Xv3Ws5IM= Subject key identifier: 0E:F1:60:B9:79:B0:C9:F4:6F:03:84:F9:20:28:29:3A:A1:7B:3D:33 Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft Manifest number: B5 Signing time: Sat 23 Aug 2025 06:14:12 +0000 Manifest this update: Sat 23 Aug 2025 06:14:12 +0000 Manifest next update: Sat 30 Aug 2025 06:14:12 +0000 Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: prnB4qFm/ltlixV/YMp3bPLKetrBG9XYghGKXYk3H1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Validity Not Before: Aug 23 06:14:12 2025 GMT Not After : Aug 30 06:14:12 2025 GMT Subject: CN=68a95c34-5e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:ba:22:64:db:19:55:b6:e9:17:b7:de:f0: 15:7f:05:c5:c2:91:5d:46:95:b6:9f:7b:55:ec:b0: fe:51:57:ee:d9:35:09:40:06:2b:ec:5e:88:37:ac: 54:8a:df:89:8e:5f:d0:67:9b:5a:d1:58:8d:53:0a: e6:aa:f6:de:b6:60:25:9e:8d:a4:9a:89:dc:c4:67: 73:f1:40:17:1a:91:22:2d:68:8b:7e:e0:86:97:db: 59:b4:c8:d1:37:e1:5d:96:90:34:87:db:9d:c3:89: 87:1b:19:99:a1:27:da:73:f1:21:42:b0:77:c9:09: 53:0c:27:02:ab:16:29:96:a7:05:ae:5c:70:95:8c: b3:79:10:5e:d3:cd:b4:25:7e:62:a3:ad:1b:dc:e6: ae:76:06:b7:d5:c3:51:10:6a:77:c7:5f:74:b2:c6: f0:ce:bb:dd:ac:05:78:d7:c1:79:99:a3:da:0a:ec: 91:a3:56:d9:f4:c2:47:4b:03:52:2e:20:29:e2:8f: a1:13:b9:f0:90:1f:16:97:e0:53:7d:f0:f1:8b:4f: 70:6c:79:96:fe:25:cb:3c:70:7f:9f:57:86:f4:bf: 59:18:42:58:e7:0b:af:72:5b:dc:d5:79:17:06:39: 15:c3:1a:65:86:e2:86:47:0d:7c:69:5c:d4:ab:cc: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F1:60:B9:79:B0:C9:F4:6F:03:84:F9:20:28:29:3A:A1:7B:3D:33 X509v3 Authority Key Identifier: keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1f:13:fc:3f:83:37:c4:9d:b6:63:91:91:9f:fa:c7:89:d1: 2d:6e:8e:d1:2e:60:64:6d:ec:42:8b:08:d0:46:25:a8:00:61: af:32:60:f7:92:6a:a2:c7:69:18:03:77:29:3b:d9:b5:22:4a: ed:a8:38:27:03:b4:73:ef:45:4d:41:0b:3c:60:12:57:cd:5d: 5c:f2:87:eb:c2:aa:46:46:7f:30:48:d6:77:c3:cb:a4:dc:d7: 79:83:10:01:6f:11:ae:36:43:76:d7:f6:ff:57:78:0c:9f:48: 7e:fb:13:16:46:7a:7f:a5:09:61:92:5c:eb:1b:91:68:29:b8: 13:c5:d3:29:9d:58:0e:4a:1e:59:8f:6f:13:85:78:ae:ed:f5: 4e:1e:fb:c6:a4:c5:eb:e5:2f:ef:af:e5:ca:ba:fc:a4:1a:46: 11:ed:ef:cd:d0:ae:aa:61:3e:03:7d:fe:83:79:5a:02:66:d3: 9e:df:c4:57:57:e8:37:e5:da:35:b2:c6:c0:26:22:be:42:fe: 28:43:12:92:41:96:63:84:b0:1f:a5:cd:39:13:fa:f1:ff:16: 7b:fe:9a:35:ce:0a:cd:78:8d:e4:ae:09:16:c7:8f:96:bd:54: 36:2a:ad:0d:ca:a7:68:50:e1:19:da:67:90:90:92:cd:7d:ed: 08:50:2b:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyQzQxMTAvBgNVBAUTKDY2QzVCMTkwNEIzNUM0N0Q5NDUwOEVDMEExQUNEQTgz NjhERUY0QTkwHhcNMjUwODIzMDYxNDEyWhcNMjUwODMwMDYxNDEyWjAYMRYwFAYD VQQDEw02OGE5NWMzNC01ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr66ImTbGVW26Re33vAVfwXFwpFdRpW2n3tV7LD+UVfu2TUJQAYr7F6IN6xU it+Jjl/QZ5ta0ViNUwrmqvbetmAlno2kmoncxGdz8UAXGpEiLWiLfuCGl9tZtMjR N+FdlpA0h9udw4mHGxmZoSfac/EhQrB3yQlTDCcCqxYplqcFrlxwlYyzeRBe0820 JX5io60b3Oaudga31cNREGp3x190ssbwzrvdrAV418F5maPaCuyRo1bZ9MJHSwNS LiAp4o+hE7nwkB8Wl+BTffDxi09wbHmW/iXLPHB/n1eG9L9ZGEJY5wuvclvc1XkX BjkVwxplhuKGRw18aVzUq8zUPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7xYLl5 sMn0bwOE+SAoKTqhez0zMB8GA1UdIwQYMBaAFGbFsZBLNcR9lFCOwKGs2oNo3vSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GQkYxNEU3MjZD MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhIMlVVSTdBb2F6YWcyamU5 S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTJDNC9GQkYxNEU3MjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhI MlVVSTdBb2F6YWcyamU5S2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcHxP8P4M3xJ22Y5GRn/rHidEtbo7RLmBkbexCiwjQRiWoAGGvMmD3 kmqix2kYA3cpO9m1IkrtqDgnA7Rz70VNQQs8YBJXzV1c8ofrwqpGRn8wSNZ3w8uk 3Nd5gxABbxGuNkN21/b/V3gMn0h++xMWRnp/pQlhklzrG5FoKbgTxdMpnVgOSh5Z j28ThXiu7fVOHvvGpMXr5S/vr+XKuvykGkYR7e/N0K6qYT4Dff6DeVoCZtOe38RX V+g35do1ssbAJiK+Qv4oQxKSQZZjhLAfpc05E/rx/xZ7/po1zgrNeI3krgkWx4+W vVQ2Kq0NyqdoUOEZ2meQkJLNfe0IUCub -----END CERTIFICATE-----Generated at Sat Aug 23 18:41:54 2025 by rpki-client