$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: 4er1up6PjlV7sIrinP84qUVMHeLERYCPuYZNJUgunVk= Subject key identifier: D6:3D:09:FE:C1:CB:18:2B:F2:0F:C1:F1:C0:4C:3A:2F:20:79:77:BB Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1E43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1E32 Signing time: Fri 22 Aug 2025 16:08:11 +0000 Manifest this update: Fri 22 Aug 2025 16:08:10 +0000 Manifest next update: Fri 29 Aug 2025 16:08:10 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: Z3+kKQ382tgEXF6id8ewvwC8q1qn6v80bi3ZBFQi3Zg=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7747 (0x1e43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Aug 22 16:08:10 2025 GMT Not After : Aug 29 16:08:10 2025 GMT Subject: CN=68a895eb-dafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:f5:aa:d1:9d:b1:e4:49:b8:1d:75:7f:47: 40:27:b4:fb:35:54:10:35:bd:96:c7:f2:97:28:b7: 87:b5:f7:e3:bb:c4:4b:72:b2:92:c1:15:fa:16:02: 12:ce:0c:45:dc:c1:e4:f7:23:3a:cf:42:e3:d9:da: 3f:b0:4c:ea:72:e4:a9:19:e1:94:3d:55:7e:5a:5e: f8:e8:96:64:5f:b7:7a:2c:54:42:f3:47:76:cc:c7: 24:a6:87:81:1e:62:df:ac:70:ff:55:58:7f:f4:f0: e7:9b:9e:c4:c0:da:54:ef:ad:19:fe:91:b4:a8:60: 06:8c:37:b3:be:3b:0f:1c:a1:a5:93:02:36:ad:30: 0f:69:99:bf:cd:e8:77:7e:2c:f5:a6:82:6f:bf:15: b9:f0:b6:92:eb:90:96:a6:47:d3:81:63:bb:4e:c9: b2:61:7b:a6:6d:0b:45:0f:19:75:f8:3c:e5:be:43: f3:21:a2:68:e5:53:6c:ad:04:b4:cd:df:78:00:2a: ed:20:66:3d:c1:80:66:0f:d8:fc:1b:bc:36:c9:d7: 17:b5:96:c1:7b:81:0c:4a:e3:46:e4:b4:97:40:3c: ba:99:35:75:15:67:d7:d2:27:1f:54:cd:92:46:c4: 62:e8:f7:5c:7a:df:81:d8:4f:8b:0c:c6:64:32:0a: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3D:09:FE:C1:CB:18:2B:F2:0F:C1:F1:C0:4C:3A:2F:20:79:77:BB X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:52:a9:22:b5:21:1e:0b:c2:df:40:7d:97:35:03:d2:1e:3e: ea:0a:a9:7b:26:de:d4:5c:e0:90:86:5d:1d:50:db:50:af:77: 96:9e:72:bb:dc:e6:7b:a7:35:17:e0:d7:d2:a5:df:be:8f:d6: f1:b5:ea:15:1f:ee:b6:0e:25:8d:2e:4f:27:aa:00:d9:80:e6: bb:2c:56:5e:f4:5f:1c:5a:46:06:27:20:db:77:69:f4:02:04: 24:62:f1:48:bb:50:de:26:ac:c9:25:36:24:23:c2:52:f7:56: d9:b0:98:7e:0f:5d:2a:70:1b:bb:f0:b4:2d:1e:6f:25:d4:98: dc:15:f2:22:51:dd:be:3c:fe:e1:b8:f8:54:dc:8e:fa:9a:4f: 73:17:73:18:5f:71:8f:dd:ee:e6:7d:09:39:e6:56:37:78:14: b5:e7:02:70:d5:96:b0:69:8a:98:ed:f4:70:30:6c:47:2e:03: a0:1a:f8:d4:72:b7:c4:af:1a:af:3c:a6:16:a5:37:ed:7e:fa: 5a:5b:f2:8d:9e:2b:9c:88:88:96:e9:2f:c8:7a:ae:9c:4f:1e: ac:da:b3:06:fd:6d:5a:54:cb:89:2d:e0:9d:5b:e7:5b:fd:52: de:e0:73:5a:68:79:07:8d:7f:6d:3d:db:95:52:d8:80:8e:da: d0:56:a2:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjUwODIyMTYwODEwWhcNMjUwODI5MTYwODEwWjAYMRYwFAYD VQQDEw02OGE4OTVlYi1kYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlz71qtGdseRJuB11f0dAJ7T7NVQQNb2Wx/KXKLeHtffju8RLcrKSwRX6FgIS zgxF3MHk9yM6z0Lj2do/sEzqcuSpGeGUPVV+Wl746JZkX7d6LFRC80d2zMckpoeB HmLfrHD/VVh/9PDnm57EwNpU760Z/pG0qGAGjDezvjsPHKGlkwI2rTAPaZm/zeh3 fiz1poJvvxW58LaS65CWpkfTgWO7TsmyYXumbQtFDxl1+DzlvkPzIaJo5VNsrQS0 zd94ACrtIGY9wYBmD9j8G7w2ydcXtZbBe4EMSuNG5LSXQDy6mTV1FWfX0icfVM2S RsRi6Pdcet+B2E+LDMZkMgrNNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY9Cf7B yxgr8g/B8cBMOi8geXe7MB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUqkitSEeC8LfQH2XNQPSHj7qCql7Jt7UXOCQhl0dUNtQr3eWnnK7 3OZ7pzUX4NfSpd++j9bxteoVH+62DiWNLk8nqgDZgOa7LFZe9F8cWkYGJyDbd2n0 AgQkYvFIu1DeJqzJJTYkI8JS91bZsJh+D10qcBu78LQtHm8l1JjcFfIiUd2+PP7h uPhU3I76mk9zF3MYX3GP3e7mfQk55lY3eBS15wJw1ZawaYqY7fRwMGxHLgOgGvjU crfErxqvPKYWpTftfvpaW/KNniuciIiW6S/Ieq6cTx6s2rMG/W1aVMuJLeCdW+db /VLe4HNaaHkHjX9tPduVUtiAjtrQVqLa -----END CERTIFICATE-----Generated at Sun Aug 24 00:55:29 2025 by rpki-client