$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft File: zFYVfHLcxpczY2dD21AIdZMtpB8.mft (raw, json) Hash identifier: IXZigQBv0Po/RUEfhWzEcBp5tBLcIWvSaJiWX7avwRg= Subject key identifier: FC:19:D4:53:5D:DE:C2:59:DD:B9:A0:3F:25:AD:3C:8B:AB:0C:F7:79 Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F Certificate issuer: /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft Manifest number: 064C Signing time: Fri 22 Aug 2025 22:48:55 +0000 Manifest this update: Fri 22 Aug 2025 22:48:54 +0000 Manifest next update: Fri 29 Aug 2025 22:48:54 +0000 Files and hashes: 1: zFYVfHLcxpczY2dD21AIdZMtpB8.crl (hash: AIogXvPRh/C+iZ55IrzqbeX7RoxrcZbWjqE7YtIO/40=) 2: A210E7309CAB11EBAB87D43AC4F9AE02.roa (hash: Up4WhD3Nf9WRZOsGh/RIfu2ds6rWcEA9ea8zVjDFpwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6CD6, serialNumber=CC56157C72DCC69733636743DB500875932DA41F Validity Not Before: Aug 22 22:48:54 2025 GMT Not After : Aug 29 22:48:54 2025 GMT Subject: CN=68a8f3d7-a62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:04:dd:4f:bd:d0:42:1b:b3:fe:b4:63:0a: bd:b8:6a:87:57:49:a7:de:8b:ac:c1:71:ce:19:ac: 01:29:d1:6f:da:b7:7f:1a:92:33:4f:2a:92:e9:aa: 39:69:e8:8d:46:85:b0:2b:db:80:9d:f7:bf:85:47: 8c:9d:d7:50:f1:ed:0a:a0:3d:4a:72:5d:e9:f4:6e: 6e:dd:f7:82:b9:51:ad:13:74:74:2e:22:5f:aa:ac: 00:c8:82:04:4f:89:18:35:22:b0:c0:1d:93:a2:84: 3c:5b:72:ff:1b:cf:6e:27:ab:f4:b9:62:0f:48:60: c3:e7:35:9b:aa:a9:22:04:51:a4:1e:01:b1:ce:ba: af:25:f4:64:b7:6f:a4:78:98:6c:60:4f:80:cf:7a: 20:0c:dd:20:d6:27:c1:6d:07:34:f5:e9:49:c4:83: b4:14:fc:29:0b:81:f0:1e:8a:fe:0e:80:66:69:49: 65:57:d4:eb:f4:b7:e7:ea:b4:bf:69:a5:e9:66:bc: be:75:30:df:a5:93:41:4c:96:e4:48:57:50:8b:39: 4d:9f:b0:f0:95:4e:36:0b:80:c5:62:c6:1b:ad:eb: 3a:a3:fa:ed:52:3d:36:6a:a8:2f:90:df:27:8c:07: 31:15:67:80:ef:8a:1a:ae:5a:88:eb:78:56:46:8a: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:D4:53:5D:DE:C2:59:DD:B9:A0:3F:25:AD:3C:8B:AB:0C:F7:79 X509v3 Authority Key Identifier: keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b7:cc:d7:25:8c:42:19:47:75:99:4a:e8:98:42:1d:86:c3: 72:60:d7:e8:ff:45:23:2e:40:5d:8e:e7:54:cf:bf:f5:64:41: e8:05:34:d6:5e:95:aa:15:5a:54:e4:2f:bc:e8:b3:40:a8:5f: bb:3e:f0:a4:0b:e4:59:1a:1c:7a:03:e9:0e:7d:87:99:d2:0c: 0f:e2:d4:a8:f3:08:fb:bd:12:02:42:ce:fd:ba:f6:1f:3a:e9: 15:75:58:1c:ff:6e:6d:34:bf:f2:d8:d7:bf:d3:26:1d:ee:34: 76:a5:60:b2:01:b5:f8:61:57:34:3f:da:98:47:df:0b:2a:81: 25:0a:45:d5:bf:c7:db:16:a8:2a:3c:de:73:5e:9b:dc:aa:5a: 1a:0d:45:9a:8a:62:c3:fb:f2:76:f2:0d:06:a4:43:1d:3f:5d: 09:8b:90:4d:63:3a:b1:59:36:c9:6f:5c:7a:b3:a8:9a:6e:f9: 33:15:91:72:72:cd:60:95:d4:88:4c:47:61:66:cb:ba:fd:18: 69:b5:1f:e1:68:c0:07:d0:f2:8a:33:21:9a:e4:d4:8e:b5:48: ab:35:8d:2c:f7:2e:8c:1b:70:38:92:7e:d7:91:6d:ce:a5:85: eb:2d:53:13:f6:3a:f0:8a:24:88:2c:e4:0b:e0:7f:f8:ec:cb: 60:88:bf:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZDRDYxMTAvBgNVBAUTKENDNTYxNTdDNzJEQ0M2OTczMzYzNjc0M0RCNTAwODc1 OTMyREE0MUYwHhcNMjUwODIyMjI0ODU0WhcNMjUwODI5MjI0ODU0WjAYMRYwFAYD VQQDEw02OGE4ZjNkNy1hNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoX0E3U+90EIbs/60Ywq9uGqHV0mn3ouswXHOGawBKdFv2rd/GpIzTyqS6ao5 aeiNRoWwK9uAnfe/hUeMnddQ8e0KoD1Kcl3p9G5u3feCuVGtE3R0LiJfqqwAyIIE T4kYNSKwwB2TooQ8W3L/G89uJ6v0uWIPSGDD5zWbqqkiBFGkHgGxzrqvJfRkt2+k eJhsYE+Az3ogDN0g1ifBbQc09elJxIO0FPwpC4HwHor+DoBmaUllV9Tr9Lfn6rS/ aaXpZry+dTDfpZNBTJbkSFdQizlNn7DwlU42C4DFYsYbres6o/rtUj02aqgvkN8n jAcxFWeA74oarlqI63hWRor1ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwZ1FNd 3sJZ3bmgPyWtPIurDPd5MB8GA1UdIwQYMBaAFMxWFXxy3MaXM2NnQ9tQCHWTLaQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkNENi82NUU2REJENjlD QTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hwY3pZMmREMjFBSWRaTXRw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWVZmSExjeHBjelkyZEQyMUFJZFpNdHBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkNENi82NUU2REJENjlDQTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hw Y3pZMmREMjFBSWRaTXRwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFt8zXJYxCGUd1mUromEIdhsNyYNfo/0UjLkBdjudUz7/1ZEHoBTTW XpWqFVpU5C+86LNAqF+7PvCkC+RZGhx6A+kOfYeZ0gwP4tSo8wj7vRICQs79uvYf OukVdVgc/25tNL/y2Ne/0yYd7jR2pWCyAbX4YVc0P9qYR98LKoElCkXVv8fbFqgq PN5zXpvcqloaDUWaimLD+/J28g0GpEMdP10Ji5BNYzqxWTbJb1x6s6iabvkzFZFy cs1gldSITEdhZsu6/RhptR/haMAH0PKKMyGa5NSOtUirNY0s9y6MG3A4kn7XkW3O pYXrLVMT9jrwiiSILOQL4H/47MtgiL8C -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:47 2025 by rpki-client