$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft File: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json) Hash identifier: onPnPOXnn6vATF8bHST1LQNudrnCB9TC9rby6ulpJuQ= Subject key identifier: 37:20:00:2A:17:D1:82:B2:E2:C9:3B:C4:80:E3:8D:9C:2B:60:AD:40 Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft Manifest number: 0664 Signing time: Fri 22 Aug 2025 22:42:43 +0000 Manifest this update: Fri 22 Aug 2025 22:42:43 +0000 Manifest next update: Fri 29 Aug 2025 22:42:43 +0000 Files and hashes: 1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: i0E/e02iVvdHHXLKvORV6LIygZSZFDUkhPzePO622Lo=) 2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: DxARsL+2J5rkvhwXm2iR36A3nQFpWBmz2UuZUXtaoP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Validity Not Before: Aug 22 22:42:43 2025 GMT Not After : Aug 29 22:42:43 2025 GMT Subject: CN=68a8f263-d781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:6b:43:10:ed:6e:83:f9:44:b7:6d:9c:61: c0:16:6e:53:cc:36:a0:dd:25:d9:1d:4b:63:50:96: 25:3e:dc:79:86:5b:f7:8d:f8:d0:a2:86:50:ed:42: ea:28:49:20:2e:79:95:8d:5d:fd:9b:1b:9a:66:50: b5:11:53:d0:97:48:1d:c9:9e:2f:1b:c5:48:a6:b9: 1e:a2:0b:de:ce:dd:30:da:46:50:7e:33:49:ee:8b: c9:76:cd:40:23:df:26:d0:06:c7:56:8c:f5:b9:34: c0:9f:7c:d8:11:e8:70:1b:35:77:cd:d4:17:93:27: 28:53:85:5f:50:2d:c2:3e:c9:ca:9d:8c:f1:4b:c0: 98:ba:ef:dd:d9:82:e1:58:0f:9c:5a:37:b8:7f:c7: 9b:f4:25:4f:ef:a5:a0:a3:74:d6:f1:70:af:5f:ef: 5b:ec:31:69:1c:2c:d5:62:d0:1c:94:8c:11:af:a0: 09:c7:c4:b7:e1:be:12:cc:ff:b6:af:39:97:01:22: 77:ca:53:f3:51:63:64:6c:ff:db:15:a8:76:c7:14: d4:a3:c4:e1:fd:a8:fd:61:e8:0a:00:08:ef:d1:f8: ec:3b:2a:93:52:10:79:a6:91:a5:4b:bb:68:ce:2b: a0:fc:72:57:e7:da:c3:19:8e:ad:e7:b5:3e:9f:ec: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:20:00:2A:17:D1:82:B2:E2:C9:3B:C4:80:E3:8D:9C:2B:60:AD:40 X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d5:82:b9:f2:5f:cd:3b:a1:d3:d9:d3:43:23:f0:ea:1f:a0: 97:55:9c:4e:d2:65:2a:b3:73:a5:59:9a:8d:dd:10:3b:34:ba: 70:7f:1f:aa:64:fe:43:84:d3:88:c2:59:3c:47:b2:d1:46:cc: 1d:f4:53:91:8a:9b:68:e4:d5:95:23:65:86:28:36:c3:5d:77: bc:26:24:e2:dc:36:bf:52:67:eb:f4:27:a5:41:52:83:f4:78: c7:cd:de:5c:cf:e7:31:c3:12:8a:ab:b4:9d:63:87:12:29:42: d3:97:55:ad:31:b1:61:2b:bf:5d:b4:ba:e6:45:6b:bc:d9:8c: 76:e4:af:0f:57:16:97:7a:5e:80:3f:5c:89:c8:0c:1b:ec:7d: 20:25:be:d3:ae:fd:a6:9f:c0:75:23:f1:8e:56:6a:b0:7f:db: 13:62:c8:5a:24:58:b2:d4:27:95:69:ea:0c:41:45:89:32:d6: d7:ec:2e:98:5b:96:82:7f:47:ff:0a:c3:d1:05:d2:ab:d7:29: d5:3e:90:cd:4d:2b:3c:1b:1c:97:90:bf:95:c4:45:f2:d1:49: ec:16:3a:a4:b4:2d:df:ca:7d:a4:70:f3:ef:b6:7a:a2:39:68: 5f:c8:d1:7f:93:9c:f4:42:d4:3b:4c:02:bd:f2:cc:ee:5d:4c: 5b:20:7e:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjUwODIyMjI0MjQzWhcNMjUwODI5MjI0MjQzWjAYMRYwFAYD VQQDEw02OGE4ZjI2My1kNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfprQxDtboP5RLdtnGHAFm5TzDag3SXZHUtjUJYlPtx5hlv3jfjQooZQ7ULq KEkgLnmVjV39mxuaZlC1EVPQl0gdyZ4vG8VIprkeogvezt0w2kZQfjNJ7ovJds1A I98m0AbHVoz1uTTAn3zYEehwGzV3zdQXkycoU4VfUC3CPsnKnYzxS8CYuu/d2YLh WA+cWje4f8eb9CVP76Wgo3TW8XCvX+9b7DFpHCzVYtAclIwRr6AJx8S34b4SzP+2 rzmXASJ3ylPzUWNkbP/bFah2xxTUo8Th/aj9YegKAAjv0fjsOyqTUhB5ppGlS7to ziug/HJX59rDGY6t57U+n+yccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcgACoX 0YKy4sk7xIDjjZwrYK1AMB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE1MC81ODQyRTlFMDkyQzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRN M1RpZE5UOE9EbkxKZHp6b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ1YK58l/NO6HT2dNDI/DqH6CXVZxO0mUqs3OlWZqN3RA7NLpwfx+q ZP5DhNOIwlk8R7LRRswd9FORipto5NWVI2WGKDbDXXe8JiTi3Da/Umfr9CelQVKD 9HjHzd5cz+cxwxKKq7SdY4cSKULTl1WtMbFhK79dtLrmRWu82Yx25K8PVxaXel6A P1yJyAwb7H0gJb7Trv2mn8B1I/GOVmqwf9sTYshaJFiy1CeVaeoMQUWJMtbX7C6Y W5aCf0f/CsPRBdKr1ynVPpDNTSs8GxyXkL+VxEXy0UnsFjqktC3fyn2kcPPvtnqi OWhfyNF/k5z0QtQ7TAK98szuXUxbIH4b -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:45 2025 by rpki-client