$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json) Hash identifier: FBnW2TIRAvfmwrNgOOvVmzpC+YN+i9xeZM8teZjS8nQ= Subject key identifier: D8:12:96:E9:2C:2D:3B:CE:D5:40:FF:00:24:8C:4C:BF:1B:E0:48:7A Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Certificate serial: 2940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft Manifest number: 291F Signing time: Fri 22 Aug 2025 15:38:51 +0000 Manifest this update: Fri 22 Aug 2025 15:38:51 +0000 Manifest next update: Fri 29 Aug 2025 15:38:51 +0000 Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: ePdUo+baCD8VBraL60JIhN5wgVvb7yHgrp+fY5LMuEQ=) 2: F4246CDA561811E98A165872C4F9AE02.roa (hash: C/PaFQfpTy7SRBE+0XzPzL+bck/ugVag2KSCjWGbACs=) 3: 58292E96774111F0A079543BC4F9AE02.roa (hash: cB0aG0QBKc7lbuLj1XFyRNR3680AdznFwoFOUAcWcEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10560 (0x2940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Validity Not Before: Aug 22 15:38:51 2025 GMT Not After : Aug 29 15:38:51 2025 GMT Subject: CN=68a88f0b-fa97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:d5:25:3d:d6:3b:51:69:5a:b6:73:43:5e: 3c:18:eb:70:aa:e8:7a:36:f6:2f:4e:0f:08:f2:30: c1:09:95:17:e8:93:66:89:e3:31:d4:b3:2e:29:79: 25:2b:38:b4:a5:6b:db:ed:1e:2f:db:50:9f:75:ba: 9f:21:20:a2:ee:10:2f:6a:4a:ba:e8:bb:9f:c3:7f: 49:c7:e2:ef:a8:ee:c4:b6:37:f8:c6:42:a4:0c:c2: 52:00:03:41:a3:14:78:30:21:e1:92:89:07:ab:e9: 9b:7c:13:bf:4e:27:83:6d:b7:96:78:9e:50:0c:21: 6e:27:5d:47:e0:17:4a:bc:2a:7d:64:1c:74:4d:51: 77:eb:02:19:8d:b4:9c:e1:88:fd:3e:61:69:75:bc: 96:ef:4c:95:b6:9b:e6:5d:35:40:f3:11:28:cb:b3: b5:d2:2b:22:c7:2b:a8:4d:d6:33:6a:17:d9:1f:d8: e9:4f:1d:43:b3:8b:af:fb:ba:1f:b1:54:1f:72:81: f2:b5:37:af:d5:01:cc:08:f9:7d:4a:42:20:e2:d2: cd:15:95:07:88:82:c4:06:46:d3:c9:0a:47:01:1b: 8d:eb:ed:0a:a2:ef:a4:7b:e7:47:49:96:22:35:79: e7:83:53:21:b2:be:c6:7a:43:31:f0:4a:28:93:41: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:12:96:E9:2C:2D:3B:CE:D5:40:FF:00:24:8C:4C:BF:1B:E0:48:7A X509v3 Authority Key Identifier: keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:25:15:7e:c7:e9:cd:5f:d9:fe:7c:db:83:07:f5:7f:02:c5: 12:f0:74:79:1e:d6:e5:4a:7d:08:7a:92:84:20:d6:96:2e:0e: 66:6c:ac:5b:4c:71:81:a6:bb:0d:ad:d3:c4:0e:2e:1e:f8:8b: 3c:20:cf:9f:31:5e:f0:16:85:1d:92:55:2c:44:0c:3d:d0:6f: 0c:e9:96:17:be:07:22:02:d8:28:e1:c7:f3:d1:db:17:e7:60: 4e:f4:11:fd:d3:a7:29:74:55:d9:db:fc:34:88:1e:8c:2b:21: 1a:cb:4f:b0:20:16:59:6d:73:80:01:b4:46:99:56:de:18:ae: 60:3f:ac:af:03:d8:9f:95:bc:6b:b2:04:a4:15:4f:57:f1:e5: 27:74:92:0b:92:7c:0d:d9:23:29:96:54:36:ab:ad:72:ca:64: 8f:a2:4d:94:8b:c5:93:e7:c2:d2:25:1b:2d:ea:d7:8c:08:c6: cb:92:56:68:19:79:56:89:0a:2b:f5:b5:f7:80:26:8a:6e:57: cf:21:ca:87:5d:b0:fc:3a:f2:de:08:f4:7e:78:f8:da:9f:58: 52:88:b8:a8:7b:a8:28:3c:0d:d8:7e:3f:7c:e5:62:35:5b:0b: 3f:9f:2c:37:50:7e:ed:c4:92:2e:94:66:ee:2e:3c:51:98:1b: 48:9b:c7:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1MTcxMTAvBgNVBAUTKDY3NUYzQkExRjk2QTlFMUVDMkIwMTM3NjYyQzc1NERC MUQxRTAwNzMwHhcNMjUwODIyMTUzODUxWhcNMjUwODI5MTUzODUxWjAYMRYwFAYD VQQDEw02OGE4OGYwYi1mYTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzarVJT3WO1FpWrZzQ148GOtwquh6NvYvTg8I8jDBCZUX6JNmieMx1LMuKXkl Kzi0pWvb7R4v21CfdbqfISCi7hAvakq66Lufw39Jx+LvqO7Etjf4xkKkDMJSAANB oxR4MCHhkokHq+mbfBO/TieDbbeWeJ5QDCFuJ11H4BdKvCp9ZBx0TVF36wIZjbSc 4Yj9PmFpdbyW70yVtpvmXTVA8xEoy7O10isixyuoTdYzahfZH9jpTx1Ds4uv+7of sVQfcoHytTev1QHMCPl9SkIg4tLNFZUHiILEBkbTyQpHARuN6+0Kou+ke+dHSZYi NXnng1Mhsr7GekMx8Eook0Ea6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgSluks LTvO1UD/ACSMTL8b4Eh6MB8GA1UdIwQYMBaAFGdfO6H5ap4ewrATdmLHVNsdHgBz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDUxNy80MDZGOTA0QzZB RTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5oN0NzQk4yWXNkVTJ4MGVB SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxODdvZmxxbmg3Q3NCTjJZc2RVMngwZUFITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDUxNy80MDZGOTA0QzZBRTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5o N0NzQk4yWXNkVTJ4MGVBSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIJRV+x+nNX9n+fNuDB/V/AsUS8HR5HtblSn0IepKEINaWLg5mbKxb THGBprsNrdPEDi4e+Is8IM+fMV7wFoUdklUsRAw90G8M6ZYXvgciAtgo4cfz0dsX 52BO9BH906cpdFXZ2/w0iB6MKyEay0+wIBZZbXOAAbRGmVbeGK5gP6yvA9iflbxr sgSkFU9X8eUndJILknwN2SMpllQ2q61yymSPok2Ui8WT58LSJRst6teMCMbLklZo GXlWiQor9bX3gCaKblfPIcqHXbD8OvLeCPR+ePjan1hSiLioe6goPA3Yfj985WI1 Wws/nyw3UH7txJIulGbuLjxRmBtIm8fb -----END CERTIFICATE-----Generated at Sun Aug 24 04:47:49 2025 by rpki-client