$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: p7cQ48eMQ6Xz1k3WYQvz/h2E+KbOsn9YqyuX3pTMmEY= Subject key identifier: 18:11:C5:9B:7A:94:E7:90:13:4B:58:4A:2D:E3:6A:D0:8B:29:42:94 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0C5F Signing time: Fri 22 Aug 2025 18:36:24 +0000 Manifest this update: Fri 22 Aug 2025 18:36:23 +0000 Manifest next update: Fri 29 Aug 2025 18:36:23 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: hM7skcFoJNzFiTjz50ZWmf+PPlUz0ekMQK1lyUlU1II=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Aug 22 18:36:23 2025 GMT Not After : Aug 29 18:36:23 2025 GMT Subject: CN=68a8b8a7-2500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:b3:e6:c6:5a:77:0b:b8:96:34:67:1b:ad: b1:63:dd:74:07:53:97:69:6a:82:04:ae:cb:83:2d: 98:b5:fe:ff:0b:a3:9f:36:66:b9:c3:14:a0:b5:ab: ca:dd:46:81:2a:dd:d2:50:b9:fd:e8:b0:dd:6e:cb: 85:b7:c3:64:7f:b1:45:d0:76:ba:8c:8d:74:df:5e: c0:9d:95:9d:74:c4:60:92:17:2e:4c:60:58:97:38: 36:a4:d4:f4:a1:97:13:ac:dd:4a:37:9c:61:45:0a: 13:a7:24:67:ca:36:83:53:13:1e:7d:1b:6b:65:56: 28:53:1f:96:ee:d9:3c:2e:92:a9:d7:e0:68:87:35: e3:80:ee:bb:18:4a:83:7e:53:f4:59:4d:76:55:58: 23:5f:a5:0a:c4:3d:1e:40:58:be:8f:94:50:73:a2: 4a:4c:9b:b3:f5:66:12:8e:3a:89:9f:4b:e7:cf:86: fc:e0:84:76:92:11:0b:74:42:8b:ac:e7:82:44:54: 84:89:10:00:bf:61:4e:2e:86:e6:72:26:b6:69:7c: b5:b9:3a:09:57:ce:1a:ad:bc:8e:4c:dc:39:ae:1a: d4:a7:de:a1:b4:92:90:3b:e2:99:89:a8:8d:5f:3b: 70:d4:9d:36:c8:bf:52:a2:6b:7c:82:87:9a:38:a7: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:11:C5:9B:7A:94:E7:90:13:4B:58:4A:2D:E3:6A:D0:8B:29:42:94 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6d:6b:32:ee:83:12:a1:83:30:51:1f:d7:7d:a6:20:33:92: 19:dd:5f:6a:f8:fd:12:90:51:13:07:47:dd:0d:bb:2d:6f:48: 13:71:7d:ec:4c:ca:c5:7e:8d:dc:c8:14:c9:ae:9d:ce:e0:a4: 89:b2:76:4f:65:ab:09:91:7a:74:0b:c3:3a:9f:fe:82:32:28: 5c:13:01:59:f6:17:e1:e3:0d:6e:3c:a7:4e:f7:26:61:44:5a: 22:23:99:e8:64:46:3e:50:a7:b4:73:dd:af:8f:00:a7:ee:b4: 26:b4:3a:14:b0:93:90:35:26:f5:d6:5a:5a:45:8c:fe:05:9e: 68:ce:6d:1a:13:66:fd:9c:3f:ec:53:74:28:b6:4e:95:38:dc: 39:69:9f:8c:dd:0e:92:96:55:72:b0:6b:ea:e1:74:45:3b:ee: dc:9c:84:c3:05:7e:10:5b:c1:5a:3f:80:dc:d5:fb:77:f6:55: be:f0:67:22:9d:53:12:c8:9c:16:eb:71:a3:66:fe:fa:5f:1f: 46:af:14:1a:0e:98:27:82:f4:c7:e4:0f:fc:44:4c:bb:58:4a: 7c:e6:8f:74:18:c7:f1:10:6b:15:04:46:e1:20:ed:b6:8e:62: 25:ee:74:e6:1a:7d:05:73:ff:7f:2a:c8:1e:46:7b:8f:6c:ba: 4a:65:f2:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUwODIyMTgzNjIzWhcNMjUwODI5MTgzNjIzWjAYMRYwFAYD VQQDEw02OGE4YjhhNy0yNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwqz5sZadwu4ljRnG62xY910B1OXaWqCBK7Lgy2Ytf7/C6OfNma5wxSgtavK 3UaBKt3SULn96LDdbsuFt8Nkf7FF0Ha6jI10317AnZWddMRgkhcuTGBYlzg2pNT0 oZcTrN1KN5xhRQoTpyRnyjaDUxMefRtrZVYoUx+W7tk8LpKp1+BohzXjgO67GEqD flP0WU12VVgjX6UKxD0eQFi+j5RQc6JKTJuz9WYSjjqJn0vnz4b84IR2khELdEKL rOeCRFSEiRAAv2FOLobmcia2aXy1uToJV84arbyOTNw5rhrUp96htJKQO+KZiaiN Xztw1J02yL9Somt8goeaOKfvjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgRxZt6 lOeQE0tYSi3jatCLKUKUMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBbWsy7oMSoYMwUR/XfaYgM5IZ3V9q+P0SkFETB0fdDbstb0gTcX3s TMrFfo3cyBTJrp3O4KSJsnZPZasJkXp0C8M6n/6CMihcEwFZ9hfh4w1uPKdO9yZh RFoiI5noZEY+UKe0c92vjwCn7rQmtDoUsJOQNSb11lpaRYz+BZ5ozm0aE2b9nD/s U3Qotk6VONw5aZ+M3Q6SllVysGvq4XRFO+7cnITDBX4QW8FaP4Dc1ft39lW+8Gci nVMSyJwW63GjZv76Xx9GrxQaDpgngvTH5A/8REy7WEp85o90GMfxEGsVBEbhIO22 jmIl7nTmGn0Fc/9/KsgeRnuPbLpKZfJQ -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:08 2025 by rpki-client