$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft File: ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json) Hash identifier: 5QJ0ze8AMZ0G7bVW3A21Mk37GQdQECyKSHA5CatJMgE= Subject key identifier: 40:B7:1A:9E:3E:D3:1B:9B:B8:7F:B1:E6:07:D3:0B:42:B1:F0:F2:21 Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47 Certificate issuer: /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47 Certificate serial: 1736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft Manifest number: 172A Signing time: Fri 22 Aug 2025 16:44:15 +0000 Manifest this update: Fri 22 Aug 2025 16:44:15 +0000 Manifest next update: Fri 29 Aug 2025 16:44:15 +0000 Files and hashes: 1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: Oq8R1GrZGjGhB6jcjFw9m3Joj6rqiKGiOkbui2/M5z4=) 2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: PelwRr9hgP7dCYd5KU90WVUNYfa/KyN0aFEd88yUz4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5942 (0x1736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47 Validity Not Before: Aug 22 16:44:15 2025 GMT Not After : Aug 29 16:44:15 2025 GMT Subject: CN=68a89e5f-6dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:a3:83:7d:46:6d:aa:00:04:ef:84:41:b7: 17:b6:75:d3:59:ea:46:33:cf:cd:a9:a7:c4:6e:85: 79:96:c8:fb:c7:79:a5:2a:87:26:b6:ff:bb:e0:14: 22:35:3d:eb:31:4a:a1:5e:5b:2c:96:23:83:7d:66: 42:3f:77:0f:42:6c:bf:5c:2b:0d:84:31:d1:b3:02: 32:aa:0f:06:7c:fb:4d:6e:9a:d6:9d:c0:fd:cd:d5: 4f:d5:ae:ce:72:3c:85:1a:50:2b:94:da:9e:ad:22: b0:cd:e6:a2:ea:28:43:97:e6:29:1e:f8:77:ea:15: a5:89:e0:3f:01:5b:dd:12:c5:ce:21:2f:cf:8d:40: 0e:ec:76:af:55:8b:bd:ec:8c:a1:9b:3c:53:1d:2f: ba:15:e9:a9:87:b4:17:54:58:d7:4d:4e:87:7e:88: 84:c2:28:8e:1f:e1:54:18:ed:21:f5:cc:00:7d:a8: 92:07:45:8b:4b:39:34:59:c6:bd:1d:99:d7:af:96: fd:bc:91:8f:1f:ba:c2:04:8f:68:3e:08:6a:ed:5b: d3:46:fe:f4:45:46:78:3a:e3:f5:3d:9f:03:df:f6: 64:1c:c2:6c:7a:71:7c:51:de:6e:7a:4c:7f:39:b4: f4:b0:e1:af:33:66:d8:cf:18:86:84:f0:11:e4:76: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:1A:9E:3E:D3:1B:9B:B8:7F:B1:E6:07:D3:0B:42:B1:F0:F2:21 X509v3 Authority Key Identifier: keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6a:5c:4a:fd:93:da:40:60:46:c0:bb:94:8a:df:d3:8c:71: 39:39:f2:cb:f1:5c:a3:9d:03:ad:18:bd:e1:e2:8f:16:12:eb: cc:79:24:0d:03:60:c7:58:0c:1e:6f:7e:4b:67:81:c8:79:7e: e0:53:e3:fa:65:e6:9e:a0:ba:c7:f2:55:1b:8e:bc:74:9c:46: fc:02:0b:1e:55:98:2d:33:b9:5a:77:6a:99:4b:94:62:3a:d0: 60:89:38:3f:a1:db:89:b9:0b:80:14:37:c5:57:d2:ab:59:0c: 21:0b:38:aa:77:9e:6b:5f:3d:e4:10:64:ee:8e:2a:f9:13:13: fa:23:9f:2c:37:95:70:df:52:7f:52:c8:e4:40:5d:b7:4a:75: 2e:82:3f:60:d9:ed:61:8f:70:6d:2c:c0:02:01:a5:e2:11:e9: c0:72:95:e2:cd:03:22:92:56:53:90:e8:7c:8e:06:e1:9b:d9: be:d0:b4:4d:2c:22:d8:e6:f7:45:5a:6e:77:42:c6:8a:a3:47: d1:73:88:27:c3:01:54:e4:b6:e6:a0:b0:2e:c8:e3:86:55:9c: b9:de:30:c4:94:d7:90:d6:57:9e:15:75:f4:64:8d:e4:6b:9e: 09:e7:35:4a:e2:51:f4:7a:a9:e6:16:49:a1:e5:5f:a8:82:08: b1:5c:ad:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMTkxMTAvBgNVBAUTKDY1NTNDM0MyMTgwQjk3RTJFQjM3Q0I3MUY2QTFDRUFB N0I5NUNBNDcwHhcNMjUwODIyMTY0NDE1WhcNMjUwODI5MTY0NDE1WjAYMRYwFAYD VQQDEw02OGE4OWU1Zi02ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy92jg31GbaoABO+EQbcXtnXTWepGM8/NqafEboV5lsj7x3mlKocmtv+74BQi NT3rMUqhXlssliODfWZCP3cPQmy/XCsNhDHRswIyqg8GfPtNbprWncD9zdVP1a7O cjyFGlArlNqerSKwzeai6ihDl+YpHvh36hWlieA/AVvdEsXOIS/PjUAO7HavVYu9 7IyhmzxTHS+6Femph7QXVFjXTU6HfoiEwiiOH+FUGO0h9cwAfaiSB0WLSzk0Wca9 HZnXr5b9vJGPH7rCBI9oPghq7VvTRv70RUZ4OuP1PZ8D3/ZkHMJsenF8Ud5uekx/ ObT0sOGvM2bYzxiGhPAR5HZWnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC3Gp4+ 0xubuH+x5gfTC0Kx8PIhMB8GA1UdIwQYMBaAFGVTw8IYC5fi6zfLcfahzqp7lcpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIxOS9FQzBBNzBGOEVB ODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwtTHJOOHR4OXFIT3FudVZ5 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUER3aGdMbC1Mck44dHg5cUhPcW51VnlrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIxOS9FQzBBNzBGOEVBODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwt THJOOHR4OXFIT3FudVZ5a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbalxK/ZPaQGBGwLuUit/TjHE5OfLL8VyjnQOtGL3h4o8WEuvMeSQN A2DHWAweb35LZ4HIeX7gU+P6ZeaeoLrH8lUbjrx0nEb8AgseVZgtM7lad2qZS5Ri OtBgiTg/oduJuQuAFDfFV9KrWQwhCziqd55rXz3kEGTujir5ExP6I58sN5Vw31J/ UsjkQF23SnUugj9g2e1hj3BtLMACAaXiEenAcpXizQMiklZTkOh8jgbhm9m+0LRN LCLY5vdFWm53QsaKo0fRc4gnwwFU5LbmoLAuyOOGVZy53jDElNeQ1leeFXX0ZI3k a54J5zVK4lH0eqnmFkmh5V+oggixXK20 -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:46 2025 by rpki-client